Skip to content
This version of the documentation is currently under development. Select the stable version from the version drop down.

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

istioctl multicluster expose

Page as Markdown
Reference for the istioctl multicluster expose command.
istioctl multicluster expose

Expose mesh-enrolled services in a cluster for remote access through an east-west gateway.
Synopsis

‘istioctl multicluster expose’ creates an east-west gateway to facilitate traffic
between services in each cluster in your multicluster mesh. The east-west gateway,
which uses the ‘istio-eastwest’ gateway class, is implemented as a ztunnel. Example
use cases include deploying an east-west gateway to each Kubernetes cluster in a
multicluster ambient mesh, to facilitate traffic between services across clusters
in the mesh; or deploying an east-west gateway in the ambient mesh of a Kubernetes
cluster to receive requests from ECS cluster services enrolled in the mesh.
istioctl multicluster expose [flags]
Examples

  # Create an east-west gateway in the 'istio-eastwest' namespace.
  istioctl multicluster expose --namespace istio-eastwest
Options

      --data-plane-service-types strings  The service type that peered data plane connections can use with this gateway. Supported values are one of: loadbalancer, nodeport (default [loadbalancer])
      --generate                          Only output the generated gateway YAML configuration instead of applying it.
      -h, --help                          help for expose
      --region string                     Region to mark this cluster as. If not set, the region is auto-detected.
      -r, --revision string               The revision to use.
      -w, --wait                          Wait for the gateway to be ready before returning.
      --zone string                       Zone to mark this cluster as. Only set this option if the cluster runs in a single zone.
Options inherited from parent commands

      --as string                  Username to impersonate for the operation. User could be a regular user or a service account in a namespace
      --as-group stringArray       Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string              UID to impersonate for the operation.
      --context string             Kubernetes configuration context
      -i, --istioNamespace string  Istio system namespace (default "istio-system")
      --kubeclient-timeout string  Kubernetes client timeout as a time.Duration string, defaults to 15 seconds. (default "15s")
      -c, --kubeconfig string      Kubernetes configuration file
      -n, --namespace string       Kubernetes namespace
      --out string                 output directory (default "/tmp/istioctl-cli-docs/1.30")
istioctl multicluster checkistioctl multicluster link