【重识云原生】第六章容器6.3.7节——命令行工具kubectl

kubectl config set-credentials myself --username=admin --password=secret 
kubectl config set-cluster local-server --server=http://localhost:8080 
kubectl config set-context default-context --cluster=local-server --user=myself --namespace=default 
kubectl config use-context default-context 
kubectl config view

# OS X 
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/darwin/amd64/kubectl 
# Linux 
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl 
# Windows 
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/windows/amd64/kubectl.exe

kubectl get pod pod1 
kubectl get pods pod1 
kubectl get po pod1

kubectl get pod example-pod1 example-pod2

kubectl get pod/example-pod1 deployment/example-rc1

kubectl get pod -f ./pod.yaml

source /usr/share/bash-completion/bash_completion source <(kubectl completion bash)

source <(kubectl completion zsh)

kubectl get pods --all-namespaces -o custom-columns=NS:.metadata.namespace,NAME:.metadata.name,"CPU(requests)":.spec.containers[*].resources.requests.cpu,"CPU(limits)":.spec.containers[*].resources.limits.cpu,"MEMORY(requests)":.spec.containers[*].resources.requests.memory,"MEMORY(limits)":.spec.containers[*].resources.limits.memory

# Return snapshot logs from pod nginx with only one container 
kubectl logs nginx 

# Return snapshot of previous terminated ruby container logs from pod web-1 
kubectl logs -p -c ruby web-1 

# Begin streaming the logs of the ruby container in pod web-1 
kubectl logs -f -c ruby web-1

# Get output from running pod 123456-7890, using the first container by default 
kubectl attach 123456-7890 

# Get output from ruby-container from pod 123456-7890 
kubectl attach 123456-7890 -c ruby-container 

# Switch to raw terminal mode, sends stdin to 'bash' in ruby-container from pod 123456-7890 # and sends stdout/stderr from 'bash' back to the client 
kubectl attach 123456-7890 -c ruby-container -i -t 

Options: 
  -c, --container='': Container name. If omitted, the first container in the pod will be chosen
  -i, --stdin=false: Pass stdin to the container
  -t, --tty=false: Stdin is a TTY 

# Get output from running 'date' from pod 123456-7890, using the first container by default 
kubectl exec 123456-7890 date 

# Get output from running 'date' in ruby-container from pod 123456-7890 
kubectl exec 123456-7890 -c ruby-container date 

# Switch to raw terminal mode, sends stdin to 'bash' in ruby-container from pod 123456-7890 # and sends stdout/stderr from 'bash' back to the client 
kubectl exec 123456-7890 -c ruby-container -i -t -- bash -il 

Options: 
  -c, --container='': Container name. If omitted, the first container in the pod will be chosen 
  -p, --pod='': Pod name 
  -i, --stdin=false: Pass stdin to the container 
  -t, --tty=false: Stdin is a TT

# Listen on ports 5000 and 6000 locally, forwarding data to/from ports 5000 and 6000 in the 
pod kubectl port-forward mypod 5000 6000 

# Listen on port 8888 locally, forwarding to 5000 in the pod 
kubectl port-forward mypod 8888:5000 

# Listen on a random port locally, forwarding to 5000 in the pod 
kubectl port-forward mypod :5000 

# Listen on a random port locally, forwarding to 5000 in the pod 
kubectl port-forward mypod 0:5000

# Forward to deployment 
kubectl port-forward deployment/redis-master 6379:6379 

# Forward to replicaSet 
kubectl port-forward rs/redis-master 6379:6379 

# Forward to service 
kubectl port-forward svc/redis-master 6379:6379

$ kubectl proxy --port=8080 Starting to serve on 127.0.0.1:8080

curl http://localhost:8080/api/v1/namespaces/default/pods

kubectl proxy --address='0.0.0.0' --port=8080 --accept-hosts='^*$'

# Copy /tmp/foo_dir local directory to /tmp/bar_dir in a remote pod in the default namespace 
kubectl cp /tmp/foo_dir <some-pod>:/tmp/bar_dir 

# Copy /tmp/foo local file to /tmp/bar in a remote pod in a specific container 
kubectl cp /tmp/foo <some-pod>:/tmp/bar -c <specific-container> 

# Copy /tmp/foo local file to /tmp/bar in a remote pod in namespace <some-namespace> 
kubectl cp /tmp/foo <some-namespace>/<some-pod>:/tmp/bar 

# Copy /tmp/foo from a remote pod to /tmp/bar locally 
kubectl cp <some-namespace>/<some-pod>:/tmp/foo /tmp/bar 

Options: 
  -c, --container='': Container name. If omitted, the first container in the pod will be chosen

# Check to see if I can create pods in any namespace 
kubectl auth can-i create pods --all-namespaces 

# Check to see if I can list deployments in my current namespace 
kubectl auth can-i list deployments.extensions 

# Check to see if I can do everything in my current namespace ("*" means all) 
kubectl auth can-i '*' '*' 

# Check to see if I can get the job named "bar" in namespace "foo" 
kubectl auth can-i list jobs.batch/bar -n foo

# Reconcile rbac resources from a file 
kubectl auth reconcile -f my-rbac-rules.yaml

kubectl drain mynode --as=superman --as-group=system:masters

Impersonate-User: superman 
Impersonate-Group: system:masters

# 查看所有事件 
kubectl get events --all-namespaces 

# 查看名为nginx对象的事件 
kubectl get events --field-selector involvedObject.name=nginx,involvedObject.namespace=default 

# 查看名为nginx的服务事件 
kubectl get events --field-selector involvedObject.name=nginx,involvedObject.namespace=default,involvedObject.kind=Service 

# 查看Pod的事件 
kubectl get events --field-selector involvedObject.name=nginx-85cb5867f-bs7pn,involvedObject.kind=Pod

$ tree 
. 
└── hello
    └── plugin.yaml 

1 directory, 1 file 

$ cat hello/plugin.yaml 
name: "hello" 
shortDesc: "Hello kubectl plugin!" 
command: "echo Hello plugins!" 

$ kubectl plugin hello 
Hello plugins!