ISTIOCTL-ZTUNNEL-CONFIG-POLICY(1)

💅 istioctl-ztunnel-config-policy — like, the ztunnel policy manual page, bestie

Okay so real talk: this is a page from the istioctl-ztunnel-config-policy manual (yes, the whole man page name is a mouthful, iykyk), and it's all about pulling up the policies for a specific Ztunnel pod. Let's get into it ✨

---

🌸 SYNOPSIS 🌸

istioctl ztunnel-config policy [flags]

That's the whole vibe. Command, subcommand, optional flags. Slay.

---

🦋 DESCRIPTION 🦋

So basically this retrieves information about the policies for the Ztunnel instance. That's it, that's the whole description — main character energy, minimal words. 🎀

---

✨ OPTIONS ✨

• -f, --file="" — point it at a Ztunnel config dump JSON file 🍓
• -h, --help[=false] — the help for policy, obviously
• --node="" — filters workloads by the node field
• -o, --output="short" — the output format, and it's gotta be one of json|yaml|short (short is the default, no cap)
• --policy-namespace="" — filters policies by the namespace field
• --proxy-admin-port=15000 — the Ztunnel proxy admin port, defaults to 15000

---

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

These ones come from the parent command, so they're giving ✨ borrowed but still iconic ✨:

• --as="" — username to impersonate for the operation. User could be a regular user or a service account in a namespace
• --as-group=[] — group to impersonate for the operation, this flag can be repeated to specify multiple groups.
• --as-uid="" — UID to impersonate for the operation.
• --context="" — Kubernetes configuration context
• -i, --istioNamespace="istio-system" — Istio system namespace
• --kubeclient-timeout="15s" — Kubernetes client timeout as a time.Duration string, defaults to 15 seconds.
• -c, --kubeconfig="" — Kubernetes configuration file
• -n, --namespace="" — Kubernetes namespace
• --vklog=0 — number for the log level verbosity. Like -v flag. ex: --vklog=9

---

🌈 EXAMPLE 🌈

Here's how you actually use it, bestie 💖

  # Retrieve summary about policy configuration for a randomly chosen ztunnel.
  istioctl ztunnel-config policies

  # Retrieve full policy dump of workloads for a given Ztunnel instance.
  istioctl ztunnel-config policies <ztunnel-name[.namespace]> -o json

Notice the examples say policies while the synopsis says policy — I'm not gonna fix it, I'm just gonna report it, periodt. 🙈

---

🫶 SEE ALSO 🫶

• istioctl-ztunnel-config(1) — go read the parent page, it's giving family tree 🧚

---

Auto generated by spf13/cobra, and dated Jan 1980 — yes, the robot wrote this and the timestamp is lowkey from another era 💀. Anyway, that's the whole page, hope it ate, mwah 💜🎀

---

okay bye bestie, go filter some policies 🦋⭐