Isovalent daemon API
The daemon API from Isovalent — 9 operation(s) for daemon.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/isovalent-daemon-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Cilium bgp Daemon API
description: Cilium
version: v1beta1
x-provenance:
method: derived
authored_by: API Evangelist
derived_on: '2026-08-19'
first_party: false
provider_published: false
source: Modelled from the provider's public HTML documentation.
note: 'Not published by the provider. Probed 2026-08-19: no anonymously fetchable first-party contract. Cilium''s agent/health specs are open source; the Isovalent-branded documents here were modelled from docs.'
servers:
- url: /v1
tags:
- name: daemon
paths:
/cluster/nodes:
get:
summary: Get nodes information stored in the cilium-agent
tags:
- daemon
parameters:
- name: client-id
description: 'Client UUID should be used when the client wants to request
a diff of nodes added and / or removed since the last time
that client has made a request.
'
in: header
required: false
schema:
type: integer
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ClusterNodeStatus'
/healthz:
get:
summary: Get health of Cilium daemon
description: 'Returns health and status information of the Cilium daemon and related
components such as the connected datastore, Kubernetes integration and
Hubble.
'
tags:
- daemon
parameters:
- name: brief
description: 'Brief will return a brief representation of the Cilium status.
'
in: header
required: false
schema:
type: boolean
- name: require-k8s-connectivity
description: 'If set to true, failure of the agent to connect to the Kubernetes control plane will cause the agent''s health status to also fail.
'
in: header
required: false
schema:
type: boolean
default: true
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/StatusResponse'
/config:
get:
summary: Get configuration of Cilium daemon
description: 'Returns the configuration of the Cilium daemon.
'
tags:
- daemon
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/DaemonConfiguration'
patch:
summary: Modify daemon configuration
description: 'Updates the daemon configuration by applying the provided
ConfigurationMap and regenerates & recompiles all required datapath
components.
'
tags:
- daemon
responses:
'200':
description: Success
'400':
description: Bad configuration parameters
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Forbidden
'500':
description: Recompilation failed
x-go-name: Failure
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/DaemonConfigurationSpec'
required: true
/debuginfo:
get:
summary: Retrieve information about the agent and environment for debugging
tags:
- daemon
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/DebugInfo'
'500':
description: DebugInfo get failed
x-go-name: Failure
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/cgroup-dump-metadata:
get:
summary: Retrieve cgroup metadata for all pods
tags:
- daemon
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/CgroupDumpMetadata'
'500':
description: CgroupDumpMetadata get failed
x-go-name: Failure
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/map:
get:
summary: List all open maps
tags:
- daemon
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/BPFMapList'
/map/{name}:
get:
summary: Retrieve contents of BPF map
tags:
- daemon
parameters:
- $ref: '#/components/parameters/map-name'
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/BPFMap'
'404':
description: Map not found
/map/{name}/events:
get:
summary: Retrieves the recent event logs associated with this endpoint.
tags:
- daemon
parameters:
- $ref: '#/components/parameters/map-name'
- $ref: '#/components/parameters/follow'
responses:
'200':
description: Success
content:
application/json:
schema:
type: string
format: binary
'404':
description: Map not found
/node/ids:
get:
summary: List information about known node IDs
description: 'Retrieves a list of node IDs allocated by the agent and their
associated node IP addresses.
'
tags:
- daemon
responses:
'200':
description: Success
content:
application/json:
schema:
type: array
items:
$ref: '#/components/schemas/NodeID'
components:
schemas:
BPFMapList:
description: List of BPF Maps
type: object
properties:
maps:
description: Array of open BPF map lists
type: array
items:
$ref: '#/components/schemas/BPFMap'
BPFMapProperties:
description: BPF map properties
type: object
properties:
name:
description: Name of the BPF map
type: string
size:
description: Size of the BPF map
type: integer
Endpoint:
description: An endpoint is a namespaced network interface to which cilium applies policies
type: object
properties:
id:
description: The cilium-agent-local ID of the endpoint
type: integer
spec:
description: The desired configuration state of the endpoint
$ref: '#/components/schemas/EndpointConfigurationSpec'
status:
description: The desired and realized configuration state of the endpoint
$ref: '#/components/schemas/EndpointStatus'
Labels:
description: Set of labels
type: array
items:
type: string
NodeElement:
description: 'Known node in the cluster
+k8s:deepcopy-gen=true'
properties:
name:
type: string
description: 'Name of the node including the cluster association. This is typically
<clustername>/<hostname>.
