kubectl Command Reference

kubectl get pods -o jsonpath='{.items[*].metadata.name}'
kubectl get deploy -n prod -o jsonpath='{.items[*].metadata.name}'
kubectl get svc -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\t"}{.spec.clusterIP}{"\n"}{end}'
kubectl get pods -o jsonpath='{.items[0].status.podIP}'
kubectl get nodes -o jsonpath='{.items[*].metadata.name}'
kubectl get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.phase}{"\n"}{end}'
kubectl get pods -o jsonpath='{.items[?(@.status.phase=="Running")].metadata.name}'
kubectl get pods -o jsonpath='{.items[?(@.spec.nodeName=="worker-1")].metadata.name}'
kubectl get deploy web -o jsonpath='{.metadata.generation}'
kubectl get deploy web -o jsonpath='{.status.observedGeneration}'
kubectl get pods -o jsonpath='{range .items[*]}{.spec.containers[*].name}{"\n"}{end}'
kubectl get pod mypod -o jsonpath='{.spec.containers[0].resources.requests.cpu}'
kubectl get pod mypod -o jsonpath='{.spec.containers[0].resources.limits.memory}'
kubectl get ingress -A -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.spec.rules[*].host}{"\n"}{end}'
kubectl get pv -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.phase}{"\n"}{end}'
kubectl get pvc -A -o jsonpath='{range .items[*]}{.metadata.namespace}/{.metadata.name}{"\t"}{.status.phase}{"\n"}{end}'
kubectl get sa -n kube-system -o jsonpath='{.items[*].metadata.name}'
kubectl get cm coredns -n kube-system -o jsonpath='{.data.Corefile}'
kubectl get nodes -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.nodeInfo.kubeletVersion}{"\n"}{end}'
kubectl get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.startTime}{"\n"}{end}'
kubectl get deploy -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\t"}{.spec.replicas}{"\n"}{end}'
kubectl get pods -o jsonpath='{.items[*].status.containerStatuses[*].imageID}'
kubectl get pods -o jsonpath='{range .items[*]}{range .status.conditions[*]}{.type}={.status}{"\n"}{end}{end}'
kubectl get hpa -A -o jsonpath='{range .items[*]}{.metadata.namespace}/{.metadata.name}{"\t"}{.status.currentReplicas}/{.spec.maxReplicas}{"\n"}{end}'
kubectl get pdb -A -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.disruptionsAllowed}{"\n"}{end}'
kubectl get networkpolicy -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\n"}{end}'
kubectl get cronjobs -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\t"}{.spec.schedule}{"\n"}{end}'
kubectl get job -A -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.succeeded}{"\n"}{end}'
kubectl get sts -A -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.spec.replicas}{"\t"}{.status.readyReplicas}{"\n"}{end}'
kubectl get ds -A -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.numberReady}{"\t"}{.status.desiredNumberScheduled}{"\n"}{end}'
kubectl get endpointslices -A -o jsonpath='{range .items[*]}{.metadata.name}{"\n"}{end}'
kubectl get validatingwebhookconfigurations -o jsonpath='{.items[*].metadata.name}'
kubectl get mutatingwebhookconfigurations -o jsonpath='{.items[*].metadata.name}'
kubectl get ns -o jsonpath='{.items[*].metadata.name}{"\n"}'
kubectl get nodes -o jsonpath='{.items[?(@.spec.unschedulable==true)].metadata.name}'
kubectl get pods -o jsonpath='{range .items[*]}{.metadata.ownerReferences[0].kind}{"\t"}{.metadata.ownerReferences[0].name}{"\n"}{end}'
kubectl get secret db-secret -o jsonpath='{.data.username}' | base64 -d
kubectl get pod -l app=web -o jsonpath='{.items[0].metadata.annotations}'
kubectl get deploy web -o jsonpath='{.spec.strategy.type}'
kubectl get svc web -o jsonpath='{.spec.ports[0].nodePort}'
kubectl get pod mypod -o jsonpath='{.spec.dnsPolicy}'
kubectl get pod mypod -o jsonpath='{.spec.restartPolicy}'
kubectl get nodes -o jsonpath='{range .items[*]}{.status.allocatable.pods}{" pods on "}{.metadata.name}{"\n"}{end}'
kubectl get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.spec.serviceAccountName}{"\n"}{end}'
kubectl get rs -l app=web -o jsonpath='{.items[*].metadata.name}'
kubectl api-resources -o name | head -30

