Topologies & setup
Primary-remote: one istiod, several workload clusters. Multi-primary: istiod per cluster, shared root CA. External control plane: istiod on the outside.
Required: common root CA, shared
trustDomain (or trustDomainAliases), unique
cluster name, endpoint discovery via
istioctl create-remote-secret. Multi-network only: label
topology.istio.io/network on
istio-system.
istioctl create-remote-secret \ --context=cluster-b \ --name=cluster-b \ | kubectl apply --context=cluster-a -f -