'
primary-address:
description: Primary address used for intra-cluster communication
$ref: '#/components/schemas/NodeAddressing'
secondary-addresses:
description: Alternative addresses assigned to the node
type: array
items:
$ref: '#/components/schemas/NodeAddressingElement'
health-endpoint-address:
description: Address used for probing cluster connectivity
$ref: '#/components/schemas/NodeAddressing'
ingress-address:
description: Source address for Ingress listener
$ref: '#/components/schemas/NodeAddressing'
source:
description: Source of the node configuration
type: string
MonitorStatus:
description: Status of the node monitor
properties:
cpus:
description: Number of CPUs to listen on for events.
type: integer
npages:
description: Number of pages used for the perf ring buffer.
type: integer
pagesize:
description: Pages size used for the perf ring buffer.
type: integer
lost:
description: Number of samples lost by perf.
type: integer
unknown:
description: Number of unknown samples.
type: integer
NodeAddressing:
description: 'Addressing information of a node for all address families
+k8s:deepcopy-gen=true'
type: object
properties:
ipv6:
$ref: '#/components/schemas/NodeAddressingElement'
ipv4:
$ref: '#/components/schemas/NodeAddressingElement'
LabelConfigurationStatus:
description: Labels and label configuration of an endpoint
type: object
properties:
realized:
description: The current configuration
$ref: '#/components/schemas/LabelConfigurationSpec'
security-relevant:
description: Labels derived from orchestration system that are used in computing a security identity
$ref: '#/components/schemas/Labels'
derived:
description: All labels derived from the orchestration system
$ref: '#/components/schemas/Labels'
disabled:
description: Labels derived from orchestration system which have been disabled.
$ref: '#/components/schemas/Labels'
RemoteClusterConfig:
description: 'Cluster configuration exposed by the remote cluster
+k8s:deepcopy-gen=true'
properties:
required:
description: Whether the configuration is required to be present
type: boolean
retrieved:
description: Whether the configuration has been correctly retrieved
type: boolean
cluster-id:
description: The Cluster ID advertised by the remote cluster
type: integer
kvstoremesh:
description: Whether the remote cluster information is locally cached by kvstoremesh
type: boolean
sync-canaries:
description: Whether the remote cluster supports per-prefix "synced" canaries
type: boolean
service-exports-enabled:
description: Whether or not MCS-API ServiceExports is enabled by the cluster (null means unsupported).
type:
- boolean
- 'null'
endpoint-slices-export-mode:
description: EndpointSlices export mode advertised by the remote cluster
type: string
enum:
- services-and-endpointslices
- endpointslices-only
MessageForwardingStatistics:
description: Statistics of a message forwarding entity
type: object
properties:
received:
description: Number of messages received
type: integer
denied:
description: Number of messages denied
type: integer
error:
description: Number of errors while parsing messages
type: integer
forwarded:
description: Number of messages forwarded
type: integer
RemoteClusterSynced:
description: 'Status of the synchronization with the remote cluster, about each resource
type. A given resource is considered to be synchronized if the initial
list of entries has been completely received from the remote cluster, and
new events are currently being watched.
+k8s:deepcopy-gen=true'
properties:
nodes:
description: Nodes synchronization status
type: boolean
services:
description: Services synchronization status
type: boolean
endpoint-slices:
description: Endpoint slices synchronization status (null means that the component is not watching endpoint slices)
type:
- boolean
- 'null'
service-exports:
description: MCS-API service exports synchronization status (null means that the component is not watching service exports)
type:
- boolean
- 'null'
endpoints:
description: Endpoints synchronization status
type: boolean
identities:
description: Identities synchronization status
type: boolean
DatapathMode:
description: Operational datapath mode
type: string
enum:
- veth
- netkit
- netkit-l2
IdentityRange:
description: Status of identity range of the cluster
properties:
min-identity:
description: Minimum identity of the cluster
type: integer
max-identity:
description: Maximum identity of the cluster
type: integer
IPAMStatus:
description: 'Status of IP address management
+k8s:deepcopy-gen=true'
properties:
allocations:
$ref: '#/components/schemas/AllocationMap'
ipv4:
type: array
items:
type: string
ipv6:
type: array
items:
type: string
status:
type: string
ConfigurationMap:
description: 'Map of configuration key/value pairs.
