官方步骤
https://istio.io/latest/docs/setup/install/helm/#installation-steps
两个安装的坑要注意
Readiness probe failed: HTTP probe failed with statuscode: 503
可以在istio-ingress的deployment中注释掉readinessProbe
idtiod 的 jwtPolicy 问题
要开启 --set global.jwtPolicy=first-party-jwt
helm install istiod manifests/charts/istio-control/istio-discovery --set global.jwtPolicy=first-party-jwt -n istio-system
helm install istio-ingress manifests/charts/gateways/istio-ingress --set global.jwtPolicy=first-party-jwt -n istio-system
参考
https://blog.51cto.com/u_10272167/2730591