ciliumctl(1)
Command-line tool for managing and debugging Cilium network policies and connectivity.
Synopsis
ciliumctl [OPTION]... COMMAND [ARG]...Description
ciliumctl is the command-line interface for interacting with Cilium, a Linux kernel-based networking and security platform. It allows operators to inspect and manage Cilium agents, network policies, service load balancing, and endpoint connectivity across Kubernetes clusters.
The tool communicates with Cilium agents via a Unix socket or remote API to retrieve cluster state, policy information, and network metrics. Common tasks include viewing endpoints, checking policy enforcement, debugging connectivity issues, and inspecting service configurations.
Common options
| Flag | What it does |
|---|---|
-n, --namespace STRING | Kubernetes namespace to operate in (default: cilium) |
--context STRING | kubeconfig context to use |
-o, --output STRING | output format: json, yaml, or table (default: table) |
--kubeconfig PATH | path to kubeconfig file (default: ~/.kube/config) |
-v, --verbose | enable verbose/debug output |
--host STRING | Cilium API server host address |
Examples
List all Cilium endpoints (pods) and their security labels in the cluster
ciliumctl get endpointsDisplay all active network policies enforced by Cilium
ciliumctl get policyRun connectivity tests between endpoints to verify network policies are working
ciliumctl connectivity testShow all Cilium-managed services and their backend endpoints
ciliumctl get serviceDump detailed debug information about Cilium agent state
ciliumctl debug infoList all endpoint labels in JSON format for programmatic processing
ciliumctl -o json get endpoints | jq '.[] | .labels'