This is the multi-page printable view of this section. Click here to print.
The following commands are available in the smm command-line tool. If you want to uninstall Service Mesh Manager, see Cleanup and uninstall.
To remove the demo application, Service Mesh Manager, Istio, and any other components from your cluster, run the following command. It takes care of removing these components in the correct order.
$ smm uninstall -a
To delete the Service Mesh Manager operator, run:
$ helm del --purge smm-operator
Install and manage Service Mesh Manager
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
-h, --help help for smm
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Activate local Service Mesh Manager installation by setting up registry access, overwriting the current configuration.
smm activate [flags]
-h, --help help for activate
--host string Host of the registry to be used for fetching smm images [default: SMM_REGISTRY_HOST environment variable's value]
--password string Password to use for authenticating to SMM docker registry [default: SMM_REGISTRY_PASSWORD environment variable's value]
--prefix string Path prefix of the registry to be used for fetching smm images [default: SMM_REGISTRY_PREFIX environment variable's value]
--user string Username to use for authenticating to SMM docker registry [default: SMM_REGISTRY_USER environment variable's value]
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Activate local Service Mesh Manager installation by setting up registry access, overwriting the current configuration.
smm activate-ecr [flags]
-h, --help help for activate-ecr
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Analyze Service Mesh Manager and Istio configuration
smm analyze [flags]
-h, --help help for analyze
--namespace string Filter validation results by namespace
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install and manage cert-manager
-h, --help help for cert-manager
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install cert-manager
Installs cert-manager.
The command automatically applies the resources. It can only dump the applicable resources with the ‘–dump-resources’ option.
smm cert-manager install [flags]
# Install to the cert-manager namespace. This command will fail if cert-manager is already installed from a different source.
smm cert-manager install
-d, --dump-resources Dump resources to stdout instead of applying them
-h, --help help for install
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Output or delete Kubernetes resources to uninstall cert-manager
Output or delete Kubernetes resources to uninstall cert-manager.
The command automatically removes the resources. It can only dump the removable resources with the ‘–dump-resources’ option.
smm cert-manager uninstall [flags]
# Default uninstall.
smm cert-manager uninstall
# Uninstall cert-manager from a non-default namespace.
smm cert-manager uninstall --cert-manager-namespace smm-system
-d, --dump-resources Dump resources to stdout instead of applying them
--force Force uninstalling cert-manager
-h, --help help for uninstall
--skip Skip uninstalling cert-manager
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install and manage ASG clouddoor gateway
--gateway-namespace string Namespace for ASG clouddoor gateway operator (default "asg-system")
-h, --help help for clouddoor
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install ASG clouddoor gateway
Installs ASG clouddoor gateway. The command automatically applies the resources. It can only dump the applicable resources with the ‘–dump-resources’ option.
smm clouddoor install [flags]
# Default install.
smm clouddoor install
# Install gateway into a non-default namespace.
smm clouddoor install -n smm-system
-d, --dump-resources Dump resources to stdout instead of applying them
-s, --enabled-services strings Enabled services of the gateway operator
-h, --help help for install
--no-gateway Disable the creation of the mesh gateway
-r, --replicas uint Replica count of the deployments (only used if HPA is disabled) (default 1)
--requests-cpu uint The gateway operator pods' requested cpu shares in millicores (default 100)
--requests-memory uint The gateway operator pods' requested memory in megabytes (default 64)
--strict-limits Set the gateway operator pods' limits to match the requests, useful for performance testing
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--gateway-namespace string Namespace for ASG clouddoor gateway operator (default "asg-system")
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Output or delete Kubernetes resources to uninstall ASG gateway
Output or delete Kubernetes resources to uninstall ASG gateway.
