diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html index 7832fd9b66..71eaddbe25 100644 --- a/content/en/docs/reference/commands/istioctl/index.html +++ b/content/en/docs/reference/commands/istioctl/index.html @@ -7142,7 +7142,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--for <string>--gateway-class <string> istioctl x workload group create --name foo --namespace bar --labels app=foo,bar=baz --ports grpc=3550,http=8080 --annotations annotation=foobar --serviceAccount sa
+
+A group of commands used to update or retrieve Ztunnel configuration from a Ztunnel instance.
+| Flags | +Shorthand | +Description | +
|---|---|---|
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Retrieve summary about workload configuration for a given Ztunnel instance.
+ istioctl ztunnel-config <workload> <ztunnel-name[.namespace]>
+
+Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.
+istioctl experimental ztunnel-config log [<type>/]<name>[.<namespace>] [flags]
+
+istioctl experimental ztunnel-config o [<type>/]<name>[.<namespace>] [flags]
+| Flags | +Shorthand | +Description | +
|---|---|---|
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--level <string> |
++ | Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl ztunnel-config log <pod-name[.namespace]>", and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--reset |
+-r |
+Reset levels to default value (warning). | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--selector <string> |
+-l |
+Label selector (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Retrieve information about logging levels for a given pod from Ztunnel.
+ istioctl ztunnel-config log <pod-name[.namespace]>
+
+ # Update levels of the all loggers
+ istioctl ztunnel-config log <pod-name[.namespace]> --level none
+
+ # Update levels of the specified loggers.
+ istioctl ztunnel-config log <pod-name[.namespace]> --level http:debug,redis:debug
+
+ # Reset levels of all the loggers to default value (warning).
+ istioctl ztunnel-config log <pod-name[.namespace]> -r
+
+
+Retrieve information about workload configuration for the Ztunnel instance.
+istioctl experimental ztunnel-config workload [<type>/]<name>[.<namespace>] [flags]
+
+istioctl experimental ztunnel-config workloads [<type>/]<name>[.<namespace>] [flags]
+istioctl experimental ztunnel-config w [<type>/]<name>[.<namespace>] [flags]
+| Flags | +Shorthand | +Description | +
|---|---|---|
--address <string> |
++ | Filter workloads by address field (default ``) | +
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--file <string> |
+-f |
+Ztunnel config dump JSON file (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--node <string> |
++ | Filter workloads by node field (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--verbose |
++ | Output more information | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--workload-namespace <string> |
++ | Filter workloads by namespace field (default ``) | +
# Retrieve summary about workload configuration for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]>
+
+ # Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]> --node ambient-worker
+
+ # Retrieve full workload dump of workloads with address XXXX for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]> --address 0.0.0.0 -o json
+
+ # Retrieve Ztunnel config dump separately and inspect from file.
+ kubectl exec -it $ZTUNNEL -n istio-system -- curl localhost:15000/config_dump > ztunnel-config.json
+ istioctl ztunnel-config workloads --file ztunnel-config.json
+
+ # Retrieve workload summary for a specific namespace
+ istioctl ztunnel-config workloads <ztunnel-name[.namespace]> --workloads-namespace foo
+
The install command generates an Istio install manifest and applies it to a cluster.
@@ -15071,522 +15587,6 @@ istioctl experimental precheck.A group of commands used to update or retrieve Ztunnel configuration from a Ztunnel instance.
-| Flags | -Shorthand | -Description | -
|---|---|---|
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
# Retrieve summary about workload configuration for a given Ztunnel instance.
- istioctl ztunnel-config <workload> <ztunnel-name[.namespace]>
-
-Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.
-istioctl ztunnel-config log [<type>/]<name>[.<namespace>] [flags]
-
-istioctl ztunnel-config o [<type>/]<name>[.<namespace>] [flags]
-| Flags | -Shorthand | -Description | -
|---|---|---|
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--level <string> |
-- | Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl ztunnel-config log <pod-name[.namespace]>", and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--reset |
--r |
-Reset levels to default value (warning). | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--selector <string> |
--l |
-Label selector (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
# Retrieve information about logging levels for a given pod from Ztunnel.
- istioctl ztunnel-config log <pod-name[.namespace]>
-
- # Update levels of the all loggers
- istioctl ztunnel-config log <pod-name[.namespace]> --level none
-
- # Update levels of the specified loggers.
