cilium-dbg preflight validate-cnp
Validate Cilium Network Policies deployed in the cluster
Synopsis
Before upgrading Cilium it is recommended to run this validation checker to make sure the policies deployed are valid. The validator will verify if all policies deployed in the cluster are valid, in case they are not, an error is printed and the has an exit code 1 is returned.
cilium-dbg preflight validate-cnp [flags]
Options
--enable-k8s Enable the k8s clientset (default true)
--enable-k8s-api-discovery Enable discovery of Kubernetes API groups and resources with the discovery API
-h, --help help for validate-cnp
--k8s-api-server string Kubernetes API server URL
--k8s-client-burst int Burst value allowed for the K8s client (default 20)
--k8s-client-connection-keep-alive duration Configures the keep alive duration of K8s client connections. K8 client is disabled if the value is set to 0 (default 30s)
--k8s-client-connection-timeout duration Configures the timeout of K8s client connections. K8s client is disabled if the value is set to 0 (default 30s)
--k8s-client-qps float32 Queries per second limit for the K8s client (default 10)
--k8s-heartbeat-timeout duration Configures the timeout for api-server heartbeat, set to 0 to disable (default 30s)
--k8s-kubeconfig-path string Absolute path of the kubernetes kubeconfig file
Options inherited from parent commands
--config string Config file (default is $HOME/.cilium.yaml)
-D, --debug Enable debug messages
-H, --host string URI to server-side API
SEE ALSO
cilium-dbg preflight - Cilium upgrade helper