[zh] Sync #14734 GKE prerequisite into Chinese (#14850)

* Sync #14734 GKE prerequisite into Chinese

* fix

* fix

* Update content/zh/docs/ops/ambient/install/platform-prerequisites/index.md

Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>

---------

Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>
This commit is contained in:
Wilson Wu 2024-04-08 10:58:54 +08:00 committed by GitHub
parent 36aec40a99
commit 53d4290f8c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 28 additions and 0 deletions

View File

@ -10,6 +10,34 @@ test: no
## 平台 {#platform}
### Google Kubernetes EngineGKE {#google-kubernetes-engine-gke}
1. 在 GKE 上,具有 [system-node-critical](https://kubernetes.io/zh-cn/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)
`priorityClassName` 的 Istio 组件只能被安装在定义了[资源配额](https://kubernetes.io/zh-cn/docs/concepts/policy/resource-quotas/)的命名空间中。
默认情况下,在 GKE 中,只有 `kube-system``node-critical`
类定义了资源配额。`istio-cni` 和 `ztunnel` 都需要 `node-ritic` 类,
因此在 GKE 中,这两个组件需要:
- 被安装到 `kube-system`**不是** `istio-system`
- 被安装到另一个已手动创建资源配额的命名空间中(如 `istio-system`),例如:
{{< text syntax=yaml snip_id=none >}}
apiVersion: v1
kind: ResourceQuota
metadata:
name: gcp-critical-pods
namespace: istio-system
spec:
hard:
pods: 1000
scopeSelector:
matchExpressions:
- operator: In
scopeName: PriorityClass
values:
- system-node-critical
{{< /text >}}
### Minikube {#minikube}
1. 如果您使用 [Minikube](https://kubernetes.io/docs/tasks/tools/install-minikube/)