쿠버네티스 / kubectl 치트시트
검색과 인쇄가 가능한 kubectl 참고자료입니다: context, 파드, 디플로이먼트, 서비스, 설정과 시크릿, 스케일링, 문제 해결까지. 무료입니다.
kubectl basics
13kubectl get pods
List pods in current namespace
kubectl get pods -o wide
Pods with node and IP details
kubectl get all
Pods, services, deployments...
kubectl describe pod my-pod
Full details + recent events
kubectl logs my-pod
Container stdout logs
kubectl logs -f my-pod
Stream logs (follow)
kubectl logs my-pod -c sidecar
Logs of a specific container
kubectl logs my-pod --previous
Logs from the crashed run
kubectl exec -it my-pod -- sh
Interactive shell in a pod
kubectl exec my-pod -- env
Run one command in a pod
kubectl get pod my-pod -o yaml
Live manifest as YAML
kubectl explain deployment.spec
Built-in field documentation
kubectl api-resources
All resource types + short names
Contexts & namespaces
11kubectl config get-contexts
List configured clusters
kubectl config current-context
Show the active context
kubectl config use-context prod
Switch cluster/context
kubectl get namespaces
List namespaces
kubectl get pods -n kube-system
Target one namespace
kubectl get pods -A
All namespaces
kubectl config set-context --current --namespace=dev
Set default namespace
kubectl create namespace staging
Create a namespace
kubectl delete namespace staging
Delete namespace + contents
kubectl config view --minify
Active context config only
export KUBECONFIG=~/.kube/other-config
Use an alternate kubeconfig
Creating & applying resources
12kubectl apply -f app.yaml
Create or update from a file
kubectl apply -f ./manifests/
Apply a whole directory
kubectl apply -k ./overlays/prod
Apply with kustomize
kubectl delete -f app.yaml
Delete what a file created
kubectl create deployment web --image=nginx
Quick deployment (imperative)
kubectl run tmp --image=busybox -it --rm -- sh
Throwaway interactive pod
--dry-run=client -o yaml
Generate YAML without creating
kubectl diff -f app.yaml
Preview changes before apply
kubectl edit deployment web
Edit a live resource in $EDITOR
kubectl patch deploy web -p '{"spec":{"replicas":3}}'
Patch a single field
kubectl label pod my-pod env=prod
Add a label
kubectl annotate pod my-pod note="checked"
Add an annotation
Pods & debugging
13kubectl get pods -w
Watch pod status live
kubectl get pods -l app=web
Filter by label selector
kubectl get events --sort-by=.lastTimestamp
Recent cluster events
kubectl top pods
CPU / memory per pod
kubectl port-forward pod/my-pod 8080:80
Tunnel a pod port locally
kubectl cp my-pod:/var/log/app.log ./app.log
Copy files from a pod
kubectl debug my-pod -it --image=busybox
Attach an ephemeral container
kubectl debug node/my-node -it --image=busybox
Debug pod on a node
kubectl delete pod my-pod
Delete (controller recreates)
kubectl delete pod my-pod --grace-period=0 --force
Force-kill a stuck pod
kubectl get pod my-pod -o jsonpath='{.status.phase}'
Extract one field (jsonpath)
CrashLoopBackOff
Check logs --previous + probes
ImagePullBackOff
Check image name / registry auth
Deployments & rollouts
12kubectl get deployments
List deployments
kubectl set image deploy/web web=nginx:1.27
Update the container image
kubectl rollout status deploy/web
Wait for rollout to finish
kubectl rollout history deploy/web
List past revisions
kubectl rollout undo deploy/web
Roll back to previous version
kubectl rollout undo deploy/web --to-revision=2
Roll back to a revision
kubectl rollout restart deploy/web
Restart all pods (new config)
kubectl rollout pause deploy/web
Pause a rollout
kubectl rollout resume deploy/web
Resume a paused rollout
kubectl scale deploy/web --replicas=5
Scale replica count
maxSurge: 1, maxUnavailable: 0
Zero-downtime rolling update
kubectl get rs
ReplicaSets behind deployments
Services & networking
12kubectl get svc
List services
kubectl expose deploy/web --port=80 --target-port=8080
Create a service for a deploy
type: ClusterIP
Internal-only virtual IP (default)
type: NodePort
Expose on every node (30000+)
type: LoadBalancer
Cloud external load balancer
kubectl get endpoints web
Pods actually behind a service
kubectl port-forward svc/web 8080:80
Tunnel a service locally
kubectl get ingress
List ingress rules
web.default.svc.cluster.local
In-cluster DNS name format
kubectl run curl --image=curlimages/curl -it --rm -- sh
Test connectivity in-cluster
kubectl get networkpolicies
List traffic restrictions
sessionAffinity: ClientIP
Sticky sessions on a service
Config & secrets
11kubectl create configmap app-cfg --from-literal=ENV=prod
ConfigMap from key=value
kubectl create configmap app-cfg --from-file=config.ini
ConfigMap from a file
kubectl create secret generic db --from-literal=pass=s3cret
Secret from key=value
kubectl get secret db -o jsonpath='{.data.pass}' | base64 -d
Decode a secret value
envFrom:
- configMapRef:
name: app-cfg
Inject all keys as env vars
env:
- name: DB_PASS
valueFrom:
secretKeyRef:
name: db
key: pass
Inject one secret as env var
volumes:
- name: cfg
configMap:
name: app-cfg
Mount a ConfigMap as files
kubectl create secret tls web-tls --cert=tls.crt --key=tls.key
TLS secret for ingress
kubectl create secret docker-registry regcred --docker-server=...