The command automatically removes the resources. It can only dump the removable resources with the ‘–dump-resources’ option.
smm clouddoor uninstall [flags]
# Default uninstall.
smm clouddoor uninstall
# Uninstall ASG gateway from a non-default namespace.
smm clouddoor uninstall -n custom-clouddoor-ns
-d, --dump-resources Dump resources to stdout instead of applying them
-h, --help help for uninstall
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--gateway-namespace string Namespace for ASG clouddoor gateway operator (default "asg-system")
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
View and manage persistent configuration
-h, --help help for config
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Delete persistent configuration
smm config delete [flags]
-h, --help help for delete
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Edit persistent configuration
smm config edit [flags]
-h, --help help for edit
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
View persistent configuration
smm config view [flags]
-h, --help help for view
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Open the Service Mesh Manager dashboard in a web browser
smm dashboard [flags]
-h, --help help for dashboard
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install and manage demo application
--demo-namespace string Namespace for demo application (default "smm-demo")
-h, --help help for demoapp
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install demo application
Installs demo application.
The command automatically applies the resources. It can only dump the applicable resources with the ‘–dump-resources’ option.
smm demoapp install [flags]
# Default install.
smm demoapp install
# Install demo application into a non-default namespace.
smm demoapp install -n smm-system
--disable-autoscaling Disable HPA based autoscaling of the demo application's deployments
--disable-load Do not start the load generator
-d, --dump-resources Dump resources to stdout instead of applying them
-s, --enabled-services strings Enabled services of the demo app
-h, --help help for install
--peer The destination cluster is a peer in a multi-cluster mesh
-r, --replicas uint Replica count of the deployments (only used if HPA is disabled) (default 1)
--requests-cpu uint The demoapp pods' requested cpu shares in millicores (default 40)
--requests-memory uint The demoapp pods' requested memory in megabytes (default 64)
--strict-limits Set the demoapp pods' limits to match the requests, useful for performance testing
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--demo-namespace string Namespace for demo application (default "smm-demo")
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Start sending load to demo application
-h, --help help for load
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--demo-namespace string Namespace for demo application (default "smm-demo")
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Start sending traffic to the demo application
The command starts a new deployment that will generate HTTP load on the demo application.
The generated load will vary over time, it will fluctuate between min-rps and max-rps over the
swing-period timeframe.
When invoked without additional flags the command will start loading the demo application with
sane defaults.
smm demoapp load start [flags]
-h, --help help for start
--max-rps int Maximum RPS of the load (default 30)
--min-rps int Minimum RPS of the load (default 10)
--requests-cpu uint The load generator's requested cpu shares in millicores (default 250)
--requests-memory uint The load generator's requested memory in megabytes (default 128)
--rps int If specified a constant load of this RPS is put on the demo application
--swing-period duration How much time should it take to go from min to max and min again (default 23m0s)
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--demo-namespace string Namespace for demo application (default "smm-demo")
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Stop sending traffic to the demo application
The command destroys the deployment responsible for generating HTTP load on the demo application.
smm demoapp load stop [flags]
-h, --help help for stop
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--demo-namespace string Namespace for demo application (default "smm-demo")
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Output or delete Kubernetes resources to uninstall demo application
Output or delete Kubernetes resources to uninstall demo application.
The command automatically removes the resources. It can only dump the removable resources with the ‘–dump-resources’ option.
smm demoapp uninstall [flags]
# Default uninstall.
smm demoapp uninstall
# Uninstall demo application from a non-default namespace.
smm demoapp uninstall install -n custom-demoapp-ns
-d, --dump-resources Dump resources to stdout instead of applying them
-h, --help help for uninstall
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--demo-namespace string Namespace for demo application (default "smm-demo")
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
--istio-revision string Istio control plane revision (format: [istio-resource-name].[namespace])
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Show graph
smm graph [[--service=]namespace/servicename] [flags]
-h, --help help for graph
--outbound Whether to show outbound or inbound metrics
-r, --refresh-interval duration the interval to refresh the dashboard (default 10s)
-d, --relative-duration duration the relative duration from now to load the graph (default 15m0s)
--title-suffix string Title suffix
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install Service Mesh Manager
Installs Service Mesh Manager.
The command automatically applies the resources. It can only dump the applicable resources with the ‘–dump-resources’ option.
The command can install every component at once with the ‘–install-everything’ option.
smm install [flags]
# Default install.
smm install
# Install Service Mesh Manager into a non-default namespace.
smm install -n smm-system
--additional-cp-settings string A yaml file containing additional settings to be added to the freshly created control plane object.
