cilium-dbg preflight validate-cnp

Validate Cilium Network Policies deployed in the cluster

Synopsis

Before upgrading Cilium it is recommended to run this validation checker to make sure the policies deployed are valid. The validator will verify if all policies deployed in the cluster are valid, in case they are not, an error is printed and the has an exit code 1 is returned.

cilium-dbg preflight validate-cnp [flags]

Options

      --enable-k8s                                  Enable the k8s clientset (default true)
      --enable-k8s-api-discovery                    Enable discovery of Kubernetes API groups and resources with the discovery API
  -h, --help                                        help for validate-cnp
      --k8s-api-server string                       Kubernetes API server URL
      --k8s-client-burst int                        Burst value allowed for the K8s client (default 20)
      --k8s-client-connection-keep-alive duration   Configures the keep alive duration of K8s client connections. K8 client is disabled if the value is set to 0 (default 30s)
      --k8s-client-connection-timeout duration      Configures the timeout of K8s client connections. K8s client is disabled if the value is set to 0 (default 30s)
      --k8s-client-qps float32                      Queries per second limit for the K8s client (default 10)
      --k8s-heartbeat-timeout duration              Configures the timeout for api-server heartbeat, set to 0 to disable (default 30s)
      --k8s-kubeconfig-path string                  Absolute path of the kubernetes kubeconfig file

Options inherited from parent commands

      --config string   Config file (default is $HOME/.cilium.yaml)
  -D, --debug           Enable debug messages
  -H, --host string     URI to server-side API

SEE ALSO