Trace policy by identity cilium

Explain allow/deny verdict between two security identities; debug NetworkPolicy drops

cilium-dbg policy trace --src-identity <id> --dst-identity <id> --dport <port>

#cilium #security #debug #k8s

more cilium all 23 commands →

Verbose agent health cilium status --verbose Observe TCP egress to FQDN hubble observe --protocol tcp --from-pod <ns>/<pod> --to-fqdn '*.example.com' ClusterMesh status cilium clustermesh status --wait BPF NAT table cilium-dbg bpf nat list | head Cilium status cilium status --wait