Istio 部署保留监控的情况下最小化安装使用的Helm配置文件

不支持自动注入 sidecar, 需要手动通过命令行注入sidecar

# This is used to generate minimal demo mode. It is included from demo and demo-auth values.
# It is shipped with the release, used for bookinfo or quick installation of istio.
# Includes components used in the demo, defaults to alpha3 rules.
# Note: please only put common configuration for the demo profiles here.
global:
  proxy:
    accessLogFile: "/dev/stdout"
    resources:
      requests:
        cpu: 10m
        memory: 40Mi

  disablePolicyChecks: true
  controlPlaneSecurityEnabled: false

  mtls:
    # Default setting for service-to-service mtls. Can be set explicitly using
    # destination rules or service annotations.
    enabled: false

pilot:
  traceSampling: 100.0

mixer:
  policy:
    enabled: false
    resources:
      requests:
        cpu: 10m
        memory: 100Mi
      limits:
        cpu: 100m
        memory: 100Mi

  telemetry:
    enabled: true
    resources:
      requests:
        cpu: 50m
        memory: 100Mi
      limits:
        cpu: 100m
        memory: 100Mi
 
  adapters:
    stdio:
      enabled: true

galley:
  enabled: true

security:
  enabled: true
 
grafana:
  enabled: true

prometheus:
  enabled: false

tracing:
  enabled: false

kiali:
  enabled: false
  createDemoSecret: false

gateways:
  istio-egressgateway:
    enabled: false

sidecarInjectorWebhook:
  enabled: false
  # If true, webhook or istioctl injector will rewrite PodSpec for liveness
  # health check to redirect request to sidecar. This makes liveness check work
  # even when mTLS is enabled.
  rewriteAppHTTPProbe: false

下面是开启 sidecar自动注入

# This is used to generate minimal demo mode. It is included from demo and demo-auth values.
# It is shipped with the release, used for bookinfo or quick installation of istio.
# Includes components used in the demo, defaults to alpha3 rules.
# Note: please only put common configuration for the demo profiles here.
global:
  proxy:
    accessLogFile: "/dev/stdout"
    resources:
      requests:
        cpu: 10m
        memory: 40Mi

  disablePolicyChecks: true
  controlPlaneSecurityEnabled: false

  mtls:
    # Default setting for service-to-service mtls. Can be set explicitly using
    # destination rules or service annotations.
    enabled: false

pilot:
  traceSampling: 100.0

mixer:
  policy:
    enabled: false
    resources:
      requests:
        cpu: 10m
        memory: 100Mi
      limits:
        cpu: 100m
        memory: 100Mi

  telemetry:
    enabled: true
    resources:
      requests:
        cpu: 50m
        memory: 100Mi
      limits:
        cpu: 100m
        memory: 100Mi
 
  adapters:
    stdio:
      enabled: true

galley:
  enabled: true

security:
  enabled: true
 
grafana:
  enabled: true

prometheus:
  enabled: false

tracing:
  enabled: false

kiali:
  enabled: false
  createDemoSecret: false

gateways:
  istio-egressgateway:
    enabled: false

sidecarInjectorWebhook:
  enabled: true
  # If true, webhook or istioctl injector will rewrite PodSpec for liveness
  # health check to redirect request to sidecar. This makes liveness check work
  # even when mTLS is enabled.
  rewriteAppHTTPProbe: false