diff --git a/helm/scripts/k8s-unmanaged.sh b/helm/scripts/k8s-unmanaged.sh
new file mode 100755
index 0000000..1b183d5
--- /dev/null
+++ b/helm/scripts/k8s-unmanaged.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: Apache-2.0
+# Copyright Authors of Cilium
+
+function all_ceps { kubectl get cep --all-namespaces -o json | jq -r '.items[].metadata | .namespace + "/" + .name'; }
+function all_pods { kubectl get pods --all-namespaces -o json | jq -r '.items[] | select((.status.phase=="Running" or .status.phase=="Pending") and (.spec.hostNetwork==true | not)) | .metadata | .namespace + "/" + .name'; }
+ 
+echo "Skipping pods with host networking enabled or with status not in Running or Pending phase..."
+
+sort <(all_ceps) <(all_pods) | uniq -u