ISTIOCTL-PROXY-CONFIG-ECDS(1)

📦 version 1.31.3, in nixos 26.05, nixpkgs unstable

💅 ISTIOCTL-PROXY-CONFIG-ECDS 💅

okay so bestie, welcome to the manual page for istioctl-proxy-config-ecds — yes that's a whole mouthful, i know, but stay with me because this one's actually iconic. it lives in the istioctl family of manual pages and it's your backstage pass to the typed extension config of the Envoy hanging out inside whatever pod you point at. ✨

✨ SYNOPSIS ✨

istioctl proxy-config ecds [/][.] [flags]

literally that's it. slay.

🦋 DESCRIPTION 🦋

so what does it do? it retrieves info about the typed extension configuration for the Envoy instance in the pod you specified. that's the whole vibe. you ask, it fetches, you get the tea. 🍵

🎀 OPTIONS 🎀

  • -f, --file="" — an Envoy config dump JSON file. feed it one of those instead of talking to the cluster.
  • -h, --help[=false] — help for ecds. the classic. the icon.
  • -o, --output="short" — the output format, and it's gotta be one of json|yaml|short. default is short, no cap.

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

these ones you didn't even have to bring yourself — they're inherited from the parent command, and they ate:

  • --as="" — username to impersonate for the operation. user could be a regular user or a service account in a namespace.
  • --as-group=[] — group to impersonate for the operation, this flag can be repeated to specify multiple groups. repeat it, stack it, go off.
  • --as-uid="" — UID to impersonate for the operation.
  • --context="" — Kubernetes configuration context.
  • -i, --istioNamespace="istio-system" — Istio system namespace. defaults to istio-system bc ofc it does.
  • --kubeclient-timeout="15s" — Kubernetes client timeout as a time.Duration string, defaults to 15 seconds.
  • -c, --kubeconfig="" — Kubernetes configuration file.
  • -n, --namespace="" — Kubernetes namespace.
  • --proxy-admin-port=15000 — Envoy proxy admin port.
  • --vklog=0 — number for the log level verbosity. like the -v flag. ex: --vklog=9. go feral with it.

🔥 EXAMPLE 🔥

okay here are the actual receipts, copy-paste ready, character for character:

# Retrieve full typed extension configuration for a given pod from Envoy.
istioctl proxy-config ecds <pod-name[.namespace]>

# Retrieve full typed extension configuration for a pod under a deployment from Envoy.
istioctl proxy-config ecds deployment/<deployment-name[.namespace]>

# Retrieve endpoint summary without using Kubernetes API
ssh <user@hostname> 'curl localhost:15000/config_dump' > envoy-config.json
istioctl proxy-config ecds --file envoy-config.json

that third one? chef's kiss. no Kubernetes API, just you, a little ssh, a little curl localhost:15000/config_dump, and a --file envoy-config.json to seal the deal. 🫶

🌈 SEE ALSO 🌈

🫶 quick vibe check bestie: keep those option names and paths exactly as written, ok? the terminal does NOT do improvisation.

and that's the page!! sign-off time: this little beauty was Auto generated by spf13/cobra, dated Jan 1980 (yes, really, that's the date, don't come for me 😭), and it's page ISTIOCTL-PROXY-CONFIG-ECDS(1) of the manual. mwah. 💖✨🎀

📦 where this page comes from