ISTIOCTL-EXPERIMENTAL-PROXY-STATUS(1)

📦
version 1.31.3 · 2 versions
, in nixpkgs unstable

💅 istioctl-experimental-proxy-status(1) — like, the whole entire manual, bestie 🎀

Hey hi hello, this is the page for istioctl-experimental-proxy-status, part of the istioctl-experimental family (its manual name, in case you were wondering ✨). Sit down, grab a matcha, we're gonna go through it.

🌸 NAME 🌸

istioctl-experimental-proxy-status — it retrieves the synchronization status of each Envoy in the mesh. That's it, that's the whole vibe check for every proxy in your mesh 👑

✨ SYNOPSIS ✨

istioctl experimental proxy-status [/][.] [flags]

🦋 DESCRIPTION 🦋

It pulls the last sent and last acknowledged xDS sync from Istiod to each Envoy in the mesh. So like, you get to see who's on top of their homework and who's lowkey lagging behind 😭

💖 OPTIONS 💖

  • --authority="" — the XDS Subject Alternative Name (for example istiod.istio-system.svc)
  • --cert-dir="" — the XDS Endpoint certificate directory
  • --file="" — an Envoy config dump JSON file
  • -h, --help[=false] — help for proxy-status
  • --insecure[=false] — skip server certificate and domain verification. (NOT SECURE!) 🙈 like please know what you're doing, bestie
  • -o, --output="table" — output format: one of json|yaml|table
  • --plaintext[=false] — use plain-text HTTP/2 when connecting to server (no TLS)
  • --proxy-admin-port=15000 — Envoy proxy admin port
  • -r, --revision="" — control plane revision
  • --timeout=30s — the duration to wait before failing ⏰
  • -v, --verbosity=0 — verbosity level for proxy status output. 0=default, 1=show all xDS types (max verbosity) 👀
  • --xds-address="" — XDS Endpoint
  • --xds-label="" — Istiod pod label selector
  • --xds-port=15012 — Istiod pod port

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

These are the ones you got from the parent command, no cap — they come as a package deal 🫶

  • --as="" — username to impersonate for the operation. User could be a regular user or a service account in a namespace
  • --as-group=[] — group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid="" — UID to impersonate for the operation.
  • --context="" — Kubernetes configuration context
  • -i, --istioNamespace="istio-system" — Istio system namespace
  • --kubeclient-timeout="15s" — Kubernetes client timeout as a time.Duration string, defaults to 15 seconds.
  • -c, --kubeconfig="" — Kubernetes configuration file
  • -n, --namespace="" — Kubernetes namespace
  • --vklog=0 — number for the log level verbosity. Like -v flag. ex: --vklog=9

🔥 EXAMPLE 🔥

Okay this is the part where it actually gets iconic. Copy these, they're literal gold ⭐

   # Retrieve sync status for all Envoys in a mesh
   istioctl proxy-status

   # Retrieve sync status for Envoys in a specific namespace
   istioctl proxy-status --namespace foo

   # Retrieve sync diff for a single Envoy and Istiod
   istioctl proxy-status istio-egressgateway-59585c5b9c-ndc59.istio-system

   # SECURITY OPTIONS

   # Retrieve proxy status information directly from the control plane, using token security
   # (This is the usual way to get the proxy-status with an out-of-cluster control plane.)
   istioctl ps --xds-address istio.cloudprovider.example.com:15012

   # Retrieve proxy status information via Kubernetes config, using token security
   # (This is the usual way to get the proxy-status with an in-cluster control plane.)
   istioctl proxy-status

   # Retrieve proxy status information directly from the control plane, using RSA certificate security
   # (Certificates must be obtained before this step.  The --cert-dir flag lets istioctl bypass the Kubernetes API server.)
   istioctl ps --xds-address istio.example.com:15012 --cert-dir ~/.istio-certs

   # Retrieve proxy status information via XDS from specific control plane in multi-control plane in-cluster configuration
   # (Select a specific control plane in an in-cluster canary Istio configuration.)
   istioctl ps --xds-label istio.io/rev=default

   # Show the status of a specific proxy in JSON format
   istioctl proxy-status --output json

🧚 SEE ALSO 🧚

Auto generated by spf13/cobra 🎀 and dated Jan 19 — so if the vibes feel a lil vintage, that's why. Slay, go check on your Envoys, bestie. Periodt. 💅✨

📦 where this page comes from