Cilium

The Cilium extension gives you visibility into a Cilium CNI running on your connected cluster: every Cilium resource as a browsable view, live agent and ClusterMesh health, and read-only diagnostics run directly in the agent pods.

Cilium is a Pro feature - without a Pro license the workspace shows a "Cilium requires a Pro license" notice. See Plans & Pro.

Setup

1. Install the Cilium extension from Settings → Extensions (see Extensions). It starts automatically.
2. Connect a cluster that runs Cilium, as usual. The extension needs no connection or credentials of its own - it works against your active cluster.
3. The extension uses the kubectl and cilium CLIs. If either is missing, the workspace shows a "Setup required" card listing them, with Install buttons that set them up through Kunobi's tool manager.

Browsing Cilium Resources

Open the Kubernetes data page, open the workspace selector (press W), and pick Cilium. The sidebar lists Cilium views in place of the standard Kubernetes kinds:

• Overview - one row summarizing cluster health: agent status, ClusterMesh, and BGP. Open it for detail tabs covering Overview, ClusterMesh, and Effective Config.
• Network Policies and Clusterwide Policies - CiliumNetworkPolicy and its cluster-scoped counterpart.
• Endpoints, Identities, Nodes - the core Cilium objects backing pod networking.
• BGP views - cluster config, peer config, peering policies, advertisements, node configs and overrides, plus live BGP Peers (runtime) state.
• Load Balancer IP Pools, L2 Announcements, Pod IP Pools, Envoy Configs, Egress Gateway Policies, Local Redirect Policies.
• Agents, Encryption, Hubble - live runtime status gathered from the Cilium CLI, not just CRDs.

These behave like any other resource view: filter them, select rows, and open details in the sidebar.

Running Agent Diagnostics

You can run read-only cilium commands inside the agent pod of a specific node, without leaving the app:

1. Open the Nodes view in the Cilium workspace and select a node.
2. Run Cilium diagnostics from the action bar (or press ⌘⌥C / Ctrl+Alt+C).
3. In the dialog, pick a command: Status (verbose), Status: all controllers / health / addresses / redirects, Endpoint list, Identity list, Service list, IP list, or Policy get.

Kunobi finds that node's cilium-agent pod and executes the command in it, streaming the CLI output into the dialog - use Copy output to grab it. All available commands are read-only; the extension can't change your Cilium configuration.