Private registry pull secret
imagePullSecrets: [{name: regcred}]
Use the pull secret in a pod
kubectl rollout restart deploy/web
Pick up changed config/secret
Scaling & autoscaling
11kubectl scale deploy/web --replicas=10
Manual scaling
kubectl autoscale deploy/web --min=2 --max=10 --cpu-percent=70
Create an HPA
kubectl get hpa
Autoscaler status + targets
resources:
requests:
cpu: 100m
memory: 128Mi
Requests: scheduling baseline
resources:
limits:
cpu: 500m
memory: 256Mi
Limits: hard caps (OOMKill)
cpu: 100m
m = millicores (0.1 CPU)
kubectl top pods --sort-by=memory
Find the memory hogs
OOMKilled (exit code 137)
Pod exceeded its memory limit
kubectl get pdb
PodDisruptionBudgets
minAvailable: 1
PDB: keep pods during drains
kubectl scale deploy/web --replicas=0
Stop an app without deleting
Nodes & cluster admin
12kubectl get nodes
List cluster nodes
kubectl describe node my-node
Capacity, allocations, taints
kubectl top nodes
CPU / memory per node
kubectl cordon my-node
Stop scheduling onto a node
kubectl drain my-node --ignore-daemonsets
Evict pods for maintenance
kubectl uncordon my-node
Allow scheduling again
kubectl taint nodes my-node key=value:NoSchedule
Repel pods without toleration
nodeSelector: { disktype: ssd }
Pin pods to labeled nodes
kubectl cluster-info
API server / DNS endpoints
kubectl version
Client and server versions
kubectl auth can-i delete pods
Check your RBAC permissions
kubectl get componentstatuses
Control plane health (legacy)
YAML manifest skeletons
9apiVersion: apps/v1
kind: Deployment
metadata:
name: web
spec:
replicas: 3
selector:
matchLabels:
app: web
template:
metadata:
labels:
app: web
spec:
containers:
- name: web
image: nginx:1.27
ports:
- containerPort: 80
Minimal Deployment
apiVersion: v1
kind: Service
metadata:
name: web
spec:
selector:
app: web
ports:
- port: 80
targetPort: 80
Minimal ClusterIP Service
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: web
spec:
rules:
- host: example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: web
port:
number: 80
Minimal Ingress
apiVersion: v1
kind: ConfigMap
metadata:
name: app-cfg
data:
APP_ENV: production
Minimal ConfigMap
livenessProbe:
httpGet:
path: /healthz
port: 80
initialDelaySeconds: 10
Liveness probe (restart if dead)
readinessProbe:
httpGet:
path: /ready
port: 80
Readiness probe (gate traffic)
apiVersion: batch/v1
kind: CronJob
metadata:
name: cleanup
spec:
schedule: "0 3 * * *"
jobTemplate:
spec:
template:
spec:
containers:
- name: job
image: busybox
command: ["sh", "-c", "echo run"]
restartPolicy: OnFailure
Minimal CronJob
securityContext:
runAsNonRoot: true
readOnlyRootFilesystem: true
Container hardening basics
# kubectl create deploy web --image=nginx --dry-run=client -o yaml
Generate any skeleton fast
Troubleshooting one-liners
13kubectl get pods -A | grep -v Running
Every unhealthy pod in cluster
kubectl get events -A --sort-by=.lastTimestamp | tail -20
Latest events, all namespaces
kubectl describe pod my-pod | grep -A5 Events
Jump straight to pod events
kubectl logs -l app=web --tail=50
Recent logs across all replicas
kubectl get pods --field-selector=status.phase=Failed
List failed pods
kubectl delete pods --field-selector=status.phase=Succeeded
Clean up completed pods
kubectl get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.phase}{"\n"}{end}'
Custom name + phase table
kubectl get deploy web -o jsonpath='{.spec.template.spec.containers[0].image}'
Which image is deployed?
