Feb 21, 2024: Announcing Linkerd 2.15 with support for VM workloads, native sidecars, and SPIFFE! Read more »


This is not the latest version of Linkerd!
This documentation is for an older version of Linkerd. You may want the Linkerd 2.15 (current) documentation instead.

install-cni

Output Kubernetes configs to install Linkerd CNI.

This command installs a DaemonSet into the Linkerd control plane. The DaemonSet copies the necessary linkerd-cni plugin binaries and configs onto the host. It assumes that the ’linkerd install’ command will be executed with the ‘–linkerd-cni-enabled’ flag. This command needs to be executed before the ’linkerd install –linkerd-cni-enabled’ command.

Flags

Flag Usage
--admin-port Proxy port to serve metrics on
--cni-image Image for the cni-plugin
--cni-log-level Log level for the cni-plugin
--control-port Proxy port to use for control
--dest-cni-bin-dir Directory on the host where the CNI binary will be placed
--dest-cni-net-dir Directory on the host where the CNI configuration will be placed
--inbound-port Proxy port to use for inbound traffic
--linkerd-version
-v
Tag to be used for Linkerd images
--outbound-port Proxy port to use for outbound traffic
--priority-class-name Pod priorityClassName for CNI daemonset’s pods
--proxy-uid Run the proxy under this user ID
--redirect-ports Ports to redirect to proxy, if no port is specified then ALL ports are redirected
--registry Docker registry to pull images from ($LINKERD_DOCKER_REGISTRY)
--skip-inbound-ports Ports and/or port ranges (inclusive) that should skip the proxy and send directly to the application
--skip-outbound-ports Outbound ports and/or port ranges (inclusive) that should skip the proxy
--use-wait-flag Configures the CNI plugin to use the “-w” flag for the iptables command. (default false)