Kubernetes / kubectl 速查表

所有工具

免费

可搜索、可打印的 kubectl 参考——上下文、pod、deployment、service、配置和 secret、扩缩容以及故障排查。免费。

kubectl basics

kubectl get pods

List pods in current namespace

kubectl get pods -o wide

Pods with node and IP details

kubectl get all

Pods, services, deployments...

kubectl describe pod my-pod

Full details + recent events

kubectl logs my-pod

Container stdout logs

kubectl logs -f my-pod

Stream logs (follow)

kubectl logs my-pod -c sidecar

Logs of a specific container

kubectl logs my-pod --previous

Logs from the crashed run

kubectl exec -it my-pod -- sh

Interactive shell in a pod

kubectl exec my-pod -- env

Run one command in a pod

kubectl get pod my-pod -o yaml

Live manifest as YAML

kubectl explain deployment.spec

Built-in field documentation

kubectl api-resources

All resource types + short names

Contexts & namespaces

kubectl config get-contexts

List configured clusters

kubectl config current-context

Show the active context

kubectl config use-context prod

Switch cluster/context

kubectl get namespaces

List namespaces

kubectl get pods -n kube-system

Target one namespace

kubectl get pods -A

All namespaces

kubectl config set-context --current --namespace=dev

Set default namespace

kubectl create namespace staging

Create a namespace

kubectl delete namespace staging

Delete namespace + contents

kubectl config view --minify

Active context config only

export KUBECONFIG=~/.kube/other-config

Use an alternate kubeconfig

Creating & applying resources

kubectl apply -f app.yaml

Create or update from a file

kubectl apply -f ./manifests/

Apply a whole directory

kubectl apply -k ./overlays/prod

Apply with kustomize

kubectl delete -f app.yaml

Delete what a file created

kubectl create deployment web --image=nginx

Quick deployment (imperative)

kubectl run tmp --image=busybox -it --rm -- sh

Throwaway interactive pod

--dry-run=client -o yaml

Generate YAML without creating

kubectl diff -f app.yaml

Preview changes before apply

kubectl edit deployment web

Edit a live resource in $EDITOR

kubectl patch deploy web -p '{"spec":{"replicas":3}}'

Patch a single field

kubectl label pod my-pod env=prod

Add a label

kubectl annotate pod my-pod note="checked"

Add an annotation

Pods & debugging

kubectl get pods -w

Watch pod status live

kubectl get pods -l app=web

Filter by label selector

kubectl get events --sort-by=.lastTimestamp

Recent cluster events

kubectl top pods

CPU / memory per pod

kubectl port-forward pod/my-pod 8080:80

Tunnel a pod port locally

kubectl cp my-pod:/var/log/app.log ./app.log

Copy files from a pod

kubectl debug my-pod -it --image=busybox

Attach an ephemeral container

kubectl debug node/my-node -it --image=busybox

Debug pod on a node

kubectl delete pod my-pod

Delete (controller recreates)

kubectl delete pod my-pod --grace-period=0 --force

Force-kill a stuck pod

kubectl get pod my-pod -o jsonpath='{.status.phase}'

Extract one field (jsonpath)

CrashLoopBackOff

Check logs --previous + probes

ImagePullBackOff

Check image name / registry auth

Deployments & rollouts

kubectl get deployments

List deployments

kubectl set image deploy/web web=nginx:1.27

Update the container image

kubectl rollout status deploy/web

Wait for rollout to finish

kubectl rollout history deploy/web

List past revisions

kubectl rollout undo deploy/web

Roll back to previous version

kubectl rollout undo deploy/web --to-revision=2

Roll back to a revision

kubectl rollout restart deploy/web

Restart all pods (new config)

kubectl rollout pause deploy/web

Pause a rollout

kubectl rollout resume deploy/web

Resume a paused rollout

kubectl scale deploy/web --replicas=5

Scale replica count

maxSurge: 1, maxUnavailable: 0

Zero-downtime rolling update

kubectl get rs

ReplicaSets behind deployments

Services & networking

kubectl get svc

List services

kubectl expose deploy/web --port=80 --target-port=8080

Create a service for a deploy

type: ClusterIP

Internal-only virtual IP (default)

type: NodePort

Expose on every node (30000+)

