diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html index 193324acfb..1686694093 100644 --- a/content/en/docs/reference/commands/istioctl/index.html +++ b/content/en/docs/reference/commands/istioctl/index.html @@ -874,6 +874,110 @@ to enable it. You can execute the following once:

+

istioctl create-remote-secret

+

Create a secret with credentials to allow Istio to access remote Kubernetes apiservers

+
istioctl create-remote-secret [flags]
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FlagsShorthandDescription
--auth-plugin-config <stringToString>Authenticator plug-in configuration. --auth-type=plugin must be set with this option (default `[]`)
--auth-plugin-name <string>Authenticator plug-in name. --auth-type=plugin must be set with this option (default ``)
--auth-type <RemoteSecretAuthType>Type of authentication to use. supported values = [bearer-token plugin] (default `bearer-token`)
--context <string>Kubernetes configuration context (default ``)
--create-service-accountIf true, the service account needed for creating the remote secret will be created if it doesn't exist.
--istioNamespace <string>-iIstio system namespace (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file (default ``)
--manifests <string>-dSpecify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). (default ``)
--name <string>Name of the local cluster whose credentials are stored in the secret. If a name is not specified the kube-system namespace's UUID of the local cluster will be used. (default ``)
--namespace <string>-nKubernetes namespace (default ``)
--secret-name <string>The name of the specific secret to use from the service-account. Needed when there are multiple secrets in the service account. (default ``)
--server <string>The address and port of the Kubernetes API server. (default ``)
--service-account <string>Create a secret with this service account's credentials. Default value is "istio-reader-service-account" if --type is "remote", "istiod" if --type is "config". (default ``)
--type <SecretType>Type of the generated secret. supported values = [remote config] (default `remote`)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)
+

Examples

+
  # Create a secret to access cluster c0's apiserver and install it in cluster c1.
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
+    | kubectl --kubeconfig=c1.yaml apply -f -
+
+  # Delete a secret that was previously installed in c1
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
+    | kubectl --kubeconfig=c1.yaml delete -f -
+
+  # Create a secret access a remote cluster with an auth plugin
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 --auth-type=plugin --auth-plugin-name=gcp \
+    | kubectl --kubeconfig=c1.yaml apply -f -
+

istioctl dashboard

Access to Istio web UIs

istioctl dashboard [flags]
@@ -1770,110 +1874,6 @@ Checks associated resources of the given resource, and running webhooks to exami
 
 
 
-
istioctl experimental create-remote-secret

-
Create a secret with credentials to allow Istio to access remote Kubernetes apiservers

-
istioctl experimental create-remote-secret [flags]
-

-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
FlagsShorthandDescription
--auth-plugin-config <stringToString>Authenticator plug-in configuration. --auth-type=plugin must be set with this option  (default `[]`)
--auth-plugin-name <string>Authenticator plug-in name. --auth-type=plugin must be set with this option  (default ``)
--auth-type <RemoteSecretAuthType>Type of authentication to use. supported values = [bearer-token plugin]  (default `bearer-token`)
--context <string>Kubernetes configuration context  (default ``)
--create-service-accountIf true, the service account needed for creating the remote secret will be created if it doesn't exist. 
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.19.0/manifests).  (default ``)
--name <string>Name of the local cluster whose credentials are stored in the secret. If a name is not specified the kube-system namespace's UUID of the local cluster will be used.  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--secret-name <string>The name of the specific secret to use from the service-account. Needed when there are multiple secrets in the service account.  (default ``)
--server <string>The address and port of the Kubernetes API server.  (default ``)
--service-account <string>Create a secret with this service account's credentials. Default value is "istio-reader-service-account" if --type is "remote", "istiod" if --type is "config".  (default ``)
--type <SecretType>Type of the generated secret. supported values = [remote config]  (default `remote`)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

-
Examples

-
  # Create a secret to access cluster c0's apiserver and install it in cluster c1.
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
-    | kubectl --kubeconfig=c1.yaml apply -f -
-
-  # Delete a secret that was previously installed in c1
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
-    | kubectl --kubeconfig=c1.yaml delete -f -
-
-  # Create a secret access a remote cluster with an auth plugin
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 --auth-type=plugin --auth-plugin-name=gcp \
-    | kubectl --kubeconfig=c1.yaml apply -f -
-

 
istioctl experimental describe

 
Describe resource and related Istio configuration

 
istioctl experimental describe [flags]
@@ -2553,51 +2553,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
   istioctl x ps --xds-label istio.io/rev=default
 
 

-
istioctl experimental remote-clusters

-
Lists the remote clusters each istiod instance is connected to.

-
istioctl experimental remote-clusters [flags]
-

-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
FlagsShorthandDescription
--context <string>Kubernetes configuration context  (default ``)
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--revision <string>-rControl plane revision  (default ``)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

 
istioctl experimental revision

 
The revision command provides a revision centric view of istio deployments. It provides insight into IstioOperator CRs defining the revision, istiod and gateway pods which are part of deployment of a particular revision.

 
@@ -6105,6 +6060,51 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
   istioctl proxy-status istio-egressgateway-59585c5b9c-ndc59.istio-system --file cd.json
 
 
+
istioctl remote-clusters

+
Lists the remote clusters each istiod instance is connected to.

+
istioctl remote-clusters [flags]
+

+

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FlagsShorthandDescription
--context <string>Kubernetes configuration context  (default ``)
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--revision <string>-rControl plane revision  (default ``)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

 
istioctl tag

 
Command group used to interact with revision tags. Revision tags allow for the creation of mutable aliases
 referring to control plane revisions for sidecar injection.

diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html
index 193324acfb..1686694093 100644
--- a/content/zh/docs/reference/commands/istioctl/index.html
+++ b/content/zh/docs/reference/commands/istioctl/index.html
@@ -874,6 +874,110 @@ to enable it.  You can execute the following once:

 
 
 
+
istioctl create-remote-secret

+
Create a secret with credentials to allow Istio to access remote Kubernetes apiservers

+
istioctl create-remote-secret [flags]
+

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FlagsShorthandDescription
--auth-plugin-config <stringToString>Authenticator plug-in configuration. --auth-type=plugin must be set with this option  (default `[]`)
--auth-plugin-name <string>Authenticator plug-in name. --auth-type=plugin must be set with this option  (default ``)
--auth-type <RemoteSecretAuthType>Type of authentication to use. supported values = [bearer-token plugin]  (default `bearer-token`)
--context <string>Kubernetes configuration context  (default ``)
--create-service-accountIf true, the service account needed for creating the remote secret will be created if it doesn't exist. 
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--manifests <string>-dSpecify a path to a directory of charts and profiles
+(e.g. ~/Downloads/istio-1.19.0/manifests).  (default ``)
--name <string>Name of the local cluster whose credentials are stored in the secret. If a name is not specified the kube-system namespace's UUID of the local cluster will be used.  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--secret-name <string>The name of the specific secret to use from the service-account. Needed when there are multiple secrets in the service account.  (default ``)
--server <string>The address and port of the Kubernetes API server.  (default ``)
--service-account <string>Create a secret with this service account's credentials. Default value is "istio-reader-service-account" if --type is "remote", "istiod" if --type is "config".  (default ``)
--type <SecretType>Type of the generated secret. supported values = [remote config]  (default `remote`)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

+
Examples

+
  # Create a secret to access cluster c0's apiserver and install it in cluster c1.
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
+    | kubectl --kubeconfig=c1.yaml apply -f -
+
+  # Delete a secret that was previously installed in c1
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
+    | kubectl --kubeconfig=c1.yaml delete -f -
+
+  # Create a secret access a remote cluster with an auth plugin
+  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 --auth-type=plugin --auth-plugin-name=gcp \
+    | kubectl --kubeconfig=c1.yaml apply -f -
+

 
istioctl dashboard

 
Access to Istio web UIs

 
istioctl dashboard [flags]
@@ -1770,110 +1874,6 @@ Checks associated resources of the given resource, and running webhooks to exami
 