- istioctl ztunnel-config log <pod-name[.namespace]> --level http:debug,redis:debug
-
- # Reset levels of all the loggers to default value (warning).
- istioctl ztunnel-config log <pod-name[.namespace]> -r
-
-
-Retrieve information about workload configuration for the Ztunnel instance.
-istioctl ztunnel-config workload [<type>/]<name>[.<namespace>] [flags]
-
-istioctl ztunnel-config workloads [<type>/]<name>[.<namespace>] [flags]
-istioctl ztunnel-config w [<type>/]<name>[.<namespace>] [flags]
-| Flags | -Shorthand | -Description | -
|---|---|---|
--address <string> |
-- | Filter workloads by address field (default ``) | -
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--file <string> |
--f |
-Ztunnel config dump JSON file (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--node <string> |
-- | Filter workloads by node field (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--verbose |
-- | Output more information | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
--workload-namespace <string> |
-- | Filter workloads by namespace field (default ``) | -
# Retrieve summary about workload configuration for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]>
-
- # Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]> --node ambient-worker
-
- # Retrieve full workload dump of workloads with address XXXX for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]> --address 0.0.0.0 -o json
-
- # Retrieve Ztunnel config dump separately and inspect from file.
- kubectl exec -it $ZTUNNEL -n istio-system -- curl localhost:15000/config_dump > ztunnel-config.json
- istioctl ztunnel-config workloads --file ztunnel-config.json
-
- # Retrieve workload summary for a specific namespace
- istioctl ztunnel-config workloads <ztunnel-name[.namespace]> --workloads-namespace foo
-
-
istioctl command. Please use with caution as these environment variables are experimental and can change anytime.
|
Insert plugin before Istio stats filters and after Istio authorization filters. - |
-
-|||
INITIAL |
-
- Insert plugin at the start of the filter chain. - |
||
--for <string> |
- | Specify the traffic type [service workload all none] for the waypoint (default `service`) | +Specify the traffic type [workload all none service] for the waypoint (default `service`) |
--gateway-class <string> |
@@ -8486,6 +8486,522 @@ The default output is serialized YAML, which can be piped into 'kubectl appl
istioctl x workload group create --name foo --namespace bar --labels app=foo,bar=baz --ports grpc=3550,http=8080 --annotations annotation=foobar --serviceAccount sa
+
+A group of commands used to update or retrieve Ztunnel configuration from a Ztunnel instance.
+| Flags | +Shorthand | +Description | +
|---|---|---|
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Retrieve summary about workload configuration for a given Ztunnel instance.
+ istioctl ztunnel-config <workload> <ztunnel-name[.namespace]>
+
+Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.
+istioctl experimental ztunnel-config log [<type>/]<name>[.<namespace>] [flags]
+
+istioctl experimental ztunnel-config o [<type>/]<name>[.<namespace>] [flags]
+| Flags | +Shorthand | +Description | +
|---|---|---|
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--level <string> |
++ | Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl ztunnel-config log <pod-name[.namespace]>", and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--reset |
+-r |
+Reset levels to default value (warning). | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--selector <string> |
+-l |
+Label selector (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Retrieve information about logging levels for a given pod from Ztunnel.
+ istioctl ztunnel-config log <pod-name[.namespace]>
+
+ # Update levels of the all loggers
+ istioctl ztunnel-config log <pod-name[.namespace]> --level none
+
+ # Update levels of the specified loggers.
+ istioctl ztunnel-config log <pod-name[.namespace]> --level http:debug,redis:debug
+
+ # Reset levels of all the loggers to default value (warning).
+ istioctl ztunnel-config log <pod-name[.namespace]> -r
+
+
+Retrieve information about workload configuration for the Ztunnel instance.
