kubectl version # show client & server version
kubectl cluster-info # show cluster endpoint URLs
kubectl get nodes # list cluster nodes
kubectl describe node node-1 # detailed node info
kubectl top nodes # node resource usage (needs metrics-server)
kubectl get namespaces # list namespaces
kubectl config get-contexts # list kubeconfig contexts
kubectl config use-context my-cluster # switch context
kubectl get pods # list pods in current namespace
kubectl get pods -A # list pods across all namespaces
kubectl get pods -o wide # show pod IP and node
kubectl describe pod my-pod # detailed pod info & events
kubectl logs my-pod # pod logs (stdout)
kubectl logs my-pod -c sidecar # logs from specific container
kubectl logs my-pod -f # stream logs (follow)
kubectl logs my-pod --since=1h # logs from last hour
kubectl exec -it my-pod -- bash # interactive shell in pod
kubectl port-forward my-pod 8080:80 # forward local 8080 to pod port 80
kubectl get pods --show-labels # show pod labels
kubectl label pod my-pod env=prod # add label
kubectl label pod my-pod env=staging --overwrite # update label
kubectl label pod my-pod env- # remove label
kubectl get pods -l app=nginx # filter by label
kubectl get pods -l 'env in (prod,staging)' # label set query
kubectl get pods -l 'app=nginx,env!=dev' # multiple selectors
kubectl create deployment nginx --image=nginx:latest # create deployment
kubectl get deployments # list deployments
kubectl describe deployment nginx # deployment details
kubectl scale deployment nginx --replicas=5 # scale replicas
kubectl rollout status deployment nginx # watch rollout progress
kubectl rollout history deployment nginx # rollout revision history
kubectl rollout undo deployment nginx # rollback to previous revision
kubectl rollout undo deployment nginx --to-revision=2 # rollback to specific revision
kubectl set image deployment/nginx nginx=nginx:1.25 # update container image
kubectl get services # list services
kubectl expose deployment nginx --port=80 --target-port=80 --type=NodePort # create service
kubectl expose deployment nginx --port=80 --type=LoadBalancer # load balancer service
kubectl describe svc nginx # service details
kubectl get endpoints nginx # service endpoints (backend pods)
kubectl get ingress # list ingress resources
kubectl describe ingress my-ingress # ingress details
kubectl get networkpolicies # list network policies
kubectl create configmap my-config --from-literal=key1=value1 # from literal
kubectl create configmap my-config --from-file=config.yaml # from file
kubectl create configmap my-config --from-env-file=.env # from env file
kubectl get configmaps # list configmaps
kubectl describe configmap my-config # view configmap data
kubectl create secret generic my-secret --from-literal=password=s3cret # generic secret
kubectl create secret tls tls-secret --cert=tls.crt --key=tls.key # TLS secret
kubectl get secrets # list secrets
kubectl describe secret my-secret # view metadata (not values)
kubectl get secret my-secret -o jsonpath='{.data.password}' | base64 -d # decode value
kubectl get pv # list persistent volumes
kubectl get pvc # list persistent volume claims
kubectl describe pvc my-pvc # PVC details
# storage classes
kubectl get storageclasses # list available storage classes
kubectl describe storageclass standard # storage class details
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: my-pvc
spec:
accessModes:
- ReadWriteOnce # RWO, ReadOnlyMany (ROX), ReadWriteMany (RWX)
resources:
requests:
storage: 10Gi
storageClassName: standard
kubectl get jobs # list jobs
kubectl describe job my-job # job details
kubectl delete job my-job # delete job
