East-west gateway without external IP about istio HOT 3 OPEN

Yes, we do support NodePort for multi-network.

The docs have you use the gen-eastwest-gateway.sh. After generating the YAML using that command, you'd need to edit one section

  values:
    gateways:
      istio-ingressgateway:
        injectionTemplate: gateway
        type: NodePort # add this

The multi-cluster service discovery machinery is setup to handle node port.

from istio.

Istio's multi-cluster design currently requires API server access to be shared with each primary cluster.

Primary-Remote would only require supplying the remote clusters' credentials to each primary (you could have 1 primary, 2 remote).

Another option would be more manual: creating WorkloadEntry resources and Gateway resources by hand that represent resources that exist in other clusters. An example can be found in this integration test. A Gateway represents a remote eastwest gateway, we say the address 1.2.3.4:15443 can be used to reach any endpoint on network-foo. Then we create a WorkloadEntry on network-foo with no address. A service selecting that WorkloadEntry would go through the gateway.

The caveats being:

1. You don't get automated updates if you have no workloads behind that "virtual" workloadentry.
2. You don't get automated updates for the Gateway resource
3. The WorkloadEntry may not have the correct weight for the # of workloads in the remote network.

TL;DR we have APIs that can be used to configure some cross-network traffic without sharing API server credentials, but you lose most of the automation that Istio provides.

from istio.

very appreciate for you help 😄

I currently need to form a large service mesh cluster using a multi-primary, multi-network mode with three clusters. Is it necessary for each cluster to configure the access credentials of the other two clusters' API-Server? Does Istio support this configuration ? Do East-West gateways also need to be configured for mutual communication between each pair?
Is there a best practice in the community for three clusters with multi-primary and multi-network?

from istio.