cilium preflight migrate-identity

Migrate KVStore-backed identities to kubernetes CRD-backed identities

Synopsis

migrate-identity allows migrating to CRD-backed identities while minimizing connection interruptions. It will allocate a CRD-backed identity, with the same numeric security identity, for each cilium security identity defined in the kvstore. When cilium-agents are restarted with identity-allocation-mode set to CRD the numeric identities will then be equivalent between new instances and not-upgraded ones. In cases where the numeric identity is already in-use by a different set of labels, a new numeric identity is created.

  1. cilium preflight migrate-identity [flags]

Options

  1.   -h, --help                         help for migrate-identity
  2.       --k8s-api-server string        Kubernetes api address server (for https use --k8s-kubeconfig-path instead)
  3.       --k8s-kubeconfig-path string   Absolute path of the kubernetes kubeconfig file
  4.       --kvstore string               Key-value store type
  5.       --kvstore-opt map              Key-value store options (default map[])

Options inherited from parent commands

  1.       --config string   config file (default is $HOME/.cilium.yaml)
  2.   -D, --debug           Enable debug messages
  3.   -H, --host string     URI to server-side API

SEE ALSO