ISTIOCTL-PROXY-CONFIG-ROUTE(1)
π istioctl-proxy-config-route β the manual page, but make it make sense
okay so bestie, welcome to the istioctl-proxy-config-route page of the istioctl manual (section 1, for the record π). this is the one that tells you everything about the route config inside the Envoy that's chilling in a pod you pick. let's get into it π«Ά
β¨ NAME β¨
istioctl-proxy-config-route β literally retrieves the route configuration for the Envoy that's running in the pod you specify. that's it, that's the whole gig π
π SYNOPSIS π
istioctl proxy-config route [/][.] [flags]
yes the [/][.] is real, it's not a typo, it's just how this one is written down. slay.
π¦ DESCRIPTION π¦
so you wanna know what routes your Envoy has going on? this command pulls up all the info about route configuration for the Envoy instance inside the pod you point it at. it's giving "let me peek at your itinerary" energy and honestly we're obsessed β¨
π OPTIONS π
-f,--file=""β an Envoy config dump JSON file, so you can read a dump you already saved instead of touching the cluster. no cap.-h,--help[=false]β help forroute. your little "what does this even do" button π--name=""β filters listeners by the route name field. yes, it says listeners, that's what it says, don't come for me π-o,--output="short"β output format, and it has to be one ofjson,yaml, orshort. default isshortif you don't say anything.--verbose[=true]β outputs more information. more is more, periodt π₯
π OPTIONS INHERITED FROM PARENT COMMANDS π
these don't live here, they're hand-me-downs from the parent command, but you can absolutely use them here and they are iconic for it:
--as=""β username to impersonate for the operation. can be a regular user or a service account in a namespace πΈ--as-group=[]β group to impersonate for the operation. this flag can be repeated if you need multiple groups, so go off π--as-uid=""β UID to impersonate for the operation.--context=""β Kubernetes configuration context.-i,--istioNamespace="istio-system"β Istio system namespace. defaults toistio-system.--kubeclient-timeout="15s"β Kubernetes client timeout as atime.Durationstring, and it defaults to 15 seconds. so15sunless you're feeling different π-c,--kubeconfig=""β Kubernetes configuration file.-n,--namespace=""β Kubernetes namespace.--proxy-admin-port=15000β Envoy proxy admin port.15000is the default, as is tradition.--vklog=0β a number for the log level verbosity, like the-vflag. example given is--vklog=9, so go wild π
π EXAMPLE π
these are copied exactly, bestie. do not remix them. i'm serious π
# Retrieve summary about route configuration for a given pod from Envoy.
istioctl proxy-config routes <pod-name[.namespace]>
# Retrieve summary about route configuration for a pod under a deployment from Envoy.
istioctl proxy-config routes deployment/<deployment-name[.namespace]>
# Retrieve route summary for route 9080.
istioctl proxy-config route <pod-name[.namespace]> --name 9080
# Retrieve full route dump for route 9080
istioctl proxy-config route <pod-name[.namespace]> --name 9080 -o json
# Retrieve route summary without using Kubernetes API
ssh <user@hostname> 'curl localhost:15000/config_dump' > envoy-config.json
istioctl proxy-config routes --file envoy-config.json
quick note that the examples say routes (plural) while the synopsis says route (singular) β that's just how it is in the original, both are in here, i'm not touching it π
π₯ SEE ALSO π₯
istioctl-proxy-config(1)β go say hi to the parent, it raised this command right π«Ά
okay that's the whole page, you're officially smarter than you were five minutes ago, i'm so proud of you π₯Ήπ
this absolute banger of a manpage was auto generated by spf13/cobra, dated Jan 1980 (yes really, we love a vintage moment β), and it belongs to ISTIOCTL-PROXY-CONFIG-ROUTE(1). mwah π
π¦ where this page comes from
- nixos 26.05: istioctl 1.29.2
- nixpkgs unstable: istioctl 1.31.3
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms