Istio Ambient で ztunnel が実際にどんなサービス情報を XDS 経由で受け取っているか を確認したいとき、ありますよね。

ワンライナー

CTX=kind-cluster1; NS=istio-system; POD="$(kubectl --context "$CTX" -n "$NS" get pod -o name | rg '^pod/ztunnel' | head -n1 | cut -d/ -f2)"; istioctl --context "$CTX" ztunnel-config services "$POD.$NS" -o json

実際の出力例

実行すると、こんな JSON が返ってきます：

[
    {
        "name": "kubernetes",
        "namespace": "default",
        "hostname": "kubernetes.default.svc.cluster.local",
        "vips": [
            "network2/10.96.0.1"
        ],
        "ports": {
            "443": 6443
        },
        "endpoints": {
            "cluster2/discovery.k8s.io/EndpointSlice/default/kubernetes/172.18.0.3": {
                "workloadUid": "cluster2/discovery.k8s.io/EndpointSlice/default/kubernetes/172.18.0.3",
                "service": "",
                "port": {
                    "443": 6443
                }
            }
        },
        "ipFamilies": "IPv4"
    },
    {
        "name": "istio-eastwestgateway",
        "namespace": "istio-system",
        "hostname": "istio-eastwestgateway.istio-system.svc.cluster.local",
        "vips": [
            "network2/10.96.119.214"
        ],
        "ports": {
            "15008": 15008,
            "15021": 15021
        },
        "loadBalancer": {
            "mode": "Failover",
            "routingPreferences": [
                "Network",
                "Region",
                "Zone"
            ],
            "healthPolicy": "OnlyHealthy"
        },
        "endpoints": {
            "cluster2//Pod/istio-system/istio-eastwestgateway-6b7785d5c8-jjw62": {
                "workloadUid": "cluster2//Pod/istio-system/istio-eastwestgateway-6b7785d5c8-jjw62",
                "service": "",
                "port": {
                    "15008": 15008,
                    "15021": 15021
                }
            }
        },
        "ipFamilies": "IPv4"
    },
    {
        "name": "istiod",
        "namespace": "istio-system",
        "hostname": "istiod.istio-system.svc.cluster.local",
        "vips": [
            "network2/10.96.107.246"
        ],
        "ports": {
            "15010": 15010,
            "15012": 15012,
            "15014": 15014,
            "443": 15017
        },
        "endpoints": {
            "cluster2//Pod/istio-system/istiod-775d8fc4cd-7z8bx": {
                "workloadUid": "cluster2//Pod/istio-system/istiod-775d8fc4cd-7z8bx",
                "service": "",
                "port": {
                    "15010": 15010,
                    "15012": 15012,
                    "15014": 15014,
                    "443": 15017
                }
            }
        },
        "ipFamilies": "IPv4"
    },
    {
        "name": "kube-dns",
        "namespace": "kube-system",
        "hostname": "kube-dns.kube-system.svc.cluster.local",
        "vips": [
            "network2/10.96.0.10"
        ],
        "ports": {
            "53": 53,
            "9153": 9153
        },
        "endpoints": {
            "cluster2//Pod/kube-system/coredns-7d764666f9-mt25r": {
                "workloadUid": "cluster2//Pod/kube-system/coredns-7d764666f9-mt25r",
                "service": "",
                "port": {
                    "53": 53,
                    "9153": 9153
                }
            },
            "cluster2//Pod/kube-system/coredns-7d764666f9-mwdgm": {
                "workloadUid": "cluster2//Pod/kube-system/coredns-7d764666f9-mwdgm",
                "service": "",
                "port": {
                    "53": 53,
                    "9153": 9153
                }
            }
        },
        "ipFamilies": "IPv4"
    },
    {
        "name": "curl",
        "namespace": "sample",
        "hostname": "curl.sample.svc.cluster.local",
        "vips": [
            "network2/10.96.188.26"
        ],
        "ports": {
            "80": 80
        },
        "endpoints": {
            "cluster2//Pod/sample/curl-7ff8c849cb-d5jr2": {
                "workloadUid": "cluster2//Pod/sample/curl-7ff8c849cb-d5jr2",
                "service": "",
                "port": {
                    "80": 80
                }
            }
        },
        "ipFamilies": "IPv4"
    },
    {
        "name": "helloworld",
        "namespace": "sample",
        "hostname": "helloworld.sample.svc.cluster.local",
        "vips": [
            "network1/10.96.60.17",
            "network2/10.96.72.30"
        ],
        "ports": {
            "5000": 5000
        },
        "endpoints": {
            "cluster2//Pod/sample/helloworld-v2-59fc9f4558-vlchp": {
                "workloadUid": "cluster2//Pod/sample/helloworld-v2-59fc9f4558-vlchp",
                "service": "",
                "port": {
                    "5000": 5000
                }
            },
            "network1/SplitHorizonWorkload/istio-system/istio-eastwestgateway/172.18.0.9/sample/helloworld.sample.svc.cluster.local": {
                "workloadUid": "network1/SplitHorizonWorkload/istio-system/istio-eastwestgateway/172.18.0.9/sample/helloworld.sample.svc.cluster.local",
                "service": "",
                "port": {
                    "5000": 5000
                }
            }
        },
        "subjectAltNames": [
            "spiffe://cluster.local/ns/sample/sa/default"
        ],
        "ipFamilies": "IPv4"
    },
    {
        "name": "helloworld-cluster1",
        "namespace": "sample",
        "hostname": "helloworld-cluster1.sample.svc.cluster.local",
        "vips": [
            "network1/10.96.60.136"
        ],
        "ports": {
            "5000": 5000
        },
        "endpoints": {
            "network1/SplitHorizonWorkload/istio-system/istio-eastwestgateway/172.18.0.9/sample/helloworld-cluster1.sample.svc.cluster.local": {
                "workloadUid": "network1/SplitHorizonWorkload/istio-system/istio-eastwestgateway/172.18.0.9/sample/helloworld-cluster1.sample.svc.cluster.local",
                "service": "",
                "port": {
                    "5000": 5000
                }
            }
        },
        "subjectAltNames": [
            "spiffe://cluster.local/ns/sample/sa/default"
        ],
        "ipFamilies": "IPv4"
    }
]