+istioctl experimental ztunnel-config workload [<type>/]<name>[.<namespace>] [flags]
+
+istioctl experimental ztunnel-config workloads [<type>/]<name>[.<namespace>] [flags]
+istioctl experimental ztunnel-config w [<type>/]<name>[.<namespace>] [flags]
+| Flags | +Shorthand | +Description | +
|---|---|---|
--address <string> |
++ | Filter workloads by address field (default ``) | +
--all-features |
++ | Whether to enable all supported features for conformance tests | +
--allow-crds-mismatch |
++ | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | +
--cleanup-base-resources |
++ | Whether to cleanup base test resources after the run | +
--conformance-profiles <string> |
++ | Comma-separated list of the conformance profiles to run (default ``) | +
--contact <string> |
++ | Comma-separated list of contact information for the maintainers (default ``) | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--debug |
++ | Whether to print debug logs | +
--exempt-features <string> |
++ | Exempt Features excluded from conformance tests suites (default ``) | +
--file <string> |
+-f |
+Ztunnel config dump JSON file (default ``) | +
--gateway-class <string> |
++ | Name of GatewayClass to use for tests (default `gateway-conformance`) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--mode <string> |
++ | The operating mode of the implementation. (default `default`) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--namespace-annotations <string> |
++ | Comma-separated list of name=value annotations to add to test namespaces (default ``) | +
--namespace-labels <string> |
++ | Comma-separated list of name=value labels to add to test namespaces (default ``) | +
--node <string> |
++ | Filter workloads by node field (default ``) | +
--organization <string> |
++ | Implementation's Organization to issue conformance to (default ``) | +
--output <string> |
+-o |
+Output format: one of json|yaml|short (default `short`) | +
--project <string> |
++ | Implementation's project to issue conformance to (default ``) | +
--proxy-admin-port <int> |
++ | Ztunnel proxy admin port (default `15000`) | +
--report-output <string> |
++ | The file where to write the conformance report (default ``) | +
--run-test <string> |
++ | Name of a single test to run, instead of the whole suite (default ``) | +
--skip-tests <string> |
++ | Comma-separated list of tests to skip (default ``) | +
--supported-features <string> |
++ | Supported features included in conformance tests suites (default ``) | +
--url <string> |
++ | Implementation's url to issue conformance to (default ``) | +
--verbose |
++ | Output more information | +
--version <string> |
++ | Implementation's version to issue conformance to (default ``) | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--workload-namespace <string> |
++ | Filter workloads by namespace field (default ``) | +
# Retrieve summary about workload configuration for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]>
+
+ # Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]> --node ambient-worker
+
+ # Retrieve full workload dump of workloads with address XXXX for a given Ztunnel instance.
+ istioctl ztunnel-config workload <ztunnel-name[.namespace]> --address 0.0.0.0 -o json
+
+ # Retrieve Ztunnel config dump separately and inspect from file.
+ kubectl exec -it $ZTUNNEL -n istio-system -- curl localhost:15000/config_dump > ztunnel-config.json
+ istioctl ztunnel-config workloads --file ztunnel-config.json
+
+ # Retrieve workload summary for a specific namespace
+ istioctl ztunnel-config workloads <ztunnel-name[.namespace]> --workloads-namespace foo
+
The install command generates an Istio install manifest and applies it to a cluster.
@@ -15071,522 +15587,6 @@ istioctl experimental precheck. -A group of commands used to update or retrieve Ztunnel configuration from a Ztunnel instance.
-| Flags | -Shorthand | -Description | -
|---|---|---|
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
# Retrieve summary about workload configuration for a given Ztunnel instance.
- istioctl ztunnel-config <workload> <ztunnel-name[.namespace]>
-
-Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.
-istioctl ztunnel-config log [<type>/]<name>[.<namespace>] [flags]
-
-istioctl ztunnel-config o [<type>/]<name>[.<namespace>] [flags]
-| Flags | -Shorthand | -Description | -
|---|---|---|
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--level <string> |
-- | Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl ztunnel-config log <pod-name[.namespace]>", and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--reset |
--r |
-Reset levels to default value (warning). | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--selector <string> |
--l |
-Label selector (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
# Retrieve information about logging levels for a given pod from Ztunnel.
- istioctl ztunnel-config log <pod-name[.namespace]>
-
- # Update levels of the all loggers
- istioctl ztunnel-config log <pod-name[.namespace]> --level none
-
- # Update levels of the specified loggers.
