Skip to main content
Version: 3.28 (latest)

calicoctl ipam check

This section describes the calicoctl ipam check command.

Read the calicoctl overview for a full list of calicoctl commands.

Displaying the help text for 'calicoctl ipam check' command

Run calicoctl ipam check --help to display the following help menu for the command.

calicoctl ipam check [--config=<CONFIG>] [--show-all-ips] [--show-problem-ips] [-o <FILE>]

-h --help Show this screen.
-o --output=<FILE> Path to output report file.
--show-all-ips Print all IPs that are checked.
--show-problem-ips Print all IPs that are leaked or not allocated properly.
-c --config=<CONFIG> Path to the file containing connection configuration in
YAML or JSON format.
[default: /etc/calico/calicoctl.cfg]

The ipam check command checks the integrity of the IPAM datastructures against Kubernetes.


Example workflow for checking consistency and releasing leaked addresses.

Lock the data store

calicoctl datastore migrate lock

Once the data store is locked, new pods will not be able to be launched until the data store is unlocked.

Generate a report using the check command

calicoctl ipam check -o report.json

Release any unnecessary addresses

calicoctl ipam release --from-report report.json

Unlock the data store

calicoctl datastore migrate unlock

See also