istioctl multicluster expose

Expose mesh-enrolled services in a cluster for remote access through an east-west gateway.

Synopsis

‘istioctl multicluster expose’ creates an east-west gateway to facilitate traffic between services in each cluster in your multicluster mesh. The east-west gateway, which uses the ‘istio-eastwest’ gateway class, is implemented as a ztunnel. Example use cases include deploying an east-west gateway to each Kubernetes cluster in a multicluster ambient mesh, to facilitate traffic between services across clusters in the mesh; or deploying an east-west gateway in the ambient mesh of a Kubernetes cluster to receive requests from ECS cluster services enrolled in the mesh.

  istioctl multicluster expose [flags]
  

Examples

    # Create an east-west gateway in the 'istio-eastwest' namespace.
  istioctl multicluster expose --namespace istio-eastwest
  

Options

        --data-plane-service-types strings  The service type that peered data plane connections can use with this gateway. Supported values are one of: loadbalancer, nodeport (default [loadbalancer])
      --generate                          Only output the generated gateway YAML configuration instead of applying it.
      -h, --help                          help for expose
      --region string                     Region to mark this cluster as. If not set, the region is auto-detected.
      -r, --revision string               The revision to use.
      -w, --wait                          Wait for the gateway to be ready before returning.
      --zone string                       Zone to mark this cluster as. Only set this option if the cluster runs in a single zone.
  

Options inherited from parent commands

        --as string                  Username to impersonate for the operation. User could be a regular user or a service account in a namespace
      --as-group stringArray       Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string              UID to impersonate for the operation.
      --context string             Kubernetes configuration context
      -i, --istioNamespace string  Istio system namespace (default "istio-system")
      --kubeclient-timeout string  Kubernetes client timeout as a time.Duration string, defaults to 15 seconds. (default "15s")
      -c, --kubeconfig string      Kubernetes configuration file
      -n, --namespace string       Kubernetes namespace
      --out string                 output directory (default "/tmp/istioctl-cli-docs/1.29")