Automator: update istio.io@ reference docs (#14891)

This commit is contained in:
Istio Automation 2024-04-16 19:12:40 -07:00 committed by GitHub
parent b719e01cd9
commit f93801b7eb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 1410 additions and 50 deletions

View File

@ -4,7 +4,7 @@ source_repo: https://github.com/istio/istio
title: istioctl
description: Istio control interface.
generator: pkg-collateral-docs
number_of_entries: 95
number_of_entries: 99
max_toc_level: 2
remove_toc_prefix: 'istioctl '
---
@ -7007,7 +7007,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7167,7 +7167,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7329,7 +7329,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7482,7 +7482,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7636,7 +7636,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -8579,6 +8579,158 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration
istioctl ztunnel-config workload
# Retrieve summary about certificates
istioctl ztunnel-config certificates
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-all">istioctl experimental ztunnel-config all</h2>
<p>Retrieve information about all configuration for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config all [flags]
</code></pre>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
@ -8630,9 +8782,181 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a given Ztunnel instance.
istioctl ztunnel-config &lt;workload&gt; &lt;ztunnel-name[.namespace]&gt;
<h3 id="istioctl-experimental-ztunnel-config-all Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about all configuration for a randomly chosen ztunnel.
istioctl ztunnel-config all
# Retrieve full configuration dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config policies &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-certificate">istioctl experimental ztunnel-config certificate</h2>
<p>Retrieve information about certificates for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config certificate [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config certificates [flags]
istioctl experimental ztunnel-config certs [flags]
istioctl experimental ztunnel-config cert [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-certificate Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a randomly chosen ztunnel.
istioctl ztunnel-config certificates
# Retrieve full certificate dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config certificates &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-log">istioctl experimental ztunnel-config log</h2>
<p>Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.</p>
@ -8691,6 +9015,11 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
@ -8731,6 +9060,11 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
@ -8766,9 +9100,183 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--selector &lt;string&gt;</code></td>
<td><code>-l</code></td>
<td>Label selector (default ``)</td>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-log Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve information about logging levels from all Ztunnel pods
istioctl ztunnel-config log
# Update levels of the all loggers for a specific Ztunnel pod
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level none
# Update levels of the specified loggers for all Ztunnl pods
istioctl ztunnel-config log --level http:debug,redis:debug
# Reset levels of all the loggers to default value (warning) for a specific Ztunnel pod.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; -r
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-policy">istioctl experimental ztunnel-config policy</h2>
<p>Retrieve information about policies for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config policy [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config policies [flags]
istioctl experimental ztunnel-config p [flags]
istioctl experimental ztunnel-config pol [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--policy-namespace &lt;string&gt;</code></td>
<td></td>
<td>Filter policies by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
@ -8797,18 +9305,185 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-log Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve information about logging levels for a given pod from Ztunnel.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt;
<h3 id="istioctl-experimental-ztunnel-config-policy Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about policy configuration for a randomly chosen ztunnel.
istioctl ztunnel-config policies
# Update levels of the all loggers
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level none
# Retrieve full policy dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config policies &lt;ztunnel-name[.namespace]&gt; -o json
# Update levels of the specified loggers.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level http:debug,redis:debug
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-service">istioctl experimental ztunnel-config service</h2>
<p>Retrieve information about services for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config service [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config services [flags]
istioctl experimental ztunnel-config s [flags]
istioctl experimental ztunnel-config svc [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--service-namespace &lt;string&gt;</code></td>
<td></td>
<td>Filter services by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-service Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about services configuration for a randomly chosen ztunnel.
istioctl ztunnel-config services
# Reset levels of all the loggers to default value (warning).
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; -r
# Retrieve full certificate dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config services &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-workload">istioctl experimental ztunnel-config workload</h2>
@ -8816,8 +9491,8 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<pre class="language-bash"><code>istioctl experimental ztunnel-config workload [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config workloads [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
<pre class="language-bash"><code>istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
istioctl experimental ztunnel-config workloads [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
</code></pre></div>
<table class="command-flags">
<thead>
@ -8983,11 +9658,16 @@ istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespac
<td></td>
<td>Filter workloads by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--workload-node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node (default ``)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-workload Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a given Ztunnel instance.
istioctl ztunnel-config workload &lt;ztunnel-name[.namespace]&gt;
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a randomly chosen ztunnel.
istioctl ztunnel-config workload
# Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
istioctl ztunnel-config workload &lt;ztunnel-name[.namespace]&gt; --node ambient-worker