--anonymous-auth Switch to anonymous mode
--api-image string Image for the API
--cluster-name string Name of the cluster
-d, --dump-resources Dump resources to stdout instead of applying them
--enable-ha Enable HA mode for smm components (requires at least 3 nodes in the destination cluster)
-h, --help help for install
--install-cert-manager Whether to install cert manager (default true)
-a, --install-everything Install all required components at once
--istio-cr-file string Filename of a custom Istio CR yaml
--istio-namespace string Namespace of Istio sidecar injector (default "istio-system")
--release-name string Name of the release (default "smm")
--run-demo Install demo application, send load and open up the dashboard
--web-image string Image for the frontend
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install and manage Istio
-h, --help help for istio
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
-r, --revision string Control plane revision
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage Istio mesh member clusters
-h, --help help for cluster
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Attach peer cluster to the mesh
smm istio cluster attach [path-to-kubeconfig] [flags]
--active-istio-control-plane Whether to deploy an active istio control plane to the attached cluster
--force Try to attach the cluster even if it is already attached
-h, --help help for attach
--name string Name override for the peer cluster
--network-name string Network name for the peer cluster
--peer-api-server-endpoint-address string The publicly accessible address of the peer cluster's k8s api server
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Detach peer cluster from the mesh
smm istio cluster detach [kubeconfig] [flags]
-h, --help help for detach
--name string Name override for the peer cluster
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Show cluster status
smm istio cluster status [flags]
-h, --help help for status
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Installs Istio utilizing Banzai Cloud’s Istio-operator
Installs Istio utilizing Banzai Cloud’s Istio-operator.
The command automatically applies the resources. It can only dump the applicable resources with the ‘–dump-resources’ option.
The manual mode is a two phase process as the operator needs custom CRDs to work. The installer automatically detects whether the CRDs are installed or not, and behaves accordingly.
smm istio install [flags]
# Default install.
smm istio install
# Install Istio into a non-default namespace.
smm istio install -n istio-custom-ns
--cluster-name string Name of the cluster
-d, --dump-resources Dump resources to stdout instead of applying them
--force Force Istio upgrade (only applicable in non-interactive mode)
-h, --help help for install
-f, --istio-cr-file string Filename of a custom Istio CR yaml
--release-name string Name of the release (default "istio-operator")
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Set outbound traffic policy
smm istio outbound-traffic-policy [allowed|restricted] [flags]
-h, --help help for outbound-traffic-policy
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Show basic mesh overview metrics
smm istio overview [flags]
-s, --evaluation-duration-seconds uint Metrics timespan in seconds (default 60)
-h, --help help for overview
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Output or delete Kubernetes resources to uninstall Istio
Output or delete Kubernetes resources to uninstall Istio.
The command automatically removes the resources. It can only dump the removable resources with the ‘–dump-resources’ option.
smm istio uninstall [flags]
# Default uninstall.
smm istio uninstall
# Uninstall Istio from a non-default namespace.
smm istio uninstall -n custom-istio-ns
-d, --dump-resources Dump resources to stdout instead of applying them
-h, --help help for uninstall
--release-name string Name of the release (default "istio-operator")
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
-n, --namespace string Namespace in which Istio is installed [$ISTIO_NAMESPACE] (default "istio-system")
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
-r, --revision string Control plane revision
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage license
-h, --help help for license
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Apply SMM license
smm license apply [flags]
-h, --help help for apply
--licenseKeyPath string Path to SMM license key
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
List SMM license
smm license list [flags]
-h, --help help for list
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Remove SMM license
smm license remove [flags]
-h, --help help for remove
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Log in to Service Mesh Manager
smm login [flags]
-h, --help help for login
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Install and manage Service Mesh Manager operator
-h, --help help for operator
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
smm operator reconcile [flags]
-h, --help help for reconcile
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage private registry access for Service Mesh Manager
-h, --help help for registry
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Add new docker private registry using basic authentication to the SMM deployment.