kubectl logs job/my-job # job pod logs
kubectl get cronjobs # list cronjobs
kubectl describe cronjob my-cron # cronjob details
kubectl create job --from=cronjob/my-cron manual-run # trigger manually
apiVersion: batch/v1
kind: CronJob
metadata:
name: backup
spec:
schedule: "0 2 * * *" # cron format: daily at 2 AM
jobTemplate:
spec:
backoffLimit: 3
template:
spec:
containers:
- name: backup
image: backup-tool:latest
command: ["/bin/sh", "-c", "backup.sh"]
restartPolicy: OnFailure
kubectl get events --sort-by='.lastTimestamp' # cluster events sorted by time
kubectl get pods --field-selector=status.phase=Failed # find failed pods
kubectl describe pod my-pod | grep -A5 "Events" # pod events
kubectl logs my-pod --previous # logs from previous crashed container
kubectl debug my-pod -it --image=busybox # ephemeral debug container
# resource usage
kubectl top pods # pod CPU/memory usage
kubectl top pods -l app=nginx # filtered by label
# cluster issues
kubectl get componentstatuses # component health (deprecated in 1.19+)
kubectl get cs # shorthand
kubectl apply -f manifest.yaml # create/update from file
kubectl apply -f ./manifests/ # apply all files in directory
kubectl apply -k ./kustomization/ # apply kustomization
kubectl delete -f manifest.yaml # delete resources from file
kubectl get all # list common resources in namespace
kubectl edit deployment nginx # edit in editor (opens vim)
kubectl patch deployment nginx -p '{"spec":{"replicas":3}}' # patch resource
# output formatting
kubectl get pods -o yaml # YAML output
kubectl get pods -o json # JSON output
kubectl get pods -o name # resource names only
kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase
# common aliases (add to ~/.bashrc)
alias k='kubectl'
alias kgp='kubectl get pods'
alias kgs='kubectl get svc'
alias kgd='kubectl get deployments'
alias kl='kubectl logs'
alias ke='kubectl exec -it'
alias kd='kubectl describe'
alias kaf='kubectl apply -f'
alias kdf='kubectl delete -f'
# quick resource creation
kubectl run test --image=busybox --rm -it --restart=Never -- sh # temporary debug pod
kubectl run nginx --image=nginx --dry-run=client -o yaml > deploy.yaml # generate manifest
# namespace shortcut
kubectl get pods -n kube-system # specify namespace
kubectl -n monitoring get pods # namespace flag anywhere
kubectl version # 显示客户端和服务端版本
kubectl cluster-info # 显示集群端点 URL
kubectl get nodes # 列出集群节点
kubectl describe node node-1 # 节点详细信息
kubectl top nodes # 节点资源使用（需要 metrics-server）
kubectl get namespaces # 列出命名空间
kubectl config get-contexts # 列出 kubeconfig 上下文
kubectl config use-context my-cluster # 切换上下文
kubectl get pods # 列出当前命名空间的 Pod
kubectl get pods -A # 列出所有命名空间的 Pod
kubectl get pods -o wide # 显示 Pod IP 和所在节点
kubectl describe pod my-pod # Pod 详细信息和事件
kubectl logs my-pod # 查看 Pod 日志（stdout）
kubectl logs my-pod -c sidecar # 查看指定容器日志
kubectl logs my-pod -f # 实时跟踪日志
kubectl logs my-pod --since=1h # 最近 1 小时的日志
kubectl exec -it my-pod -- bash # 进入 Pod 交互式终端
kubectl port-forward my-pod 8080:80 # 本地 8080 转发到 Pod 80 端口
kubectl get pods --show-labels # 显示 Pod 标签
kubectl label pod my-pod env=prod # 添加标签
kubectl label pod my-pod env=staging --overwrite # 更新标签
kubectl label pod my-pod env- # 删除标签
kubectl get pods -l app=nginx # 按标签过滤
kubectl get pods -l 'env in (prod,staging)' # 标签集合查询
kubectl get pods -l 'app=nginx,env!=dev' # 多选择器组合
kubectl create deployment nginx --image=nginx:latest # 创建 Deployment
kubectl get deployments # 列出 Deployment
kubectl describe deployment nginx # Deployment 详情
kubectl scale deployment nginx --replicas=5 # 扩缩副本数
kubectl rollout status deployment nginx # 查看滚动更新状态
