ISTIOCTL-ZTUNNEL-CONFIG-CERTIFICATE(1)

🎀 istioctl-ztunnel-config-certificate 🎀

ok so bestie, this is a page from the istioctl-ztunnel-config-certificate manual (yes that's a whole mouthful, we're just gonna vibe with it) — it's the certificate sub-command of the wider istioctl ztunnel-config family. Buckle up, it's short and sweet and kind of iconic ngl 💅

---

✨ NAME ✨

istioctl-ztunnel-config-certificate — literally just retrieves the certificate for the Ztunnel pod you point it at. That's the whole job. She's focused. She's employed. 🫶

---

🌸 SYNOPSIS 🌸

istioctl ztunnel-config certificate [flags]

short, clean, no cap ✨

---

🦋 DESCRIPTION 🦋

so it retrieves info about certificates for the Ztunnel instance. that's it, that's the whole description, and honestly? she ate. information about certificates → you get it → you go live your life 💖

---

💅 OPTIONS 💅

• -f, --file="" — a Ztunnel config dump JSON file, if that's how you're choosing to roll 🍓
• -h, --help[=false] — help for certificate. the girlies love a little help
• --node="" — filter workloads by the node field 👑
• -o, --output="short" — the output format, and it's gotta be one of json|yaml|short. default is "short"
• --proxy-admin-port=15000 — the Ztunnel proxy admin port. it's 15000 unless you say otherwise 🌈

---

💜 OPTIONS INHERITED FROM PARENT COMMANDS 💜

these aren't even hers, she's just holding them for the parent command, and that's main character energy tbh:

• --as="" — username to impersonate for the operation. could be a regular user or a service account in a namespace 🔥
• --as-group=[] — group to impersonate for the operation. you can repeat this flag to specify multiple groups ✨
• --as-uid="" — UID to impersonate for the operation.
• --context="" — Kubernetes configuration context ⭐
• -i, --istioNamespace="istio-system" — the Istio system namespace, defaults to "istio-system" like tradition demands
• --kubeclient-timeout="15s" — Kubernetes client timeout as a time.Duration string, defaults to 15 seconds ⏱️
• -c, --kubeconfig="" — Kubernetes configuration file
• -n, --namespace="" — Kubernetes namespace
• --vklog=0 — number for the log level verbosity. like the -v flag. ex: --vklog=9 😭 (yes, nine. go off)

ngl, the --vklog one is giving "cryptic but powerful". don't ask me what happens at 9, the manpage just says you can 🔥

---

🧚 EXAMPLE 🧚

# Retrieve summary about workload configuration for a randomly chosen ztunnel.
istioctl ztunnel-config certificates

# Retrieve full certificate dump of workloads for a given Ztunnel instance.
istioctl ztunnel-config certificates <ztunnel-name[.namespace]> -o json

see how it says certificates (plural) in the examples when the synopsis says certificate? yeah. i'm not gonna pretend that's a typo or not a typo — the manpage says what it says, and we copy the manpage exactly in this house 💀 copy-paste these at your own risk, bestie 🙈

---

🌺 SEE ALSO 🌺

• istioctl-ztunnel-config(1) — the parent, the origin story, the mothership 👑

---

and that's the page!! auto generated by spf13/cobra, dated Jan 1 — so like, shoutout to the robot that wrote this, she did a great job, and shoutout to you for reading the whole thing. periodt 💖✨🎀