 
 
-
istioctl experimental create-remote-secret

-
Create a secret with credentials to allow Istio to access remote Kubernetes apiservers

-
istioctl experimental create-remote-secret [flags]
-

-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
FlagsShorthandDescription
--auth-plugin-config <stringToString>Authenticator plug-in configuration. --auth-type=plugin must be set with this option  (default `[]`)
--auth-plugin-name <string>Authenticator plug-in name. --auth-type=plugin must be set with this option  (default ``)
--auth-type <RemoteSecretAuthType>Type of authentication to use. supported values = [bearer-token plugin]  (default `bearer-token`)
--context <string>Kubernetes configuration context  (default ``)
--create-service-accountIf true, the service account needed for creating the remote secret will be created if it doesn't exist. 
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.19.0/manifests).  (default ``)
--name <string>Name of the local cluster whose credentials are stored in the secret. If a name is not specified the kube-system namespace's UUID of the local cluster will be used.  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--secret-name <string>The name of the specific secret to use from the service-account. Needed when there are multiple secrets in the service account.  (default ``)
--server <string>The address and port of the Kubernetes API server.  (default ``)
--service-account <string>Create a secret with this service account's credentials. Default value is "istio-reader-service-account" if --type is "remote", "istiod" if --type is "config".  (default ``)
--type <SecretType>Type of the generated secret. supported values = [remote config]  (default `remote`)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

-
Examples

-
  # Create a secret to access cluster c0's apiserver and install it in cluster c1.
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
-    | kubectl --kubeconfig=c1.yaml apply -f -
-
-  # Delete a secret that was previously installed in c1
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 \
-    | kubectl --kubeconfig=c1.yaml delete -f -
-
-  # Create a secret access a remote cluster with an auth plugin
-  istioctl --kubeconfig=c0.yaml create-remote-secret --name c0 --auth-type=plugin --auth-plugin-name=gcp \
-    | kubectl --kubeconfig=c1.yaml apply -f -
-

 
istioctl experimental describe

 
Describe resource and related Istio configuration

 
istioctl experimental describe [flags]
@@ -2553,51 +2553,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
   istioctl x ps --xds-label istio.io/rev=default
 
 

-
istioctl experimental remote-clusters

-
Lists the remote clusters each istiod instance is connected to.

-
istioctl experimental remote-clusters [flags]
-

-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
FlagsShorthandDescription
--context <string>Kubernetes configuration context  (default ``)
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--revision <string>-rControl plane revision  (default ``)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

 
istioctl experimental revision

 
The revision command provides a revision centric view of istio deployments. It provides insight into IstioOperator CRs defining the revision, istiod and gateway pods which are part of deployment of a particular revision.

 
@@ -6105,6 +6060,51 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
   istioctl proxy-status istio-egressgateway-59585c5b9c-ndc59.istio-system --file cd.json
 
 
+
istioctl remote-clusters

+
Lists the remote clusters each istiod instance is connected to.

+
istioctl remote-clusters [flags]
+

+

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FlagsShorthandDescription
--context <string>Kubernetes configuration context  (default ``)
--istioNamespace <string>-iIstio system namespace  (default `istio-system`)
--kubeconfig <string>-cKubernetes configuration file  (default ``)
--namespace <string>-nKubernetes namespace  (default ``)
--revision <string>-rControl plane revision  (default ``)
--vklog <Level>number for the log level verbosity. Like -v flag. ex: --vklog=9  (default `0`)

 
istioctl tag

 
Command group used to interact with revision tags. Revision tags allow for the creation of mutable aliases
 referring to control plane revisions for sidecar injection.