https://github.com/anmolnagpal/k8s-commands
Kubernetes Commands
https://github.com/anmolnagpal/k8s-commands
commands devops k8s kubernetes kubernetes-cluster
Last synced: about 1 year ago
JSON representation
Kubernetes Commands
- Host: GitHub
- URL: https://github.com/anmolnagpal/k8s-commands
- Owner: anmolnagpal
- License: mit
- Created: 2018-09-25T12:54:39.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2018-09-25T13:03:04.000Z (over 7 years ago)
- Last Synced: 2025-04-07T21:12:14.612Z (about 1 year ago)
- Topics: commands, devops, k8s, kubernetes, kubernetes-cluster
- Homepage: https://kubernetes.io/
- Size: 6.84 KB
- Stars: 8
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
> Kubernetes commands
Helper setup to edit .yaml files with Vim:
- [VIM Setup for Yaml files](#vim-setup-for-yaml-files)
List of general purpose commands for Kubernetes management:
- [PODS](#pods)
- [Create Deployments](#create-deployments)
- [Scaling PODs](#scaling-pods)
- [POD Upgrade / History](#pod-upgrade-and-history)
- [Services](#services)
- [Volumes](#volumes)
- [Secrets](#secrets)
- [ConfigMaps](#configmaps)
- [Ingress](#ingress)
- [Horizontal Pod Autoscalers](#horizontal-pod-autoscalers)
- [Scheduler](#scheduler)
- [Taints and Tolerations](#tains_and_tolerations)
- [Troubleshooting](#troubleshooting)
- [Role Based Access Control (RBAC)](#role_based_access_control)
- [Security Contexts](#security_contexts)
- [Pod Security Policies](#pod_security_policies)
- [Network Policies](#network_policies)
## VIM Setup for Yaml files
Put the following lines in ~/.vimrc:
```
" Yaml file handling
autocmd FileType yaml setlocal ts=2 sts=2 sw=2 expandtab
filetype plugin indent on
autocmd FileType yaml setl indentkeys-=<:>
" Copy paste with ctr+c, ctr+v, etc
:behave mswin
:set clipboard=unnamedplus
:smap "_d
:smap y
:smap x
:imap pi
:smap p
:smap 1>
:smap 1<
```
Keyboard hints:
- ctrl + f: auto indent line (requires INSERT mode)
## PODS
```
$ kubectl get pods
$ kubectl get pods --all-namespaces
$ kubectl get pod monkey -o wide
$ kubectl get pod monkey -o yaml
$ kubectl describe pod monkey
```
## Create Deployments
Create single deployment
```
$ kubectl run monkey --image=monkey --record
```
## Scaling PODs
```bash
$ kubectl scale deployment/POD_NAME --replicas=N
```
## POD Upgrade and history
#### List history of deployments
```
$ kubectl rollout history deployment/DEPLOYMENT_NAME
```
#### Jump to specific revision
```
$ kubectl rollout undo deployment/DEPLOYMENT_NAME --to-revision=N
```
## Services
List services
```
$ kubectl get services
```
Expose PODs as services (creates endpoints)
```
$ kubectl expose deployment/monkey --port=2001 --type=NodePort
```
## Volumes
Lits Persistent Volumes and Persistent Volumes Claims:
```
$ kubectl get pv
$ kubectl get pvc
```
## Secrets
```
$ kubectl get secrets
$ kubectl create secret generic --help
$ kubectl create secret generic mysql --from-literal=password=root
$ kubectl get secrets mysql -o yaml
```
## ConfigMaps
```
$ kubectl create configmap foobar --from-file=config.js
$ kubectl get configmap foobar -o yaml
```
## DNS
List DNS-PODs:
```
$ kubectl get pods --all-namespaces |grep dns
```
Check DNS for pod nginx (assuming a busybox POD/container is running)
```
$ kubectl exec -ti busybox -- nslookup nginx
```
> Note: kube-proxy running in the worker nodes manage services and set iptables rules to direct traffic.
## Ingress
Commands to manage Ingress for ClusterIP service type:
```
$ kubectl get ingress
$ kubectl expose deployment ghost --port=2368
```
Spec for ingress:
- [backend](https://github.com/kubernetes/ingress/tree/master/examples/deployment/nginx)
## Horizontal Pod Autoscaler
When heapster runs:
```
$ kubectl get hpa
$ kubectl autoscale --help
```
## DaemonSets
```
$ kubectl get daemonsets
$ kubectl get ds
```
## Scheduler
NodeSelector based policy:
```
$ kubectl label node minikube foo=bar
```
Node Binding through API Server:
```
$ kubectl proxy
$ curl -H "Content-Type: application/json" -X POST --data @binding.json http://localhost:8001/api/v1/namespaces/default/pods/foobar-sched/binding
```
## Tains and Tolerations
```
$ kubectl taint node master foo=bar:NoSchedule
```
## Troubleshooting
```
$ kubectl describe
$ kubectl logs
$ kubectl exec
$ kubectl get nodes --show-labels
$ kubectl get events
```
Docs Cluster:
- https://kubernetes.io/docs/tasks/debug-application-cluster/debug-cluster/
- https://github.com/kubernetes/kubernetes/wiki/Debugging-FAQ
## Role Based Access Control
- Role
- ClusterRule
- Binding
- ClusterRoleBinding
```
$ kubectl create role fluent-reader --verb=get --verb=list --verb=watch --resource=pods
$ kubectl create rolebinding foo --role=fluent-reader --user=minikube
$ kubectl get rolebinding foo -o yaml
```
## Security Contexts
Docs: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
- spec
- securityCOntext
- runAsNonRoot: true
## Pod Security Policies
Docs: https://github.com/kubernetes/kubernetes/blob/master/examples/podsecuritypolicy/rbac/README.md
## Network Policies
Network isolation at Pod level by using annotations
```
$ kubectl annotate ns "net.beta.kubernetes.io/network-policy={\"ingress\": {\"isolation\": \"DefaultDeny\"}}"
```
More about Network Policies as a resource:
https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/
## 👬 Contribution
- Open pull request with improvements
- Discuss ideas in issues
- Reach out with any feedback [](https://twitter.com/anmol_nagpal)