Add new docker private registry using basic authentication to the SMM deployment.
If the password argument is not specified, the CLI will ask the password interactively.
To add a dockerhub user please specify https://index.docker.io/v1/ as URL.
Note: the changes are only saved locally, to update the remote cluster please call:
smm registry reconcile
smm registry add [flags] registryUrl registryUserName [password]
-h, --help help for add
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Add new ECR based registry to the Service Mesh Manager deployment.
Add new ECR based registry to the Service Mesh Manager deployment.
If the password argument is not specified, the CLI will ask the password interactively.
Note: the changes are only saved locally, to update the remote cluster please call:
smm registry reconcile
smm registry ecr [flags] account-id region access-key-id [secret-access-key]
-h, --help help for ecr
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Display private registry settings for Service Mesh Manager deployments.
smm registry list [flags]
-h, --help help for list
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
override default image location for Service Mesh Manager images
-h, --help help for override
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
disable image overrides for Service Mesh Manager images
disable image overrides for Service Mesh Manager images
smm registry override reset [flags]
-h, --help help for reset
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
override default image location for Service Mesh Manager images
override default image location for Service Mesh Manager images
Image names, if override is set, will be constructed the following way:
<host>/<prefix>/<image>:<tag>
For example, in case of the Service Mesh Manager API server whose name is (<image>) smm, and the
<host> is set to myrepo.example.org, while <prefix> is set to smm-mirror the images will be
downloaded:
myrepo.example.org/smm-mirror/smm:<tag>
smm registry override set [flags]
-h, --help help for set
--host string Host name of the docker registry server to fetch Service Mesh Manager images
--prefix string URL prefix the docker repository to fetch Service Mesh Manager images
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
show image override status for Service Mesh Manager images
show image override status for Service Mesh Manager images
smm registry override status [flags]
-h, --help help for status
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Update the remote cluster’s image pull secrets from the local settings.
Update the remote cluster’s image pull secrets from the local settings.
The command will update the ControlPlane CR and execute a reconciliation so that the pull secrets configuration is updated in the cluster.
smm registry reconcile [flags]
-h, --help help for reconcile
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Remove a registry from the list of registries used by Service Mesh Manager for image pulling.
Remove a registry from the list of registries used by Service Mesh Manager for image pulling.
Note: the changes are only saved locally, to update the remote cluster please call:
smm registry reconcile
smm registry remove [flags] registryUrl
-h, --help help for remove
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage Streaming Data Manager.
Manage Kafka clusters on a Kubernetes cluster.
Manage Kafka clusters on a Kubernetes cluster.
-h, --help help for cluster
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Manage Kafka Connect deployments
Manage Kafka Connect deployments
-h, --help help for kafka-connect
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Create Kafka Connect instance.
Create Kafka Connect instance based on json/yaml stdin or file config
smm sdm cluster kafka-connect create [flags]
# Create Kafka Connect instance from config file
$ smm sdm cluster kafka-connect create -f <path-to-kafka-connect-config-file> -n my-namespace -c <path-to-kubeconfig-file>
# Create Kafka Connect from config file and wait to become active
$ smm sdm cluster kafka-connect create -f <path-to-kafka-connect-config-file> -n my-namespace -c <path-to-kubeconfig-file> -w
# Create Kafka Connect from stdin and wait to become active
$ cat <path-to-kafka-connect-config-file> | smm sdm cluster kafka-connect create -n my-namespace -c <path-to-kubeconfig-file> -w
-f, --config-file string Config file that contains the Kafka Connect config.
--create-service-account Whether to create the service accounts specified in the Kafka Connect descriptor. If this option is set to 'true' and there are no service accounts specified in the Kafka Connect descriptor than a service account with <kafka-connect-name>-kafka-connect will be created. (default true)
-h, --help help for create
-i, --interval int Interval in seconds for polling Kafka Connect status. (default 5)
-k, --kafka-cluster string Name of the Kafka cluster which this Kafka Connect instance will connect to. (default "kafka")
-n, --namespace string Namespace that will host the Kafka Connect instance. (default "kafka")
-r, --schema-registry string Name of the Schema Registry which this Kafka Connect instance will use for schemas.