'
type: object
additionalProperties:
type: string
ClockSource:
description: Status of BPF clock source
type: object
properties:
mode:
description: Datapath clock source
type: string
enum:
- ktime
- jiffies
hertz:
description: Kernel Hz
type: integer
Routing:
description: Status of routing
type: object
properties:
inter-host-routing-mode:
description: Datapath routing mode for cross-cluster connectivity
type: string
enum:
- Native
- Tunnel
intra-host-routing-mode:
description: Datapath routing mode for connectivity within the host
type: string
enum:
- BPF
- Legacy
tunnel-protocol:
description: Tunnel protocol in use for cross-cluster connectivity
type: string
EndpointStatus:
description: The current state and configuration of the endpoint, its policy & datapath, and subcomponents
type: object
required:
- state
properties:
external-identifiers:
description: Unique identifiers for this endpoint from outside cilium
$ref: '#/components/schemas/EndpointIdentifiers'
identity:
description: The security identity for this endpoint
$ref: '#/components/schemas/Identity'
labels:
description: Labels applied to this endpoint
$ref: '#/components/schemas/LabelConfigurationStatus'
realized:
description: The configuration in effect on this endpoint
$ref: '#/components/schemas/EndpointConfigurationSpec'
networking:
description: Networking properties of the endpoint
$ref: '#/components/schemas/EndpointNetworking'
policy:
description: The policy applied to this endpoint from the policy repository
$ref: '#/components/schemas/EndpointPolicyStatus'
log:
description: Most recent status log. See endpoint/{id}/log for the complete log.
$ref: '#/components/schemas/EndpointStatusLog'
controllers:
description: Status of internal controllers attached to this endpoint
$ref: '#/components/schemas/ControllerStatuses'
state:
description: Current state of endpoint
$ref: '#/components/schemas/EndpointState'
health:
description: Summary overall endpoint & subcomponent health
$ref: '#/components/schemas/EndpointHealth'
namedPorts:
description: List of named ports that can be used in Network Policy
$ref: '#/components/schemas/NamedPorts'
EndpointIdentifiers:
description: 'Unique identifiers for this endpoint from outside cilium
+deepequal-gen=true'
type: object
properties:
cni-attachment-id:
description: ID assigned to this attachment by container runtime
type: string
container-id:
description: ID assigned by container runtime (deprecated, may not be unique)
type: string
container-name:
description: Name assigned to container (deprecated, may not be unique)
type: string
docker-endpoint-id:
description: Docker endpoint ID
type: string
docker-network-id:
description: Docker network ID
type: string
pod-name:
description: K8s pod for this endpoint (deprecated, may not be unique)
type: string
k8s-pod-name:
description: K8s pod name for this endpoint (deprecated, may not be unique)
type: string
k8s-namespace:
description: K8s namespace for this endpoint (deprecated, may not be unique)
type: string
Port:
description: 'Layer 4 port / protocol pair
+deepequal-gen=true'
type: object
properties:
protocol:
description: Layer 4 protocol
type: string
enum:
- TCP
- UDP
- SCTP
- ICMP
- ICMPV6
- ANY
port:
description: Layer 4 port number
type: integer
format: uint16
name:
description: Optional layer 4 port name
type: string
HubbleMetricsStatus:
description: 'Status of the Hubble metrics server
+k8s:deepcopy-gen=true'
type: object
properties:
state:
type: string
description: State the component is in
enum:
- Ok
- Warning
- Failure
- Disabled
msg:
type: string
description: Human readable status/error/warning message
Error:
type: string
AllocationMap:
description: 'Map of allocated IPs
'
type: object
additionalProperties:
type: string
PolicyRule:
description: A policy rule including the rule labels it derives from
properties:
rule:
description: The policy rule as json
type: string
derived-from-rules:
description: The policy rule labels identifying the policy rules this rule derives from
type: array
items:
type: array
items:
type: string
rules-by-selector:
description: The policy rule labels identifying the policy rules this rule derives from, mapped by selector
type: object
additionalProperties:
type: array
items:
type: array
items:
type: string
EndpointHealthStatus:
description: 'A common set of statuses for endpoint health * ``OK`` = All components operational * ``Bootstrap`` = This component is being created * ``Pending`` = A change is being processed to be applied * ``Warning`` = This component is not applying up-to-date policies (but is still applying the previous version) * ``Failure`` = An error has occurred and no policy is being applied * ``Disabled`` = This endpoint is disabled and will not handle traffic
'
type: string
enum:
- OK
- Bootstrap
- Pending
- Warning
- Failure
- Disabled
Masquerading:
description: 'Status of masquerading
+k8s:deepcopy-gen=true'
type: object
properties:
enabled:
type: boolean
enabledProtocols:
description: Is masquerading enabled
type: object
properties:
ipv4:
description: Is masquerading enabled for IPv4 traffic
type: boolean
ipv6:
description: Is masquerading enabled for IPv6 traffic
type: boolean
mode:
type: string
enum:
- BPF
- iptables
ip-masq-agent:
description: Is BPF ip-masq-agent enabled
type: boolean
snat-exclusion-cidr:
description: This field is obsolete, please use snat-exclusion-cidr-v4 or snat-exclusion-cidr-v6.
