Primary-remote on multi-network

In the primary-remote configuration, we will install the Istio control plane on cluster 1. Clusters 1 and 2 are on different networks with no direct connectivity between the Pods. Cluster 1 will host the Istio control plane as well as a data plane. Cluster 2 will only host the data plane and uses the control plane from cluster 1. Clusters 1 and 2 both use an intermediate CA signed by a root CA. In cluster 1, istiod observes the API server in clusters 1 and 2 for any changes to Kubernetes resources. We will create an Ingress gateway in both clusters, which will be used for cross-network communications between the workloads. We will call this Ingress gateway the east-west gateway because it is used for east-west communication. The east-west gateway takes care of authentication workloads between clusters 1 and 2 and acts as a hub for all traffic traveling between the two clusters. In the following diagram, the dashed arrows in data plane traffic represent...