让OpenShift Serivce Mesh自动对服务注入sidecar

和Istio稍有不同，OpenShift Service Mesh缺省不会自动对服务注入sidecar容器。以istio的helloworld为例，在执行以下命令后，每个Pod只运行了一个容器，并没有自动注入对应的sidecar容器。

$ oc create -f https://raw.githubusercontent.com/istio/istio/master/samples/helloworld/helloworld.yaml
$ oc get pod
NAME                             READY   STATUS    RESTARTS   AGE
helloworld-v1-7bb88866c4-kd4jj   1/1     Running   0          3m32s
helloworld-v2-6cd449dff4-xtf2n   1/1     Running   0          3m32s

为了实现自动sidecar容器注入，只需要在Deployment定义中增加以下内容即可：

  annotations:
    sidecar.istio.io/inject: "true"

例如上述helloworld.yaml，将其下载然后修改为以下内容：

apiVersion: v1
kind: Service
metadata:
  name: helloworld
  labels:
    app: helloworld
spec:
  ports:
  - port: 5000
    name: http
  selector:
    app: helloworld
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: helloworld-v1
  labels:
    version: v1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: helloworld
      version: v1
  template:
    metadata:
      annotations:
        sidecar.istio.io/inject: "true"
      labels:
        app: helloworld
        version: v1
    spec:
      containers:
      - name: helloworld
        image: docker.io/istio/examples-helloworld-v1
        resources:
          requests:
            cpu: "100m"
        imagePullPolicy: IfNotPresent #Always
        ports:
        - containerPort: 5000
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: helloworld-v2
  labels:
    version: v2
spec:
  replicas: 1
  selector:
    matchLabels:
      app: helloworld
      version: v2
  template:
    metadata:
      annotations:
        sidecar.istio.io/inject: "true"
      labels:
        app: helloworld
        version: v2
    spec:
      containers:
      - name: helloworld
        image: docker.io/istio/examples-helloworld-v2
        resources:
          requests:
            cpu: "100m"
        imagePullPolicy: IfNotPresent #Always
        ports:
        - containerPort: 5000

当OpenShift配置Service Mesh Plane后执行命令创建微服务，可以看到OpenShift可以自动生成注入sidecar容器了。

$ oc create -f helloworld.yaml
$ oc get pod
NAME                             READY   STATUS    RESTARTS   AGE
helloworld-v1-54fd8d846-7jklf    2/2     Running   0          16m
helloworld-v2-576ccf4654-94vkb   2/2     Running   0          18m