ISTIOCTL-EXPERIMENTAL-INTERNAL-DEBUG(1)

🦋 istioctl experimental internal-debug — the ISTIOCTL-EXPERIMENTAL-INTERNAL-DEBUG(1) manual page, bestie 🦋

okay so welcome to ISTIOCTL-EXPERIMENTAL-INTERNAL-DEBUG(1). This is the command that pulls the debug tea from Istio, and honestly it’s giving developer-tools main character energy. 💖

💖 NAME 💖

istioctl-experimental-internal-debug — Retrieves the debug information of istio 🫶

✨ SYNOPSIS ✨

istioctl experimental internal-debug [/][.] [flags]

🌸 DESCRIPTION 🌸

Okay so what it does: retrieves the debug information from Istiod or Pods in the mesh using the service account from the pod if --cert-dir is empty. By default it will use the default serviceAccount from (istio-system) namespace if the pod is not specified. Periodt. 💅

🚨 THIS COMMAND IS UNDER ACTIVE DEVELOPMENT AND NOT READY FOR PRODUCTION USE. 🚨

No cap, do not ship this to prod like it’s a finished look. It’s still in the group chat with “typing…” energy. 😭

💅 OPTIONS 💅

• --all[=false] — Send the same request to all instances of Istiod. Only applicable for in-cluster deployment. 💫
• --authority="" — XDS Subject Alternative Name (for example istiod.istio-system.svc). 🪪
• --cert-dir="" — XDS Endpoint certificate directory. 🎀
• -h, --help[=false] — help for internal-debug. The little rescue button. 🫶
• --insecure[=false] — Skip server certificate and domain verification. (NOT SECURE!) 🔥
• -L, --list[=false] — List all supported debug types. Your menu of debug snacks. 🍓
• --plaintext[=false] — Use plain-text HTTP/2 when connecting to server (no TLS). 🫧
• -r, --revision="" — Control plane revision. 🧚
• --timeout=30s — The duration to wait before failing. ⏳
• --xds-address="" — XDS Endpoint. 📍
• --xds-label="" — Istiod pod label selector. 🏷️
• --xds-port=15012 — Istiod pod port. 🔌

🎀 OPTIONS INHERITED FROM PARENT COMMANDS 🎀

• --as="" — Username to impersonate for the operation. User could be a regular user or a service account in a namespace. 🪞
• --as-group=[] — Group to impersonate for the operation, this flag can be repeated to specify multiple groups. 👯
• --as-uid="" — UID to impersonate for the operation. 🆔
• --context="" — Kubernetes configuration context. 🗂️
• -i, --istioNamespace="istio-system" — Istio system namespace. 🏠
• --kubeclient-timeout="15s" — Kubernetes client timeout as a time.Duration string, defaults to 15 seconds. ⌛
• -c, --kubeconfig="" — Kubernetes configuration file. 📄
• -n, --namespace="" — Kubernetes namespace. 📦
• --vklog=0 — number for the log level verbosity. Like -v flag. ex: --vklog=9. 🔊

🔥 EXAMPLE 🔥

okay bestie, examples are the actual moment. Copy these exactly, no improv:

         # Retrieve sync status for all Envoys in a mesh
         istioctl x internal-debug syncz

         # Retrieve sync diff for a single Envoy and Istiod
         istioctl x internal-debug syncz istio-egressgateway-59585c5b9c-ndc59.istio-system

         # List all supported debug types
         istioctl x internal-debug --list

         # SECURITY OPTIONS

         # Retrieve syncz debug information directly from the control plane, using token security
         # (This is the usual way to get the debug information with an out-of-cluster control plane.)
         istioctl x internal-debug syncz --xds-address istio.cloudprovider.example.com:15012

         # Retrieve syncz debug information via Kubernetes config, using token security
         # (This is the usual way to get the debug information with an in-cluster control plane.)
         istioctl x internal-debug syncz

         # Retrieve syncz debug information directly from the control plane, using RSA certificate security
         # (Certificates must be obtained before this step.  The --cert-dir flag lets istioctl bypass the Kubernetes API server.)
         istioctl x internal-debug syncz --xds-address istio.example.com:15012 --cert-dir ~/.istio-certs

         # Retrieve syncz information via XDS from specific control plane in multi-control plane in-cluster configuration
         # (Select a specific control plane in an in-cluster canary Istio configuration.)
         istioctl x internal-debug syncz --xds-label istio.io/rev=default

🌈 SEE ALSO 🌈

• istioctl-experimental(1) — the parent-command bestie, go read it too. 👑

Auto generated by spf13/cobra in Jan — slay, and goodbye from ISTIOCTL-EXPERIMENTAL-INTERNAL-DEBUG(1) 💋✨