global: # Provides dns resolution for global services podDNSSearchNamespaces: - global - "{{ valueOrDefault .DeploymentMeta.Namespace \"default\" }}.global" multiCluster: enabled: true controlPlaneSecurityEnabled: true # Multicluster with gateways requires a root CA # Cluster local CAs are bootstrapped with the root CA. security: selfSigned: false # Provides dns resolution for service entries of form # name.namespace.global istiocoredns: enabled: true gateways: istio-egressgateway: enabled: true env: # Needed to route traffic via egress gateway if desired. ISTIO_META_REQUESTED_NETWORK_VIEW: "external"