io-remote.yaml
$ kubectl label namespace default istio-injection=enabled
</code></pre><h2 id=create-remote-cluster-s-kubeconfig-for-istio-pilot>Create remote cluster&rsquo;s kubeconfig for Istio Pilot</h2><p>The <code>istio-remote</code> Helm chart creates a service account with minimal access for use by Istio Pilot
discovery.</p><ol><li><p>Prepare environment variables for building the <code>kubeconfig</code> file for the service account <code>istio-multi</code>:</p><pre><code class=language-bash data-expa