Multicluster ambient peering
Review Helm values for the multicluster ambient peering Helm chart.
The peering Helm chart is available in the Solo distribution of Istio 1.29 and later. For steps on how to use this chart to connect clusters in a multicluster ambient mesh, see the ambient multicluster installation guides.
| Option | Type | Description | Default Value |
|---|---|---|---|
| eastwest.create | boolean | Whether to create the east-west gateway | false |
| eastwest.dataplaneServiceTypes | array (string) | List of data plane service types for the east-west gateway | [loadbalancer] |
| eastwest.peerCaCrl | object | Certificate Revocation List (CRL) support for plugged-in CAs | {} |
| eastwest.peerCaCrl.enabled | boolean | When true, mounts the istio-ca-crl ConfigMap into the eastwest gateway deployment | false |
| eastwest.name | string | Name of the east-west gateway. Defaults to istio-eastwest if unset. | |
| eastwest.cluster | string | Cluster ID for the east-west gateway | "" |
| eastwest.network | string | Network name for the east-west gateway | "" |
| eastwest.region | string | Region for topology labels | "" |
| eastwest.zone | string | Zone for topology labels | "" |
| eastwest.labels | object | Additional labels to add to the east-west Gateway resource | {} |
| eastwest.annotations | object | Additional annotations to add to the east-west Gateway resource | {} |
| eastwest.serviceType | string | Kubernetes service type for the east-west gateway | |
| eastwest.deployment | object | Kubernetes Deployment spec patch for the east-west gateway | {} |
| eastwest.deployment.spec | object | Deployment spec | |
| eastwest.deployment.spec.replicas | integer | ||
| eastwest.deployment.spec.template.spec.containers[].name | string | ||
| eastwest.deployment.spec.template.spec.containers[].image | string | ||
| eastwest.deployment.template | object | Pod template spec (deprecated: use spec.template instead) | |
| eastwest.deployment.template.spec.containers[].name | string | ||
| eastwest.deployment.template.spec.containers[].image | string | ||
| eastwest.service | object | Kubernetes Service spec patch for the east-west gateway | {} |
| eastwest.service.spec | object | Service spec | |
| eastwest.service.spec.type | string | ||
| eastwest.service.spec.ports[].name | string | ||
| eastwest.service.spec.ports[].port | integer | ||
| eastwest.service.spec.ports[].protocol | string | ||
| eastwest.service.spec.ports[].nodePort | integer | ||
| eastwest.service.spec.clusterIP | string | ||
| eastwest.service.spec.sessionAffinity | string | ||
| eastwest.service.spec.loadBalancerIP | string | ||
| eastwest.service.spec.externalName | string | ||
| eastwest.service.spec.externalTrafficPolicy | string | ||
| eastwest.service.spec.healthCheckNodePort | integer | ||
| eastwest.service.spec.publishNotReadyAddresses | boolean | ||
| eastwest.service.spec.ipFamily | string | ||
| eastwest.service.spec.ipFamilyPolicy | string | ||
| eastwest.service.spec.allocateLoadBalancerNodePorts | boolean | ||
| eastwest.service.spec.loadBalancerClass | string | ||
| eastwest.service.spec.internalTrafficPolicy | string | ||
| eastwest.serviceAccount | object | Kubernetes ServiceAccount spec patch for the east-west gateway | {} |
| eastwest.serviceAccount.metadata.name | string | ||
| eastwest.serviceAccount.metadata.namespace | string | ||
| eastwest.serviceAccount.automountServiceAccountToken | boolean | ||
| eastwest.serviceAccount.imagePullSecrets[].name | string | ||
| eastwest.horizontalPodAutoscaler | object | Kubernetes HorizontalPodAutoscaler spec patch for the east-west gateway | {} |
| eastwest.horizontalPodAutoscaler.spec | object | HorizontalPodAutoscaler spec | |
| eastwest.horizontalPodAutoscaler.spec.minReplicas | integer | ||
| eastwest.horizontalPodAutoscaler.spec.maxReplicas | integer | ||
| eastwest.horizontalPodAutoscaler.spec.targetCPUUtilizationPercentage | integer | ||
| eastwest.horizontalPodAutoscaler.spec.targetMemoryUtilizationPercentage | integer | ||
| eastwest.horizontalPodAutoscaler.spec.metrics[].type | string | ||
| eastwest.horizontalPodAutoscaler.spec.metrics[].resource.name | string | ||
| eastwest.podDisruptionBudget | object | Kubernetes PodDisruptionBudget spec patch for the east-west gateway | {} |
| eastwest.podDisruptionBudget.spec | object | PodDisruptionBudget spec | |
| eastwest.podDisruptionBudget.spec.selector.matchExpressions[].key | string | ||
| eastwest.podDisruptionBudget.spec.selector.matchExpressions[].operator | string | ||
| eastwest.podDisruptionBudget.spec.unhealthyPodEvictionPolicy | string | ||
| remote.create | boolean | Whether to create remote gateways | true |
| remote.items | array (object) | List of remote gateway configurations | [] |
| remote.items[].name | string | Name of the remote gateway (defaults to istio-remote-peer- | |
| remote.items[].cluster | string | Cluster ID of the remote cluster | |
| remote.items[].network | string | Network name of the remote cluster | |
| remote.items[].address | string | Address of the remote gateway (IP or hostname) | |
| remote.items[].addressType | string | Type of address (IPAddress or Hostname, defaults to IPAddress) | |
| remote.items[].preferredDataplaneServiceType | string | Preferred data plane service type for the remote gateway | |
| remote.items[].trustDomain | string | Trust domain of the remote cluster | |
| remote.items[].region | string | Region for topology labels | |
| remote.items[].zone | string | Zone for topology labels | |
| remote.items[].nodeport | integer | NodePort value for xds-listener (defaults to 15012 if not provided) | |
| remote.items[].serviceAccountOverride | string | The name of the corresponding east-west gateway. Must be set only if the east-west gateway does not use the default ‘istio-eastwest’ service account |