-t, --timeout int Timeout in seconds to wait for the Kafka Connect create operation to complete. (default 150)
-w, --wait Wait for Kafka Connect create operation to complete.
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Deletes Kafka Connect instance.
Deletes Kafka Connect instance.
smm sdm cluster kafka-connect delete [--kafka-connect=]NAME [flags]
# Delete the selected Kafka Connect instance
$ smm sdm cluster kafka-connect delete
# Delete the my-kafka-connect Kafka Connect from namespace my-namespace
$ smm sdm cluster kafka-connect delete my-kafka-connect -n my-namespace -c <path-to-kubeconfig-file>
# Delete the my-kafka-connect Kafka Connect from namespace my-namespace and wait for the completion of the deletion
$ smm sdm cluster kafka-connect delete my-kafka-connect -n my-namespace -c <path-to-kubeconfig-file> -w
-h, --help help for delete
-i, --interval int Interval in seconds for polling Kafka Connect status. (default 5)
--kafka-connect string Name of the Kafka Connect instance to be deleted.
-n, --namespace string Namespace to delete the Kafka Connect instance from. (default "kafka")
-t, --timeout int Timeout in seconds to wait for the Kafka Connect delete operation to complete. (default 120)
-w, --wait Wait for Kafka Connect delete operation to complete.
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Gets Kafka Connect details.
Gets Kafka Connect details.
smm sdm cluster kafka-connect get [--kafka-connect=]NAME [flags]
# Get the details of the selected Kafka Connect instance
$ smm sdm cluster kafka-connect get
# Get the details of the my-kafka-connect Kafka Connect from namespace my-namespace
$ smm sdm cluster kafka-connect get my-kafka-connect -n my-namespace -c <path-to-kubeconfig-file>
# Get the details of the my-kafka-connect Kafka Connect from namespace my-namespace in yaml format
$ smm sdm cluster kafka-connect get my-kafka-connect -n my-namespace -c <path-to-kubeconfig-file> -o yaml
-h, --help help for get
--kafka-connect string Name of the Kafka Connect instance to retrieve.
-n, --namespace string Namespace where to lookup the Kafka Connect instance. (default "kafka")
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Update a Kafka Connect instance
Update a Kafka Connect instance based on JSON or YAML stdin or file config
smm sdm cluster kafka-connect update [flags]
# Update Kafka Connect from config file
$ smm sdm cluster kafka-connect update -f <path-to-kafka-connect-config-file> -n my-namespace --kafka-connect my-kafka-connect -c <path-to-kubeconfig-file>
# Update Kafka Connect from config file and wait for the updated Kafka Connect instance to be restarted
$ smm sdm cluster kafka-connect update -f <path-to-kafka-connect-config-file> -n my-namespace --kafka-connect my-kafka-connect -c <path-to-kubeconfig-file> -w
# Update only the Kafka Connect image of the deployment and wait for the Kafka Connect instance to be restarted
$ smm sdm cluster kafka-connect update -n my-namespace --kafka-connect my-kafka-connect --kafka-connect-image "confluentinc/cp-kafka-connect:6.0.0" -c <path-to-kubeconfig-file> -w
# Patch Kafka Connect config
$ smm sdm cluster kafka-connect update -n my-namespace --kafka-connect my-kafka-connect -c <path-to-kubeconfig-file> -w -f -<<EOF
apiVersion: kafka.banzaicloud.io/v1beta1
kind: KafkaConnect
spec:
MTLS: true
EOF
-f, --config-file string Config file that contains the Kafka Connect config.
-h, --help help for update
-i, --interval int Interval in seconds for polling Kafka Connect status. (default 5)
--kafka-connect string Name of the Kafka Connect instance to be updated.
--kafka-connect-image string The new image (repository/name:tag) to update Kafka Connect to.
-n, --namespace string Namespace the Kafka Connect instance to be updated belongs to. (default "kafka")
-t, --timeout int Timeout in seconds to wait for the Kafka Connect update operation to complete. (default 150)
-w, --wait Wait for Kafka Connect update operation to complete.
