Istio 速率限制错误(未配置请求的配额"请求计数")

Question

我正在关注文档中此任务的 Istio 速率限制部分： https://istio.io/docs/tasks/policy-enforcement/rate-limiting/

我正确设置了 bookinfo 应用程序，我有一个用于产品页面(以及 bookinfo 的所有其他组件(的虚拟服务，并且我按原样运行他们的代码，但速率限制对我不起作用。

每次我点击产品页面的网址时，它都可以工作，根本没有发生速率限制。但是，每次我点击 url 时，我都会在混音器日志中看到此消息：

kubectl -n istio-system logs $(kubectl -n istio-system get pods -lapp=policy -o jsonpath='{.items[0].metadata.name}') -c mixer
2018-09-21T16:06:28.456449Z     warn    Requested quota 'requestcount' is not configured

不过，请求计数配额肯定已设置：

apiVersion: "config.istio.io/v1alpha2"
kind: quota
metadata:
name: requestcount
namespace: istio-system
spec:
dimensions:
source: request.headers["x-forwarded-for"] | "unknown"
destination: destination.labels["app"] | destination.service | "unknown"
destinationVersion: destination.labels["version"] | "unknown"

当我应用完整的yaml文件时，我看到：

memquota.config.istio.io "handler" configured
quota.config.istio.io "requestcount" configured
quotaspec.config.istio.io "request-count" configured
quotaspecbinding.config.istio.io "request-count" configured
rule.config.istio.io "quota" configured

如果我在跑步时看到以下内容

kubectl get quota requestcount -n istio-system -o yaml
apiVersion: config.istio.io/v1alpha2
kind: quota
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"config.istio.io/v1alpha2","kind":"quota","metadata":{"annotations":{},"name":"requestcount","namespace":"istio-system"},"spec":{"dimensions":{"destination":"destination.labels["app"] | destination.service | "unknown"","destinationVersion":"destination.labels["version"] | "unknown"","source":"request.headers["x-forwarded-for"] | "unknown""}}}
clusterName: ""
creationTimestamp: 2018-09-21T16:02:23Z
generation: 1
name: requestcount
namespace: istio-system
resourceVersion: "263792"
selfLink: /apis/config.istio.io/v1alpha2/namespaces/istio-system/quotas/requestcount
uid: ba4d2510-bdb7-11e8-b8c9-025000000001
spec:
dimensions:
destination: destination.labels["app"] | destination.service | "unknown"
destinationVersion: destination.labels["version"] | "unknown"
source: request.headers["x-forwarded-for"] | "unknown"

那么，为什么我会收到此消息呢？

Answer 1

我遇到了这个问题，并通过确保rule与quota位于同一命名空间中来修复它

---
apiVersion: "config.istio.io/v1alpha2"
kind: quota
metadata:
name: requestcount
namespace: istio-system
spec:
dimensions:
source: request.headers["x-forwarded-for"] | "unknown"
destination: destination.labels["app"] | destination.service | "unknown"
destinationVersion: destination.labels["version"] | "unknown"
---
apiVersion: config.istio.io/v1alpha2
kind: rule
metadata:
name: quota
namespace: istio-system
spec:
# quota only applies if you are not logged in.
# match: match(request.headers["cookie"], "user=*") == false
actions:
- handler: handler.memquota
instances:
- requestcount.quota