type: string
snat-exclusion-cidr-v4:
description: 'SnatExclusionCIDRv4 exempts SNAT from being performed on any packet sent to
an IPv4 address that belongs to this CIDR.'
type: string
snat-exclusion-cidr-v6:
description: 'SnatExclusionCIDRv6 exempts SNAT from being performed on any packet sent to
an IPv6 address that belongs to this CIDR.
For IPv6 we only do masquerading in iptables mode.'
type: string
CgroupContainerMetadata:
description: cgroup container metadata
type: object
properties:
cgroup-id:
type: integer
format: uint64
cgroup-path:
type: string
AddressPair:
description: Addressing information of an endpoint
type: object
properties:
ipv4:
description: IPv4 address
type: string
ipv4-expiration-uuid:
description: UUID of IPv4 expiration timer
type: string
ipv4-pool-name:
description: IPAM pool from which this IPv4 address was allocated
type: string
ipv6:
description: IPv6 address
type: string
ipv6-expiration-uuid:
description: UUID of IPv6 expiration timer
type: string
ipv6-pool-name:
description: IPAM pool from which this IPv6 address was allocated
type: string
DaemonConfiguration:
description: 'Response to a daemon configuration request.
'
type: object
properties:
spec:
description: Changeable configuration
$ref: '#/components/schemas/DaemonConfigurationSpec'
status:
description: 'Current daemon configuration related status.Contains the addressing
information, k8s, node monitor and immutable and mutable
configuration settings.
'
$ref: '#/components/schemas/DaemonConfigurationStatus'
DebugInfo:
description: groups some debugging related information on the agent
type: object
properties:
cilium-version:
type: string
kernel-version:
type: string
cilium-status:
$ref: '#/components/schemas/StatusResponse'
endpoint-list:
type: array
items:
$ref: '#/components/schemas/Endpoint'
service-list:
type: array
items:
$ref: '#/components/schemas/Service'
policy:
$ref: '#/components/schemas/Policy'
cilium-memory-map:
type: string
cilium-nodemonitor-memory-map:
type: string
environment-variables:
type: array
items:
type: string
subsystem:
type: object
additionalProperties:
type: string
encryption:
type: object
properties:
wireguard:
description: Status of the WireGuard agent
$ref: '#/components/schemas/WireguardStatus'
ClusterStatus:
description: 'Status of cluster
+k8s:deepcopy-gen=true'
properties:
ciliumHealth:
description: Status of local cilium-health daemon
$ref: '#/components/schemas/Status'
self:
description: Name of local node (if available)
type: string
nodes:
description: List of known nodes
type: array
items:
$ref: '#/components/schemas/NodeElement'
BPFMapEntry:
description: BPF map cache entry
type: object
properties:
key:
description: Key of map entry
type: string
value:
description: Value of map entry
type: string
desired-action:
description: Desired action to be performed
type: string
enum:
- ok
- insert
- delete
last-error:
description: Last error seen while performing desired action
type: string
EndpointPolicyEnabled:
description: Whether policy enforcement is enabled (ingress, egress, both or none)
type: string
enum:
- none
- ingress
- egress
- both
- audit-ingress
- audit-egress
- audit-both
LabelConfigurationSpec:
description: User desired Label configuration of an endpoint
type: object
properties:
user:
description: Custom labels in addition to orchestration system labels.
$ref: '#/components/schemas/Labels'
Service:
description: Collection of endpoints to be served
type: object
properties:
spec:
$ref: '#/components/schemas/ServiceSpec'
status:
$ref: '#/components/schemas/ServiceStatus'
FrontendAddress:
description: 'Layer 4 address. The protocol is currently ignored, all services will
behave as if protocol any is specified. To restrict to a particular
protocol, use policy.