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Manage Kafka Connectors
Manage Kafka Connectors
-h, --help help for kafka-connector
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Manage Streaming Data Manager.
Update a Kafka Connector instance
Update a Kafka Connector instance based on JSON or YAML stdin or file config
smm sdm cluster kafka-connector update [flags]
# Update Kafka Connector from config file
$ smm sdm cluster kafka-connector update -f <path-to-kafka-connector-config-file> -n my-namespace --kafka-connector my-kafka-connector -c <path-to-kubeconfig-file>
# Patch Kafka Connector config
$ smm sdm cluster kafka-connector update -n my-namespace --kafka-connector my-kafka-connector -c <path-to-kubeconfig-file> -w -f -<<EOF
apiVersion: kafka.banzaicloud.io/v1beta1
kind: KafkaConnector
spec:
pause: true
EOF
-f, --config-file string Config file that contains the Kafka Connector config.
-h, --help help for update
--kafka-connect string Name of the Kafka Connector instance to be updated.
-n, --namespace string Namespace the Kafka Connector instance to be updated belongs to. (default "kafka")
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Deletes Kafka Connector instance.
Deletes Kafka Connector instance.
smm sdm cluster kafka-connector delete [--kafka-connector=]NAME [flags]
# Delete the selected Kafka Connector instance
$ smm sdm cluster kafka-connector delete
# Delete the my-kafka-connector Kafka Connector from namespace my-namespace
$ smm sdm cluster kafka-connector delete my-kafka-connector -n my-namespace -c <path-to-kubeconfig-file>
# Delete the my-kafka-connector Kafka Connector from namespace my-namespace and wait for the completion of the deletion
$ smm sdm cluster kafka-connector delete my-kafka-connector -n my-namespace -c <path-to-kubeconfig-file> -w
-h, --help help for delete
-i, --interval int Interval in seconds for polling Kafka Connector status. (default 5)
--kafka-connector string Name of the Kafka Connector instance to be deleted.
-n, --namespace string Namespace to delete the Kafka Connector instance from. (default "kafka")
-t, --timeout int Timeout in seconds to wait for the Kafka Connector delete operation to complete. (default 120)
-w, --wait Wait for Kafka Connector delete operation to complete.
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Gets Kafka Connector details.
Gets Kafka Connector details.
smm sdm cluster kafka-connector get [--kafka-connector=]NAME [flags]
# Get the details of the selected Kafka Connector instance
$ smm sdm cluster kafka-connector get
# Get the details of the my-kafka-connector Kafka Connector from namespace my-namespace
$ smm sdm cluster kafka-connector get my-kafka-connector -n my-namespace -c <path-to-kubeconfig-file>
# Get the details of the my-kafka-connector Kafka Connector from namespace my-namespace in yaml format
$ smm sdm cluster kafka-connector get my-kafka-connector -n my-namespace -c <path-to-kubeconfig-file> -o yaml
-h, --help help for get
--kafka-connector string Name of the Kafka Connector instance to retrieve.
-n, --namespace string Namespace where to lookup the Kafka Connector instance. (default "kafka")
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--formatting.force-color force color even when non in a terminal
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Streaming Data Manager persistent config file to use instead of the default at ~/.banzai/supertubes/
-v, --verbose turn on debug logging
Manage Streaming Data Manager.
Manage Streaming Data Manager installation.
Manage Streaming Data Manager installation.
Manage Streaming Data Manager installation.