kubectl get pods -o custom-columns=NS:.metadata.namespace,NAME:.metadata.name,QOS:.status.qosClass
kubectl get pods -o custom-columns=NAME:.metadata.name,RESTARTS:.status.containerStatuses[0].restartCount
kubectl get pods -o custom-columns=NAME:.metadata.name,IMAGE:.spec.containers[0].image,PULL:.spec.containers[0].imagePullPolicy
kubectl get svc -o custom-columns=NAME:.metadata.name,TYPE:.spec.type,CLUSTER_IP:.spec.clusterIP,PORTS:.spec.ports[0].port
kubectl get ingress -o custom-columns=NAME:.metadata.name,CLASS:.spec.ingressClassName,HOSTS:.spec.rules[0].host
kubectl get pvc -o custom-columns=NAME:.metadata.name,STATUS:.status.phase,VOL:.spec.volumeName,SIZE:.spec.resources.requests.storage
kubectl get pv -o custom-columns=NAME:.metadata.name,CAP:.spec.capacity.storage,CLAIM:.spec.claimRef.name,STATUS:.status.phase
kubectl get hpa -o custom-columns=NAME:.metadata.name,TARGET:.spec.scaleTargetRef.name,MIN:.spec.minReplicas,MAX:.spec.maxReplicas,CURRENT:.status.currentReplicas
kubectl get cronjob -o custom-columns=NAME:.metadata.name,SCHEDULE:.spec.schedule,SUSPEND:.spec.suspend
kubectl get job -o custom-columns=NAME:.metadata.name,COMPLETIONS:.status.succeeded,ACTIVE:.status.active,FAILED:.status.failed
kubectl get pdb -o custom-columns=NAME:.metadata.name,MIN:.spec.minAvailable,MAX:.spec.maxUnavailable,ALLOWED:.status.disruptionsAllowed
kubectl get networkpolicy -o custom-columns=NAME:.metadata.name,PODSEL:.spec.podSelector.matchLabels.app
kubectl get cm -o custom-columns=NAME:.metadata.name,KEYS:.data
kubectl get secret -o custom-columns=NAME:.metadata.name,TYPE:.type,KEYS:.data
kubectl get sa -o custom-columns=NAME:.metadata.name,NS:.metadata.namespace,SECRETS:.secrets[0].name
kubectl get endpoints -o custom-columns=NAME:.metadata.name,ENDPOINTS:.subsets[0].addresses[0].ip
kubectl get rs -o custom-columns=NAME:.metadata.name,DESIRED:.spec.replicas,CURRENT:.status.replicas,READY:.status.readyReplicas
kubectl get sts -o custom-columns=NAME:.metadata.name,REPLICAS:.spec.replicas,READY:.status.readyReplicas,CURRENT:.status.currentReplicas
kubectl get ds -o custom-columns=NAME:.metadata.name,DESIRED:.status.desiredNumberScheduled,READY:.status.numberReady
kubectl get nodes -o custom-columns=NAME:.metadata.name,TAINTS:.spec.taints[*].key

kubectl get pods -n dev --field-selector=status.phase=Running -l app=web
kubectl get pods -A --field-selector=metadata.namespace!=kube-system,status.phase=Running

kubectl get pods -v=6
kubectl get pods -v=8 2>&1 | tail -20
kubectl get pods --request-timeout=3s
kubectl get pods --chunk-size=50
kubectl get pods --ignore-not-found
kubectl get pods --show-managed-fields
kubectl apply -f app.yaml --validate=true
kubectl apply -f app.yaml --validate=false
kubectl apply -f app.yaml --force-conflicts --server-side
kubectl apply -f app.yaml --prune -l app=myapp --prune-allowlist=core/v1/ConfigMap
kubectl delete pod demo --wait=false
kubectl delete pod demo --grace-period=0 --force
kubectl get pods --selector='environment in (prod,staging)'
kubectl get pods -o json | jq '.items | length'
kubectl config use-context prod
kubectl --context=staging get nodes
kubectl --kubeconfig=/path/kubeconfig get ns
kubectl options | head -40
kubectl help apply | col -b | head -30
kubectl create namespace tmp-ns --dry-run=client -o yaml | kubectl apply -f -
kubectl run tmp-shell --rm -it --image=busybox:1.36 --restart=Never -- nslookup kubernetes.default
kubectl auth can-i list secrets --as=system:anonymous
kubectl get rolebindings,roles --all-namespaces
kubectl get clusterrolebindings | grep admin
kubectl describe limitrange -n default
kubectl describe quota -n default
kubectl get podsecuritypolicy 2>/dev/null || kubectl get podsecuritystandards 2>/dev/null || true
kubectl get poddisruptionbudget -A
kubectl get resourcequota -A --sort-by=.metadata.namespace
kubectl get events -A --field-selector involvedObject.kind=Pod --sort-by=.lastTimestamp | tail -15
kubectl patch deployment web -p '{"spec":{"progressDeadlineSeconds":600}}'
kubectl scale deploy web --replicas=0
kubectl scale deploy web --replicas=3 --timeout=120s
kubectl wait --for=jsonpath='{.status.readyReplicas}'=3 deployment/web --timeout=180s
kubectl get lease -n kube-system
kubectl get componentstatuses 2>/dev/null || kubectl get --raw /healthz
kubectl config view -o jsonpath='{.users[*].name}'
kubectl config set-context --current --user=admin
kubectl config unset contexts.old
kubectl version --output=yaml
kubectl api-resources --api-group=apps -o wide
kubectl api-resources --verbs=create --namespaced
kubectl explain pod --recursive | head -80
kubectl convert -f old-deploy.yaml --output-version=apps/v1 2>/dev/null || echo 'convert removed in modern kubectl'
kubectl kustomize ./base | kubectl apply -f - --dry-run=client
kubectl apply -f https://example.com/manifest.yaml --dry-run=client

kubectl cluster-info
kubectl cluster-info dump --namespaces kube-system --output-directory=/tmp/cinfo
kubectl get --raw /version | jq .
kubectl get --raw /readyz?verbose
kubectl get --raw /livez?verbose
kubectl config current-context
kubectl config view --minify -o jsonpath='{.contexts[0].context.namespace}'
kubectl config rename-context old-name new-name
kubectl config delete-context stale-context
kubectl config unset users.old-user
kubectl config set-credentials lab-user --token=$TOKEN
kubectl plugin list
kubectl options
kubectl completion bash | head -3
kubectl describe ns kube-system | head -40
kubectl get validatingadmissionpolicies 2>/dev/null || true
kubectl get mutatingadmissionpolicies 2>/dev/null || true
kubectl get runtimeclasses 2>/dev/null || true
kubectl get apiservices | grep False
kubectl get crd | wc -l

kubectl patch cm app-config --type merge -p '{"data":{"log_level":"debug"}}'
kubectl patch svc web --type=json -p '[{"op":"replace","path":"/spec/type","value":"ClusterIP"}]'
kubectl annotate deployment web deployment.kubernetes.io/revision-
kubectl label pod mypod app-
kubectl label pod mypod app=web --overwrite
kubectl patch deploy web -p '{"spec":{"template":{"metadata":{"annotations":{"kubectl.kubernetes.io/restartedAt":"'$(date -Iseconds)'"}}}}}'
kubectl rollout restart deployment/web
kubectl set probes deployment/web --liveness=exec -- bash -c true --period-seconds=10 2>/dev/null || kubectl explain deploy.spec.template.spec.containers.livenessProbe
kubectl edit deploy web --windows-line-endings=false
kubectl apply --server-side --field-manager=my-controller -f svc.yaml
kubectl replace -f pod-static.yaml --force --grace-period=0
kubectl patch pvc data --type=json -p '[{"op":"add","path":"/metadata/annotations/pv.kubernetes.io~1bind-completed","value":"true"}]' 2>/dev/null || true
kubectl patch hpa web --patch '{"spec":{"maxReplicas":20}}'
kubectl patch sts redis --type='merge' -p '{"spec":{"updateStrategy":{"type":"RollingUpdate"}}}'
kubectl patch cronjob backup --patch '{"spec":{"suspend":true}}'
kubectl patch job run-once --type=json -p '[{"op":"replace","path":"/spec/suspend","value":true}]' 2>/dev/null || true
kubectl patch networkpolicy deny-all -p '{"spec":{"podSelector":{}}}'
kubectl patch secret tls-cert --type=merge -p '{"stringData":{"tls.crt":"'"$(cat tls.crt)"'"}}' 2>/dev/null || true
kubectl diff -R -f ./manifests/
kubectl apply -f ./manifests/ --server-side --force-conflicts
kubectl apply -f pod.json --dry-run=client -o yaml | kubectl apply -f -
kubectl create deploy web --image=nginx --dry-run=client -o yaml | kubectl apply -f -
kubectl set resources deployment web -c web --requests=cpu=100m,memory=128Mi --limits=cpu=500m,memory=256Mi
kubectl set image deployment/web '*=nginx:1.27'
kubectl set env deployment/web FEATURE_FLAG=on --from=configmap/app-config --keys=log_level
kubectl set serviceaccount deployment/web sa-apps
kubectl patch deploy web --subresource=status --type=merge -p '{"status":{"conditions":[]}}' 2>/dev/null || true
kubectl wait --for=delete pod/old-pod --timeout=60s
kubectl delete pod -l app=web --field-selector=status.phase!=Running
kubectl patch node worker-1 -p '{"spec":{"unschedulable":true}}'
kubectl patch node worker-1 -p '{"spec":{"unschedulable":false}}'
kubectl cordon worker-1 && kubectl drain worker-1 --ignore-daemonsets --delete-emptydir-data
kubectl taint nodes worker-1 dedicated=team-a:NoSchedule
kubectl taint nodes worker-1 dedicated-
kubectl patch validatingwebhookconfigurations admission --type=json -p='[]' 2>/dev/null || true
kubectl get deploy web -o yaml | kubectl apply -f - --server-side
kubectl create cm patch-demo --from-literal=key=value --dry-run=client -o yaml | kubectl apply -f -
kubectl patch cm patch-demo --type merge -p '{"data":{"key":"new"}}'
kubectl delete cm patch-demo --ignore-not-found
kubectl patch deploy web --type=json -p '[{"op":"test","path":"/spec/replicas","value":3},{"op":"replace","path":"/spec/replicas","value":5}]' 2>/dev/null || true
kubectl rollout history deploy/web --revision=3
kubectl rollout undo deploy/web --to-revision=2
kubectl set image deployment/web web=nginx:bad && kubectl rollout undo deployment/web
kubectl patch deploy web -p '{"spec":{"strategy":{"type":"Recreate"}}}'
kubectl patch deploy web -p '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxSurge":"25%","maxUnavailable":"25%"}}}}'

kubectl logs -f deploy/web --since-time='2026-04-01T12:00:00Z'
kubectl logs pod/mypod -c init --tail=20
kubectl logs -l app=web --prefix=true --tail=50
kubectl logs daemonset/fluent-bit -n logging --tail=100
kubectl exec -it sts/redis-0 -- redis-cli ping
kubectl exec deploy/api -- wget -qO- http://127.0.0.1:8080/ready
kubectl run netshoot --image=nicolaka/netshoot --rm -it --restart=Never -- bash
kubectl get pod mypod -o jsonpath='{.status.containerStatuses[*].state.waiting.message}'
kubectl describe pod mypod | sed -n '/Events/,$p'
kubectl get events --field-selector reason=FailedScheduling
kubectl get events --field-selector type=Warning -A | tail -20
kubectl port-forward svc/prometheus 9090:9090 -n monitoring
kubectl auth can-i get secret --namespace kube-system
kubectl auth can-i use podsecuritypolicies --as=system:serviceaccount:default:default
kubectl proxy --port=0 &

kubectl create namespace lab62
kubectl -n lab62 create deployment web --image=nginx:1.25 --replicas=3
kubectl -n lab62 expose deployment web --port=80 --type=ClusterIP
kubectl -n lab62 wait --for=condition=available deployment/web --timeout=60s
kubectl -n lab62 get svc web -o jsonpath='{.spec.clusterIP}'
kubectl -n lab62 get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.podIP}{"\t"}{.spec.nodeName}{"\n"}{end}'
kubectl -n lab62 get pods -o jsonpath='{.items[*].spec.containers[*].image}'
kubectl get nodes -o jsonpath='{.items[?(@.status.conditions[-1].type=="Ready")].metadata.name}'
kubectl -n lab62 get pods -o custom-columns=NAME:.metadata.name,IP:.status.podIP,NODE:.spec.nodeName,STATUS:.status.phase
kubectl -n lab62 get deployments -o custom-columns=NAME:.metadata.name,IMAGE:.spec.template.spec.containers[0].image,DESIRED:.spec.replicas,READY:.status.readyReplicas
kubectl get nodes -o custom-columns=NODE:.metadata.name,CPU_CAP:.status.capacity.cpu,MEM_CAP:.status.capacity.memory,CPU_ALLOC:.status.allocatable.cpu,MEM_ALLOC:.status.allocatable.memory
kubectl -n lab62 patch deployment web -p '{"metadata":{"labels":{"tier":"frontend"}}}'
kubectl -n lab62 get deployment web --show-labels
kubectl -n lab62 patch deployment web --type=merge -p '{"spec":{"template":{"spec":{"containers":[{"name":"nginx","image":"nginx:1.26"}]}}}}'
kubectl -n lab62 rollout status deployment/web
kubectl -n lab62 patch deployment web --type=json -p '[{"op":"add","path":"/metadata/annotations/patched-by","value":"lab62"}]'
kubectl -n lab62 get deployment web -o jsonpath='{.metadata.annotations.patched-by}'
kubectl -n lab62 patch svc web -p '{"spec":{"type":"NodePort"}}'
kubectl -n lab62 get svc web
kubectl get pods -A --field-selector=status.phase=Running | head -20
NODE=$(kubectl get nodes -o jsonpath='{.items[0].metadata.name}')
kubectl get pods -A --field-selector spec.nodeName=$NODE
kubectl -n lab62 get pods --field-selector=status.phase=Running -l app=web
kubectl -n lab62 get pods --sort-by=.metadata.creationTimestamp
kubectl get nodes --sort-by=.status.capacity.cpu
kubectl diff -f /tmp/lab62-web.yaml
kubectl apply -f /tmp/lab62-web.yaml --dry-run=server
kubectl apply -f /tmp/lab62-web.yaml --server-side
POD=$(kubectl -n lab62 get pods -l app=web -o jsonpath='{.items[0].metadata.name}')
kubectl -n lab62 debug $POD -it --image=busybox:1.36 --target=nginx -- sh
kubectl -n lab62 debug $POD -it --copy-to=debug-copy --image=busybox:1.36 -- sh
kubectl -n lab62 delete pod debug-copy
kubectl auth can-i create deployments -n lab62
kubectl auth can-i delete nodes
kubectl auth can-i '*' '*' --all-namespaces
kubectl auth can-i get pods -n lab62 --as=system:serviceaccount:lab62:default
kubectl auth can-i create deployments -n lab62 --as=system:serviceaccount:lab62:default
kubectl delete namespace lab62
rm -f /tmp/lab62-web.yaml

kubectl create deployment hello --image=nginx:1.25
kubectl get deployments.apps
kubectl get pods -l app=hello
kubectl describe deployment hello
kubectl scale deployment/hello --replicas=3
kubectl get pods -o wide
kubectl expose deployment hello --port=80 --type=ClusterIP
kubectl get svc hello
kubectl port-forward svc/hello 8080:80
kubectl logs deploy/hello --tail=20
kubectl logs deploy/hello -f
kubectl exec -it deploy/hello -- nginx -v
kubectl delete svc hello
kubectl delete deployment hello
kubectl create namespace lab03-demo
kubectl -n lab03-demo run tmp --image=busybox:1.36 --restart=Never -- sleep 3600
kubectl -n lab03-demo get pods
kubectl -n lab03-demo describe pod tmp
kubectl -n lab03-demo delete pod tmp --force --grace-period=0
kubectl delete namespace lab03-demo
kubectl get all
kubectl get all -n kube-system | head
kubectl cluster-info
kubectl get nodes
kubectl version --short
kubectl config get-contexts
kubectl get events --sort-by=.metadata.creationTimestamp | tail -15
kubectl rollout status deployment/hello
kubectl set image deployment/hello hello=nginx:1.26
kubectl rollout undo deployment/hello
kubectl get rs -l app=hello
kubectl cp /etc/hosts hello-pod:/tmp/hosts 2>/dev/null || echo 'replace hello-pod name'
kubectl wait --for=condition=ready pod -l app=hello --timeout=90s
kubectl get pods --show-labels
kubectl label pod PODNAME color=blue
kubectl annotate pod PODNAME note=lab03
kubectl top pods 2>/dev/null || echo 'install metrics-server'
kubectl api-resources | head -25
kubectl explain pod.spec
kubectl run shell --rm -it --image=busybox:1.36 --restart=Never -- sh