- istioctl ztunnel-config log <pod-name[.namespace]> --level http:debug,redis:debug
-
- # Reset levels of all the loggers to default value (warning).
- istioctl ztunnel-config log <pod-name[.namespace]> -r
-
-
-Retrieve information about workload configuration for the Ztunnel instance.
-istioctl ztunnel-config workload [<type>/]<name>[.<namespace>] [flags]
-
-istioctl ztunnel-config workloads [<type>/]<name>[.<namespace>] [flags]
-istioctl ztunnel-config w [<type>/]<name>[.<namespace>] [flags]
-| Flags | -Shorthand | -Description | -
|---|---|---|
--address <string> |
-- | Filter workloads by address field (default ``) | -
--all-features |
-- | Whether to enable all supported features for conformance tests | -
--allow-crds-mismatch |
-- | Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. | -
--cleanup-base-resources |
-- | Whether to cleanup base test resources after the run | -
--conformance-profiles <string> |
-- | Comma-separated list of the conformance profiles to run (default ``) | -
--contact <string> |
-- | Comma-separated list of contact information for the maintainers (default ``) | -
--context <string> |
-- | Kubernetes configuration context (default ``) | -
--debug |
-- | Whether to print debug logs | -
--exempt-features <string> |
-- | Exempt Features excluded from conformance tests suites (default ``) | -
--file <string> |
--f |
-Ztunnel config dump JSON file (default ``) | -
--gateway-class <string> |
-- | Name of GatewayClass to use for tests (default `gateway-conformance`) | -
--istioNamespace <string> |
--i |
-Istio system namespace (default `istio-system`) | -
--kubeconfig <string> |
--c |
-Kubernetes configuration file (default ``) | -
--mode <string> |
-- | The operating mode of the implementation. (default `default`) | -
--namespace <string> |
--n |
-Kubernetes namespace (default ``) | -
--namespace-annotations <string> |
-- | Comma-separated list of name=value annotations to add to test namespaces (default ``) | -
--namespace-labels <string> |
-- | Comma-separated list of name=value labels to add to test namespaces (default ``) | -
--node <string> |
-- | Filter workloads by node field (default ``) | -
--organization <string> |
-- | Implementation's Organization to issue conformance to (default ``) | -
--output <string> |
--o |
-Output format: one of json|yaml|short (default `short`) | -
--project <string> |
-- | Implementation's project to issue conformance to (default ``) | -
--proxy-admin-port <int> |
-- | Ztunnel proxy admin port (default `15000`) | -
--report-output <string> |
-- | The file where to write the conformance report (default ``) | -
--run-test <string> |
-- | Name of a single test to run, instead of the whole suite (default ``) | -
--skip-tests <string> |
-- | Comma-separated list of tests to skip (default ``) | -
--supported-features <string> |
-- | Supported features included in conformance tests suites (default ``) | -
--url <string> |
-- | Implementation's url to issue conformance to (default ``) | -
--verbose |
-- | Output more information | -
--version <string> |
-- | Implementation's version to issue conformance to (default ``) | -
--vklog <Level> |
-- | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | -
--workload-namespace <string> |
-- | Filter workloads by namespace field (default ``) | -
# Retrieve summary about workload configuration for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]>
-
- # Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]> --node ambient-worker
-
- # Retrieve full workload dump of workloads with address XXXX for a given Ztunnel instance.
- istioctl ztunnel-config workload <ztunnel-name[.namespace]> --address 0.0.0.0 -o json
-
- # Retrieve Ztunnel config dump separately and inspect from file.
- kubectl exec -it $ZTUNNEL -n istio-system -- curl localhost:15000/config_dump > ztunnel-config.json
- istioctl ztunnel-config workloads --file ztunnel-config.json
-
- # Retrieve workload summary for a specific namespace
- istioctl ztunnel-config workloads <ztunnel-name[.namespace]> --workloads-namespace foo
-
-
istioctl command. Please use with caution as these environment variables are experimental and can change anytime.
|
Insert plugin before Istio stats filters and after Istio authorization filters. - |
-
-|
INITIAL |
-
- Insert plugin at the start of the filter chain. - |