Manage sidecar-proxy related configurations
-h, --help help for sidecar-proxy
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage auto-injection configurations
-h, --help help for auto-inject
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Disable sidecar injection for the given namespace
smm sidecar-proxy auto-inject off [[--namespace=]name] [flags]
-h, --help help for off
--namespace string Namespace name
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Enable sidecar injection for the given namespace
smm sidecar-proxy auto-inject on [[--namespace=]name] [flags]
-h, --help help for on
--namespace string Namespace name
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Manage sidecar egress configurations
-h, --help help for egress
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Recommend sidecar configuration for a workload
smm sidecar-proxy egress recommend [--namespace] namespace [--workload name] [--isolationLevel=NAMESPACE|WORKLOAD] [--labelWhitelist=label] [flags]
--apply Apply recommendations
-h, --help help for recommend
-i, --isolationLevel string Isolation level (NAMESPACE|WORKLOAD)
-l, --labelWhitelist stringArray Labels to include in the workload selector
--namespace string Namespace name
--workload string Workload name
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Tap into HTTP/GRPC mesh traffic
smm tap [[ns|workload|pod]/resource-name] [flags]
# tap the movies-v1 deployment in the default namespace
smm tap workload/movies-v1
# tap the movies-v1-7f9645bfd7-8vgm9 pod in the default namespace
smm tap pod/movies-v1-7f9645bfd7-8vgm9
# tap the smm-demo namespace
smm tap ns/smm-demo
# tap the smm-demo namespace request to test namespace
smm tap ns/smm-demo --destination ns/test
--authority string Show requests with this authority
--destination string Show requests to this resource
--destination-ns string Namespace of the destination resource; by default the current "--namespace" is used
--direction string Show requests with this direction (inbound|outbound)
-h, --help help for tap
--max-rps uint Limits maximum requests per second from the logstream
--method string Show requests with this request method
--ns string Namespace of the specified resource (default "default")
--path string Show requests with paths with this prefix
--request-header strings Filter for request header (name:value).
Filters for existence of the header if only the name is specified, otherwise uses case-sensitive prefix match for the value.
--response-code uints Show request with this response code (default [])
--response-header strings Filter for response header (name:value).
Filters for existence of the header if only the name is specified, otherwise uses case-sensitive prefix match for the value.
--scheme string Show requests with this scheme
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Uninstall Service Mesh Manager
Uninstall Service Mesh Manager
The command automatically removes the resources. It can only dump the removable resources with the ‘–dump-resources’ option.
smm uninstall [flags]
# Default uninstall
smm uninstall
# Uninstall Service Mesh Manager from a non-default namespace
smm uninstall -n smm-system
-d, --dump-resources Dump resources to stdout instead of applying them
--force-uninstall Do not prompt for confirmation
-h, --help help for uninstall
--istio-namespace string Namespace of Istio sidecar injector (default "istio-system")
--release-name string Name of the release (default "smm")
-a, --uninstall-everything Uninstall all components at once
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging
Print the client and api version information
smm version [flags]
--client Print the client version only
-h, --help help for version
--short Print the version number(s) only, with no additional output
--api-server-endpoint-address string The publicly accessible address of the k8s api server
--base-url string Custom Service Mesh Manager base URL (uses port forwarding or proxying if empty)
--cacert string The CA to use for verifying Service Mesh Manager's server certificate
--color use colors on non-tty outputs (default true)
--context string name of the kubeconfig context to use
--controlplane string name of the control plane resource to connect to, if not specified, use autodetection
--formatting.force-color force color even when non in a terminal
--http-proxy string http proxy to be used for installing SMM components, format: hostname:port (default: empty, no proxy)
--interactive ask questions interactively even if stdin or stdout is non-tty
-c, --kubeconfig string path to the kubeconfig file to use for CLI requests
-p, --local-port int Use this local port for port forwarding / proxying to SMM (when set to 0, a random port will be used) (default -1)
--no-proxy string list of hosts to not to use HTTP proxy for (comma separated list of hostnames and ip subnets)
--non-interactive never ask questions interactively
-o, --output string output format (table|yaml|json) (default "table")
--persistent-config-file string Service Mesh Manager persistent config file to use instead of the default at ~/.cisco/smm/
--resource-wait-timeout duration The length of time to wait before giving up on waiting for resource conditions to met (default 5m0s)
--skip-validate-kubeconfig Skip validating cluster reachability
--smm-namespace string Namespace in which Service Mesh Manager is installed [$SMM_NAMESPACE]
--token string Authentication token to use to communicate with Service Mesh Manager
--use-portforward Use port forwarding instead of proxying to reach Service Mesh Manager
-v, --verbose turn on debug logging