Feb 21, 2024: Announcing Linkerd 2.15 with support for VM workloads, native sidecars, and SPIFFE! Read more »


Display the certificate(s) of one or more selected pod(s).

This command initiates a port-forward to a given pod or a set of pods and fetches the TLS certificate.


 # Get certificate from pod foo-bar in the default namespace.
 linkerd identity foo-bar

 # Get certificate from all pods with the label name=nginx
 linkerd identity -l name=nginx


Flag Usage
Namespace of the pod
Selector (label query) to filter on, supports ‘=’, ‘==’, and ‘!=’