type: LoadBalancer

Cloud external load balancer

kubectl get endpoints web

Pods actually behind a service

kubectl port-forward svc/web 8080:80

Tunnel a service locally

kubectl get ingress

List ingress rules

web.default.svc.cluster.local

In-cluster DNS name format

kubectl run curl --image=curlimages/curl -it --rm -- sh

Test connectivity in-cluster

kubectl get networkpolicies

List traffic restrictions

sessionAffinity: ClientIP

Sticky sessions on a service

Config & secrets

kubectl create configmap app-cfg --from-literal=ENV=prod

ConfigMap from key=value

kubectl create configmap app-cfg --from-file=config.ini

ConfigMap from a file

kubectl create secret generic db --from-literal=pass=s3cret

Secret from key=value

kubectl get secret db -o jsonpath='{.data.pass}' | base64 -d

Decode a secret value

envFrom:
- configMapRef:
    name: app-cfg

Inject all keys as env vars

env:
- name: DB_PASS
  valueFrom:
    secretKeyRef:
      name: db
      key: pass

Inject one secret as env var

volumes:
- name: cfg
  configMap:
    name: app-cfg

Mount a ConfigMap as files

kubectl create secret tls web-tls --cert=tls.crt --key=tls.key

TLS secret for ingress

kubectl create secret docker-registry regcred --docker-server=...

Private registry pull secret

imagePullSecrets: [{name: regcred}]

Use the pull secret in a pod

kubectl rollout restart deploy/web

Pick up changed config/secret

Scaling & autoscaling

kubectl scale deploy/web --replicas=10

Manual scaling

kubectl autoscale deploy/web --min=2 --max=10 --cpu-percent=70

Create an HPA

kubectl get hpa

Autoscaler status + targets

resources:
  requests:
    cpu: 100m
    memory: 128Mi

Requests: scheduling baseline

resources:
  limits:
    cpu: 500m
    memory: 256Mi

Limits: hard caps (OOMKill)

cpu: 100m

m = millicores (0.1 CPU)

kubectl top pods --sort-by=memory

Find the memory hogs

OOMKilled (exit code 137)

Pod exceeded its memory limit

kubectl get pdb

PodDisruptionBudgets

minAvailable: 1

PDB: keep pods during drains

kubectl scale deploy/web --replicas=0

Stop an app without deleting

Nodes & cluster admin

kubectl get nodes

List cluster nodes

kubectl describe node my-node

Capacity, allocations, taints

kubectl top nodes

CPU / memory per node

kubectl cordon my-node

Stop scheduling onto a node

kubectl drain my-node --ignore-daemonsets

Evict pods for maintenance

kubectl uncordon my-node

Allow scheduling again

kubectl taint nodes my-node key=value:NoSchedule

Repel pods without toleration

nodeSelector: { disktype: ssd }

Pin pods to labeled nodes

kubectl cluster-info

API server / DNS endpoints

kubectl version

Client and server versions

kubectl auth can-i delete pods

Check your RBAC permissions

kubectl get componentstatuses

Control plane health (legacy)

YAML manifest skeletons

apiVersion: apps/v1
kind: Deployment
metadata:
  name: web
spec:
  replicas: 3
  selector:
    matchLabels:
      app: web
  template:
    metadata:
      labels:
        app: web
    spec:
      containers:
      - name: web
        image: nginx:1.27
        ports:
        - containerPort: 80

Minimal Deployment

apiVersion: v1
kind: Service
metadata:
  name: web
spec:
  selector:
    app: web
  ports:
  - port: 80
    targetPort: 80

Minimal ClusterIP Service

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: web
spec:
  rules:
  - host: example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: web
            port:
              number: 80

Minimal Ingress

apiVersion: v1
kind: ConfigMap
metadata:
  name: app-cfg
data:
  APP_ENV: production

Minimal ConfigMap

livenessProbe:
  httpGet:
    path: /healthz
    port: 80
  initialDelaySeconds: 10

Liveness probe (restart if dead)

readinessProbe:
  httpGet:
    path: /ready
    port: 80

Readiness probe (gate traffic)

apiVersion: batch/v1
kind: CronJob
metadata:
  name: cleanup
spec:
  schedule: "0 3 * * *"
  jobTemplate:
    spec:
      template:
        spec:
          containers:
          - name: job
            image: busybox
            command: ["sh", "-c", "echo run"]
          restartPolicy: OnFailure

