On this page
istioctl multicluster expose
Reference for the istioctl multicluster expose command.
istioctl multicluster expose
Expose mesh-enrolled services in a cluster for remote access through an east-west gateway.
Synopsis
‘istioctl multicluster expose’ creates an east-west gateway to facilitate traffic between services in each cluster in your multicluster mesh. The east-west gateway, which uses the ‘istio-eastwest’ gateway class, is implemented as a ztunnel. Example use cases include deploying an east-west gateway to each Kubernetes cluster in a multicluster ambient mesh, to facilitate traffic between services across clusters in the mesh; or deploying an east-west gateway in the ambient mesh of a Kubernetes cluster to receive requests from ECS cluster services enrolled in the mesh.
istioctl multicluster expose [flags]
Examples
# Create an east-west gateway in the 'istio-eastwest' namespace.
istioctl multicluster expose --namespace istio-eastwest
Options
--data-plane-service-types strings The service type that peered data plane connections can use with this gateway. Supported values are one of: loadbalancer, nodeport (default [loadbalancer])
--generate Only output the generated gateway YAML configuration instead of applying it.
-h, --help help for expose
--region string Region to mark this cluster as. If not set, the region is auto-detected.
-r, --revision string The revision to use.
-w, --wait Wait for the gateway to be ready before returning.
--zone string Zone to mark this cluster as. Only set this option if the cluster runs in a single zone.
Options inherited from parent commands
--as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace
--as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
--as-uid string UID to impersonate for the operation.
--context string Kubernetes configuration context
-i, --istioNamespace string Istio system namespace (default "istio-system")
--kubeclient-timeout string Kubernetes client timeout as a time.Duration string, defaults to 15 seconds. (default "15s")
-c, --kubeconfig string Kubernetes configuration file
-n, --namespace string Kubernetes namespace
--out string output directory (default "/tmp/istioctl-cli-docs/1.29")