kubectl rollout status deploy/web --timeout=120s
Fail CI if rollout hangs
kubectl exec -it my-pod -- nslookup web
Test in-cluster DNS
kubectl get pod my-pod -o yaml | grep -A5 lastState
Why did it restart?
kubectl api-resources --verbs=list -o name | xargs -n1 kubectl get -n dev
Everything in a namespace
watch kubectl get pods
Poor man's live dashboard
“:q”와 일치하는 항목이 없습니다.
쿠버네티스 / kubectl 치트시트 소개
이 쿠버네티스 치트시트는 kubectl을 검색 가능한 한 페이지에 담았습니다: kubectl 기초, context와 네임스페이스, 리소스 생성과 적용, 파드와 디버깅, 디플로이먼트와 롤아웃, 서비스와 네트워킹, 설정과 시크릿, 스케일링과 오토스케일링, 노드와 클러스터 관리, YAML 매니페스트 기본 골격, 그리고 문제 해결용 한 줄 명령어까지 다룹니다.
위기 상황에서 실행하게 되는 명령어를 중심으로 구성되어 있습니다: 크래시 루프에 빠진 파드를 describe하기, 이전 컨테이너의 로그를 tail하기, 실행 중인 컨테이너에 exec로 접속하기, 디플로이먼트 롤백하기, 서비스 포트포워딩하기 등을 kubectl --help에만 맡기지 않고 플래그까지 자세히 풀어서 보여줍니다.
이 그룹의 다른 치트시트와 마찬가지로 무료이며 클라이언트 측에서 동작합니다: 검색창으로 실시간으로 행을 필터링하고, 고정된 목차로 섹션을 이동하고, 클릭 한 번으로 명령어를 복사하고, 터미널 옆에서 참고할 수 있도록 페이지를 인쇄할 수 있습니다.
쿠버네티스 / kubectl 치트시트 사용 방법
- 시트를 열고 kubectl 기초부터 문제 해결용 한 줄 명령어까지 섹션을 검토하세요.
- logs, rollout, port-forward 같은 키워드를 검색해 모든 행을 실시간으로 필터링하세요.
- Deployment, Service, ConfigMap의 시작 예제가 필요할 때는 YAML 매니페스트 기본 골격 섹션으로 이동하세요.
- 명령어나 복사 아이콘을 클릭해 터미널에 바로 복사하세요.
- 전체 kubectl 참고자료를 종이로 보려면 인쇄를 사용하세요.
자주 묻는 질문
11개 섹션입니다: kubectl 기초, context와 네임스페이스, 리소스 생성과 적용, 파드와 디버깅, 디플로이먼트와 롤아웃, 서비스와 네트워킹, 설정과 시크릿, 스케일링과 오토스케일링, 노드와 클러스터 관리, YAML 매니페스트 기본 골격, 문제 해결용 한 줄 명령어입니다.
네. 파드와 디버깅 섹션에서 describe, --previous와 -f 옵션이 있는 logs, exec, 타임스탬프순으로 정렬된 events, 그리고 임시 디버그 컨테이너를 다룹니다.
전용 섹션에 Deployment, Service, ConfigMap, Secret, Ingress, Job의 최소 골격이 담겨 있어 그대로 복사해 채워 넣을 수 있습니다.
네. 어떤 행이든 클릭하거나 복사 아이콘을 클릭하면 kubectl 명령어가 바로 복사됩니다.
네, 완전히 무료이며 로그인 없이 브라우저에서 실행됩니다.
인기 검색어
kubectl 치트시트
쿠버네티스 치트시트
kubectl 명령어
kubectl get pods
쿠버네티스 yaml 예시
kubectl 파드 디버깅
쿠버네티스 명령어 목록
도움이 필요하신가요?
이 도구에서 문제를 발견하셨나요? 저희 팀에 알려주세요.