'
type: object
properties:
ip:
description: Layer 3 address
type: string
protocol:
description: Layer 4 protocol
type: string
enum:
- tcp
- udp
- any
scope:
description: Load balancing scope for frontend address
type: string
enum:
- external
- internal
port:
description: Layer 4 port number
type: integer
format: uint16
NodeAddressingElement:
description: Addressing information
type: object
properties:
enabled:
description: True if address family is enabled
type: boolean
ip:
description: IP address of node
type: string
alloc-range:
description: Address pool to be used for local endpoints
type: string
address-type:
description: Node address type, one of HostName, ExternalIP or InternalIP
type: string
WireguardInterface:
description: 'Status of a WireGuard interface
+k8s:deepcopy-gen=true'
properties:
name:
description: Name of the interface
type: string
public-key:
description: Public key of this interface
type: string
listen-port:
description: Port on which the WireGuard endpoint is exposed
type: integer
peer-count:
description: Number of peers configured on this interface
type: integer
peers:
description: Optional list of WireGuard peers
type: array
items:
$ref: '#/components/schemas/WireguardPeer'
EndpointConfigurationSpec:
description: An endpoint's configuration
type: object
properties:
options:
description: Changeable configuration
$ref: '#/components/schemas/ConfigurationMap'
label-configuration:
description: the endpoint's labels
$ref: '#/components/schemas/LabelConfigurationSpec'
BandwidthManager:
description: 'Status of bandwidth manager
+k8s:deepcopy-gen=true'
type: object
properties:
enabled:
description: Is bandwidth manager enabled
type: boolean
devices:
type: array
items:
type: string
congestionControl:
type: string
enum:
- cubic
- bbr
Identity:
description: Security identity
type: object
properties:
id:
description: Unique identifier
type: integer
labels:
description: Labels describing the identity
$ref: '#/components/schemas/Labels'
labelsSHA256:
description: SHA256 of labels
type: string
ProxyRedirect:
description: Configured proxy redirection state
type: object
properties:
name:
description: Name of the proxy redirect
type: string
proxy:
description: Name of the proxy this redirect points to
type: string
proxy-port:
description: Host port that this redirect points to
type: integer
Policy:
description: 'Policy definition
Deprecated, will be removed in v1.19.
'
type: object
properties:
revision:
description: 'Revision number of the policy. Incremented each time the policy is
changed in the agent''s repository
'
type: integer
policy:
description: Policy definition as JSON.
type: string
RequestResponseStatistics:
description: 'Statistics of a proxy redirect
+k8s:deepcopy-gen=true'
type: object
properties:
requests:
$ref: '#/components/schemas/MessageForwardingStatistics'
responses:
$ref: '#/components/schemas/MessageForwardingStatistics'
BackendAddress:
description: Service backend address
type: object
required:
- ip
properties:
ip:
description: Layer 3 address
type: string
protocol:
description: Layer 4 protocol (TCP, UDP, etc)
type: string
port:
description: Layer 4 port number
type: integer
format: uint16
nodeName:
description: Optional name of the node on which this backend runs
type: string
state:
description: State of the backend for load-balancing service traffic
type: string
enum:
- active
- terminating
- terminating-not-serving
- quarantined
- maintenance
preferred:
description: 'Indicator if this backend is preferred in the context of clustermesh service affinity. The value is set based
on related annotation of global service. Applicable for active state only.'
type: boolean
weight:
description: Backend weight
type:
- integer
- 'null'
format: uint16
zone:
description: Optional name of the zone in which this backend runs
type: string
NamedPorts:
description: 'List of named Layer 4 port and protocol pairs which will be used in Network
Policy specs.
+deepequal-gen=true
+k8s:deepcopy-gen=true'
type: array
items:
$ref: '#/components/schemas/Port'
EndpointStatusLog:
description: Status log of endpoint
type: array
items:
$ref: '#/components/schemas/EndpointStatusChange'
ControllerStatus:
description: 'Status of a controller
+k8s:deepcopy-gen=true'
type: object
properties:
name:
description: Name of controller
type: string
uuid:
description: UUID of controller
type: string
format: uuid
configuration:
description: 'Configuration of controller
+deepequal-gen=true
+k8s:deepcopy-gen=true'
type: object
properties:
interval:
description: Regular synchronization interval
type: string
format: duration
error-retry-base:
d
# --- truncated at 32 KB (65 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/isovalent/refs/heads/main/openapi/isovalent-daemon-api-openapi.yml