View File

@ -4,7 +4,7 @@ source_repo: https://github.com/istio/istio
title: istioctl
description: Istio control interface.
generator: pkg-collateral-docs
number_of_entries: 95
number_of_entries: 99
max_toc_level: 2
remove_toc_prefix: 'istioctl '
---
@ -7007,7 +7007,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7167,7 +7167,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7329,7 +7329,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7482,7 +7482,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -7636,7 +7636,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<tr>
<td><code>--name &lt;string&gt;</code></td>
<td></td>
<td>name of the waypoint (default `default-namespace`)</td>
<td>name of the waypoint (default `waypoint`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
@ -8579,6 +8579,158 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration
istioctl ztunnel-config workload
# Retrieve summary about certificates
istioctl ztunnel-config certificates
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-all">istioctl experimental ztunnel-config all</h2>
<p>Retrieve information about all configuration for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config all [flags]
</code></pre>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
@ -8630,9 +8782,181 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a given Ztunnel instance.
istioctl ztunnel-config &lt;workload&gt; &lt;ztunnel-name[.namespace]&gt;
<h3 id="istioctl-experimental-ztunnel-config-all Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about all configuration for a randomly chosen ztunnel.
istioctl ztunnel-config all
# Retrieve full configuration dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config policies &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-certificate">istioctl experimental ztunnel-config certificate</h2>
<p>Retrieve information about certificates for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config certificate [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config certificates [flags]
istioctl experimental ztunnel-config certs [flags]
istioctl experimental ztunnel-config cert [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-certificate Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a randomly chosen ztunnel.
istioctl ztunnel-config certificates
# Retrieve full certificate dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config certificates &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-log">istioctl experimental ztunnel-config log</h2>
<p>Retrieve information about logging levels of the Ztunnel instance in the specified pod, and update optionally.</p>
@ -8691,6 +9015,11 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
@ -8731,6 +9060,11 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
@ -8766,9 +9100,183 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--selector &lt;string&gt;</code></td>
<td><code>-l</code></td>
<td>Label selector (default ``)</td>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-log Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve information about logging levels from all Ztunnel pods
istioctl ztunnel-config log
# Update levels of the all loggers for a specific Ztunnel pod
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level none
# Update levels of the specified loggers for all Ztunnl pods
istioctl ztunnel-config log --level http:debug,redis:debug
# Reset levels of all the loggers to default value (warning) for a specific Ztunnel pod.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; -r
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-policy">istioctl experimental ztunnel-config policy</h2>
<p>Retrieve information about policies for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config policy [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config policies [flags]
istioctl experimental ztunnel-config p [flags]
istioctl experimental ztunnel-config pol [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--policy-namespace &lt;string&gt;</code></td>
<td></td>
<td>Filter policies by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
@ -8797,18 +9305,185 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-log Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve information about logging levels for a given pod from Ztunnel.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt;
<h3 id="istioctl-experimental-ztunnel-config-policy Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about policy configuration for a randomly chosen ztunnel.
istioctl ztunnel-config policies
# Update levels of the all loggers
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level none
# Retrieve full policy dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config policies &lt;ztunnel-name[.namespace]&gt; -o json
# Update levels of the specified loggers.
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; --level http:debug,redis:debug
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-service">istioctl experimental ztunnel-config service</h2>
<p>Retrieve information about services for the Ztunnel instance.</p>
<pre class="language-bash"><code>istioctl experimental ztunnel-config service [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config services [flags]
istioctl experimental ztunnel-config s [flags]
istioctl experimental ztunnel-config svc [flags]
</code></pre></div>
<table class="command-flags">
<thead>
<tr>
<th>Flags</th>
<th>Shorthand</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>--all-features</code></td>
<td></td>
<td>Whether to enable all supported features for conformance tests </td>