kubectl rollout history deployment nginx # 查看更新历史
kubectl rollout undo deployment nginx # 回滚到上一版本
kubectl rollout undo deployment nginx --to-revision=2 # 回滚到指定版本
kubectl set image deployment/nginx nginx=nginx:1.25 # 更新容器镜像
kubectl get services # 列出 Service
kubectl expose deployment nginx --port=80 --target-port=80 --type=NodePort # 创建 NodePort 服务
kubectl expose deployment nginx --port=80 --type=LoadBalancer # 创建 LoadBalancer 服务
kubectl describe svc nginx # Service 详情
kubectl get endpoints nginx # Service 后端端点
kubectl get ingress # 列出 Ingress
kubectl describe ingress my-ingress # Ingress 详情
kubectl get networkpolicies # 列出网络策略
kubectl create configmap my-config --from-literal=key1=value1 # 从键值对创建
kubectl create configmap my-config --from-file=config.yaml # 从文件创建
kubectl create configmap my-config --from-env-file=.env # 从 env 文件创建
kubectl get configmaps # 列出 ConfigMap
kubectl describe configmap my-config # 查看 ConfigMap 数据
kubectl create secret generic my-secret --from-literal=password=s3cret # 创建通用 Secret
kubectl create secret tls tls-secret --cert=tls.crt --key=tls.key # 创建 TLS Secret
kubectl get secrets # 列出 Secret
kubectl describe secret my-secret # 查看元数据（不显示值）
kubectl get secret my-secret -o jsonpath='{.data.password}' | base64 -d # 解码值
kubectl get pv # 列出持久卷
kubectl get pvc # 列出持久卷声明
kubectl describe pvc my-pvc # PVC 详情
# 存储类
kubectl get storageclasses # 列出可用存储类
kubectl describe storageclass standard # 存储类详情
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: my-pvc
spec:
accessModes:
- ReadWriteOnce # RWO 单节点读写, ROX 多节点只读, RWX 多节点读写
resources:
requests:
storage: 10Gi
storageClassName: standard
kubectl get jobs # 列出 Job
kubectl describe job my-job # Job 详情
kubectl delete job my-job # 删除 Job
kubectl logs job/my-job # Job Pod 日志
kubectl get cronjobs # 列出 CronJob
kubectl describe cronjob my-cron # CronJob 详情
kubectl create job --from=cronjob/my-cron manual-run # 手动触发一次
apiVersion: batch/v1
kind: CronJob
metadata:
name: backup
spec:
schedule: "0 2 * * *" # cron 格式：每天凌晨 2 点
jobTemplate:
spec:
backoffLimit: 3
template:
spec:
containers:
- name: backup
image: backup-tool:latest
command: ["/bin/sh", "-c", "backup.sh"]
restartPolicy: OnFailure
kubectl get events --sort-by='.lastTimestamp' # 按时间排序的集群事件
kubectl get pods --field-selector=status.phase=Failed # 查找失败的 Pod
kubectl describe pod my-pod | grep -A5 "Events" # Pod 事件
kubectl logs my-pod --previous # 上一次崩溃容器的日志
kubectl debug my-pod -it --image=busybox # 临时调试容器
# 资源使用
kubectl top pods # Pod CPU/内存使用
kubectl top pods -l app=nginx # 按标签过滤
# 集群问题
kubectl get componentstatuses # 组件健康状态（1.19+ 已弃用）
kubectl get cs # 简写
kubectl apply -f manifest.yaml # 从文件创建/更新资源
kubectl apply -f ./manifests/ # 应用目录下所有文件
kubectl apply -k ./kustomization/ # 应用 kustomization
kubectl delete -f manifest.yaml # 从文件删除资源
kubectl get all # 列出命名空间中常见资源
kubectl edit deployment nginx # 在编辑器中修改（打开 vim）
kubectl patch deployment nginx -p '{"spec":{"replicas":3}}' # 补丁更新
# 输出格式
kubectl get pods -o yaml # YAML 输出
kubectl get pods -o json # JSON 输出
kubectl get pods -o name # 仅资源名称
kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase
# 常用别名（添加到 ~/.bashrc）
alias k='kubectl'
alias kgp='kubectl get pods'
alias kgs='kubectl get svc'
alias kgd='kubectl get deployments'
alias kl='kubectl logs'
alias ke='kubectl exec -it'
alias kd='kubectl describe'
alias kaf='kubectl apply -f'
alias kdf='kubectl delete -f'
# 快速创建资源
kubectl run test --image=busybox --rm -it --restart=Never -- sh # 临时调试 Pod
kubectl run nginx --image=nginx --dry-run=client -o yaml > deploy.yaml # 生成清单文件
# 命名空间简写
kubectl get pods -n kube-system # 指定命名空间
kubectl -n monitoring get pods # namespace 参数位置灵活