Minimal CronJob

securityContext:
  runAsNonRoot: true
  readOnlyRootFilesystem: true

Container hardening basics

# kubectl create deploy web --image=nginx --dry-run=client -o yaml

Generate any skeleton fast

Troubleshooting one-liners

kubectl get pods -A | grep -v Running

Every unhealthy pod in cluster

kubectl get events -A --sort-by=.lastTimestamp | tail -20

Latest events, all namespaces

kubectl describe pod my-pod | grep -A5 Events

Jump straight to pod events

kubectl logs -l app=web --tail=50

Recent logs across all replicas

kubectl get pods --field-selector=status.phase=Failed

List failed pods

kubectl delete pods --field-selector=status.phase=Succeeded

Clean up completed pods

kubectl get pods -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.phase}{"\n"}{end}'

Custom name + phase table

kubectl get deploy web -o jsonpath='{.spec.template.spec.containers[0].image}'

Which image is deployed?

kubectl rollout status deploy/web --timeout=120s

Fail CI if rollout hangs

kubectl exec -it my-pod -- nslookup web

Test in-cluster DNS

kubectl get pod my-pod -o yaml | grep -A5 lastState

Why did it restart?

kubectl api-resources --verbs=list -o name | xargs -n1 kubectl get -n dev

Everything in a namespace

watch kubectl get pods

Poor man's live dashboard

没有条目匹配“:q”。

关于 Kubernetes / kubectl 速查表

这份 Kubernetes 速查表将 kubectl 命令汇集在一个可搜索的页面上：kubectl 基础、上下文和命名空间、创建和应用资源、Pod 和调试、Deployment 和回滚、Service 和网络、ConfigMap 和 Secret、扩缩容和自动扩缩、节点和集群管理、YAML 清单模板，以及故障排查命令。

它围绕你在紧急情况下运行的命令构建——describe 一个不断崩溃重启的 Pod、从上一个容器拉取日志、exec 进入运行中的容器、回滚一个 Deployment、端口转发一个 Service——标志都已写明，无需查阅 kubectl --help。

与本系列的其他速查表一样，它免费且在客户端运行：使用搜索框实时过滤行，通过固定目录在章节间跳转，点击即可复制任何命令，还可以打印页面作为终端旁的参考。

如何使用 Kubernetes / kubectl 速查表

打开速查表，浏览各章节，从“kubectl 基础”到“故障排查命令”。
搜索关键词如 logs、rollout 或 port-forward 以实时过滤每一行。
需要一个起始的 Deployment、Service 或 ConfigMap 时跳转到“YAML 清单模板”。
点击命令或其复制图标，直接复制到终端中执行。
使用打印功能获取完整 kubectl 参考的纸质版。

常见问题

十一个章节：kubectl 基础、上下文和命名空间、创建和应用资源、Pod 和调试、Deployment 和回滚、Service 和网络、ConfigMap 和 Secret、扩缩容和自动扩缩、节点和集群管理、YAML 清单模板，以及故障排查命令。

可以。Pod 和调试章节涵盖了 describe、带 --previous 和 -f 的 logs、exec、按时间排序的 events，以及临时调试容器。

专门的章节提供了 Deployment、Service、ConfigMap、Secret、Ingress 和 Job 的最简模板——足够复制后填充使用。

可以。点击任意行或其复制图标，kubectl 命令即可立即复制。

是的，完全免费，在浏览器中运行，无需登录。

Kubernetes / kubectl 速查表

kubectl basics

Contexts & namespaces

Creating & applying resources

Pods & debugging

Deployments & rollouts

Services & networking

Config & secrets

Scaling & autoscaling

Nodes & cluster admin

YAML manifest skeletons

Troubleshooting one-liners

关于 Kubernetes / kubectl 速查表

如何使用 Kubernetes / kubectl 速查表

常见问题

Kubernetes 速查表包含哪些内容？

它能帮助调试出问题的 Pod 吗？

有 YAML 清单示例吗？

可以一键复制命令吗？

Kubernetes 参考是免费的吗？

相关工具

热门搜索

嵌入此工具