</tr>
<tr>
<td><code>--allow-crds-mismatch</code></td>
<td></td>
<td>Flag to allow the suite not to fail in case there is a mismatch between CRDs versions and channels. </td>
</tr>
<tr>
<td><code>--cleanup-base-resources</code></td>
<td></td>
<td>Whether to cleanup base test resources after the run </td>
</tr>
<tr>
<td><code>--conformance-profiles &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of the conformance profiles to run (default ``)</td>
</tr>
<tr>
<td><code>--contact &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of contact information for the maintainers (default ``)</td>
</tr>
<tr>
<td><code>--context &lt;string&gt;</code></td>
<td></td>
<td>Kubernetes configuration context (default ``)</td>
</tr>
<tr>
<td><code>--debug</code></td>
<td></td>
<td>Whether to print debug logs </td>
</tr>
<tr>
<td><code>--exempt-features &lt;string&gt;</code></td>
<td></td>
<td>Exempt Features excluded from conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--file &lt;string&gt;</code></td>
<td><code>-f</code></td>
<td>Ztunnel config dump JSON file (default ``)</td>
</tr>
<tr>
<td><code>--gateway-class &lt;string&gt;</code></td>
<td></td>
<td>Name of GatewayClass to use for tests (default `gateway-conformance`)</td>
</tr>
<tr>
<td><code>--istioNamespace &lt;string&gt;</code></td>
<td><code>-i</code></td>
<td>Istio system namespace (default `istio-system`)</td>
</tr>
<tr>
<td><code>--kubeconfig &lt;string&gt;</code></td>
<td><code>-c</code></td>
<td>Kubernetes configuration file (default ``)</td>
</tr>
<tr>
<td><code>--mode &lt;string&gt;</code></td>
<td></td>
<td>The operating mode of the implementation. (default `default`)</td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--namespace-annotations &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value annotations to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--namespace-labels &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of name=value labels to add to test namespaces (default ``)</td>
</tr>
<tr>
<td><code>--node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node field (default ``)</td>
</tr>
<tr>
<td><code>--organization &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s Organization (default ``)</td>
</tr>
<tr>
<td><code>--output &lt;string&gt;</code></td>
<td><code>-o</code></td>
<td>Output format: one of json|yaml|short (default `short`)</td>
</tr>
<tr>
<td><code>--project &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s project (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Ztunnel proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--report-output &lt;string&gt;</code></td>
<td></td>
<td>The file where to write the conformance report (default ``)</td>
</tr>
<tr>
<td><code>--run-test &lt;string&gt;</code></td>
<td></td>
<td>Name of a single test to run, instead of the whole suite (default ``)</td>
</tr>
<tr>
<td><code>--service-namespace &lt;string&gt;</code></td>
<td></td>
<td>Filter services by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--skip-tests &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of tests to skip (default ``)</td>
</tr>
<tr>
<td><code>--supported-features &lt;string&gt;</code></td>
<td></td>
<td>Supported features included in conformance tests suites (default ``)</td>
</tr>
<tr>
<td><code>--url &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s url (default ``)</td>
</tr>
<tr>
<td><code>--version &lt;string&gt;</code></td>
<td></td>
<td>Implementation&#39;s version (default ``)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-service Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about services configuration for a randomly chosen ztunnel.
istioctl ztunnel-config services
# Reset levels of all the loggers to default value (warning).
istioctl ztunnel-config log &lt;pod-name[.namespace]&gt; -r
# Retrieve full certificate dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config services &lt;ztunnel-name[.namespace]&gt; -o json
</code></pre>
<h2 id="istioctl-experimental-ztunnel-config-workload">istioctl experimental ztunnel-config workload</h2>
@ -8816,8 +9491,8 @@ The default output is serialized YAML, which can be piped into &#39;kubectl appl
<pre class="language-bash"><code>istioctl experimental ztunnel-config workload [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
</code></pre>
<div class="aliases">
<pre class="language-bash"><code>istioctl experimental ztunnel-config workloads [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
<pre class="language-bash"><code>istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
istioctl experimental ztunnel-config workloads [&lt;type&gt;/]&lt;name&gt;[.&lt;namespace&gt;] [flags]
</code></pre></div>
<table class="command-flags">
<thead>
@ -8983,11 +9658,16 @@ istioctl experimental ztunnel-config w [&lt;type&gt;/]&lt;name&gt;[.&lt;namespac
<td></td>
<td>Filter workloads by namespace field (default ``)</td>
</tr>
<tr>
<td><code>--workload-node &lt;string&gt;</code></td>
<td></td>
<td>Filter workloads by node (default ``)</td>
</tr>
</tbody>
</table>
<h3 id="istioctl-experimental-ztunnel-config-workload Examples">Examples</h3>
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a given Ztunnel instance.
istioctl ztunnel-config workload &lt;ztunnel-name[.namespace]&gt;
<pre class="language-bash"><code> # Retrieve summary about workload configuration for a randomly chosen ztunnel.
istioctl ztunnel-config workload
# Retrieve summary of workloads on node XXXX for a given Ztunnel instance.
istioctl ztunnel-config workload &lt;ztunnel-name[.namespace]&gt; --node ambient-worker