The image shows a primary region and a secondary region, each region contains a Kube API (Kube API Primary and Kube API Secondary). The Primary Region contains a Bastion plus a DR Orchestrator and the Secondary Region contains a Bastion.

In the Primary Region, the Bastion plus DR Orchestrator send data to Kube API Primary and through ssh to the Bastion in Secondary region. The Bastion in Secondary sends data to the Kube API Secondary.