Apps

The repo produces several deployable Go binaries plus the eBPF dataplane that runs in the kernel. Each app has a thin main.go that wires Hive cells from pkg/.

App	Path	Role
cilium-agent	daemon/	DaemonSet pod on every node. The userspace control plane.
cilium-operator	operator/	Cluster-wide controller (IPAM, identity GC, CES batching).
cilium CLI	cilium-cli/	User-facing CLI for install, upgrade, status, connectivity test.
cilium-dbg	cilium-dbg/	In-pod debugging CLI.
cilium-health	cilium-health/	Per-node health probe.
bugtool	bugtool/	Diagnostic bundle collector.
hubble & hubble-relay	hubble/, hubble-relay/	Flow observability CLI and gRPC aggregator.
clustermesh-apiserver	clustermesh-apiserver/	Cluster Mesh control plane (etcd export, identity bridging).
standalone-dns-proxy	standalone-dns-proxy/	Optional out-of-process DNS proxy for FQDN policy.

All Go binaries share the same Hive framework (pkg/hive/), the same logging conventions (pkg/logging/), the same metrics exporter (pkg/metrics/), and the same Kubernetes client (pkg/k8s/client/). New binaries should follow the same template: a main.go that calls cmd.Execute(cmd.New<Name>Cmd(...)) and a cmd/ package that assembles the cells.