{"id":28192628,"url":"https://github.com/kakao/kubectl-cilium","last_synced_at":"2026-05-17T02:10:56.820Z","repository":{"id":293589931,"uuid":"983113489","full_name":"kakao/kubectl-cilium","owner":"kakao","description":"A kubectl plugin to monitor Cilium SNAT usage and detect eviction risks.","archived":false,"fork":false,"pushed_at":"2025-05-16T04:31:02.000Z","size":138,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":6,"default_branch":"main","last_synced_at":"2025-05-16T05:30:33.416Z","etag":null,"topics":["cilium","ebpf"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kakao.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-13T22:41:07.000Z","updated_at":"2025-05-16T04:31:05.000Z","dependencies_parsed_at":"2025-05-16T05:40:54.641Z","dependency_job_id":null,"html_url":"https://github.com/kakao/kubectl-cilium","commit_stats":null,"previous_names":["kakao/kubectl-cilium"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kakao%2Fkubectl-cilium","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kakao%2Fkubectl-cilium/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kakao%2Fkubectl-cilium/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kakao%2Fkubectl-cilium/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kakao","download_url":"https://codeload.github.com/kakao/kubectl-cilium/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254527104,"owners_count":22085920,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cilium","ebpf"],"created_at":"2025-05-16T12:14:53.752Z","updated_at":"2026-05-17T02:10:56.815Z","avatar_url":"https://github.com/kakao.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"![image](docs/capture.png)\n\n\u003ch1 align=\"center\"\u003ekubectl-cilium\u003c/h1\u003e\n\nA CLI for kubernetes that helps you scan and monitor BPF map usage across all nodes managed by Cilium.\nThis tool is designed to help cluster administrators proactively detect and address BPF map high eviction rates, such as a large number of active connections. If any nodes are identified as being at risk and encounter network issues, Please consider increasing the `--bpf-map-dynamic-size-ratio` parameter in the Cilium configuration.\n\nFor more details, please refer to: https://github.com/cilium/cilium/pull/37747\n\n---\n\n## Installation\n\n### Prerequisites\n\n- Go 1.24.2+ (for building from source)\n- Access to a Kubernetes cluster with Cilium CNI\n\n### Install via Go\n\n```\ngo install github.com/kakao/kubectl-cilium@latest\n```\n\n### Build from Source\n\n```\nmake run\n```\n\n---\n\n## Usage\n\n### Scan BPF map usage acress all nodes\n\n```\nkubectl-cilium bpf-map-pressure\n```\n\n### Scan BPF map usage for a specific node\n\n```\nkubectl-cilium bpf-map-pressure --node \u003cnode-name\u003e\n```\n\n### Use a custom kubeconfig\n\n```\nkubectl-cilium bpf-map-pressure --kubeconfig /path/to/kubeconfig\n```\n\n## Example output\n\n```\nkubectl-cilium bpf-map-pressure\n? This command create inspector pods on all nodes to check BPF map pressure. And it may consume CPU resource (200m core limit)\nDo you want to continue? Yes\nInspecting node... node-1\nInspecting node... node-2\nInspecting node... node-3\nCreated inspector pod: bpf-inspector-node-1\nCreated inspector pod: bpf-inspector-node-2\nCreated inspector pod: bpf-inspector-node-3\nInspecting BPF map... cilium_nodeport_neigh4 in node: node-1\nInspecting BPF map... cilium_snat_v4_external in node: node-2\nInspecting BPF map... cilium_ct_any4_global in node: node-3\n\nSTATUS      NODE        MAP                       USAGE    CURRENT/MAX\n[Warning]   node-1      cilium_ct4_global         80.08%   284970/356212\n[O.K.]      node-1      cilium_nodeport_neigh4    0.00%    0/356212\n[O.K.]      node-1      cilium_snat_v4_external   0.47%    1686/356212\n[O.K.]      node-2      cilium_nodeport_neigh4    0.00%    1/356212\n[O.K.]      node-2      cilium_snat_v4_external   4.10%    14606/356212\n[O.K.]      node-2      cilium_ct4_global         0.16%    571/356212\n[O.K.]      node-3      cilium_nodeport_neigh4    0.00%    1/356212\n[O.K.]      node-3      cilium_snat_v4_external   0.96%    3410/356212\n[O.K.]      node-3      cilium_ct4_global         0.13%    446/356212\n\nIf you see [Warning] status in the output and encounter network issues,\nPlease consider increasing --bpf-map-dynamic-size-ratio in cilium-agent configuration.\n```\n\n## Features\n\n- Scan BPF map usage across all nodes\n- Scan SNAT map usage across all nodes or a specific node\n- Custom kubeconfig support\n- Clear status output with warning thresholds\n\n---\n## License\nThis software is licensed under the Apache 2 license, quoted below.\n\nCopyright 2025 Kakao Corp. http://www.kakaocorp.com\n\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use this project except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n\nUnless required by applicable law or agreed to in writing, software distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkakao%2Fkubectl-cilium","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkakao%2Fkubectl-cilium","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkakao%2Fkubectl-cilium/lists"}