Эта страница генерируется автоматически, информация доступна только на английском языке.
d8 controls the Deckhouse Kubernetes Platform
Common options:
--help
,-h
help for d8--version
,-v
version for d8
d8 backup
Backup various parts of Deckhouse Kubernetes Platform
Options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup cluster-config
Usage:d8 backup cluster-config <backup-tarball-path> [options]
Take a snapshot of cluster configuration
Options
--compress
,-c
Compress result file
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup etcd
Usage:d8 backup etcd <snapshot-path> [options]
Take a snapshot of ETCD state
Options
--etcd-pod
,-p
Name of the etcd pod to snapshot from. (optional)--verbose
Verbose log output.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup loki
Usage:d8 backup loki [options]
Dump logs from Loki api.
Options
--days
Limit maximum number of days in range to output per queue from Loki. (Default 5 maximum number of days in range per queue.)--end
Set end timestamp range to dump logs from Loki. (Default get max end timestamp from Loki, ex. "2025-01-14 15:04:05".)--limit
Limit the number of lines to output per queue from Loki. (Default 5000 max limit strings per queue.)--start
Set start timestamp range to dump logs from Loki. (Default get max start timestamp from Loki, ex. "2025-01-12 15:04:05".)
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 completion
Generate the autocompletion script for the specified shell
d8 completion bash
Usage:d8 completion bash [options]
Generate the autocompletion script for bash
Options
--no-descriptions
disable completion descriptions
d8 completion fish
Usage:d8 completion fish [options]
Generate the autocompletion script for fish
Options
--no-descriptions
disable completion descriptions
d8 completion powershell
Usage:d8 completion powershell [options]
Generate the autocompletion script for powershell
Options
--no-descriptions
disable completion descriptions
d8 completion zsh
Usage:d8 completion zsh [options]
Generate the autocompletion script for zsh
Options
--no-descriptions
disable completion descriptions
d8 dk
A set of tools for building, distributing, and deploying containerized applications
d8 dk build
Usage:d8 dk build [IMAGE_NAME...] [options]
Build images
Options
--add-custom-tag
Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-path
Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--save-build-report
Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk bundle
Usage:d8 dk bundle [options]
Work with werf bundles: publish bundles into container registry and deploy bundles into Kubernetes cluster
d8 dk bundle apply
Usage:d8 dk bundle apply [options]
Apply bundle into Kubernetes
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomic
Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback
,-R
Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--deploy-graph-path
Save deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-path
Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--env
Use specified environment (default $WERF_ENV)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependencies
Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
Use specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelism
Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default $WERF_RELEASE)--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--rollback-graph-path
Save rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-deploy-report
Save deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-value
Shortcut to set current docker config into the .Values.dockerconfigjson--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh
,-L
Do not refresh helm chart repositories locally cached index--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tag
Provide exact tag version or semver-based pattern, werf will install or upgrade to the latest version of the specified bundle ($WERF_TAG or latest by default)--timeout
,-t
Resources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk bundle copy
Usage:d8 dk bundle copy [options]
Copy published bundle into another location
Options
--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repos--from
Source address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--helm-compatible-chart
,-C
Set chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default true or $WERF_HELM_COMPATIBLE_CHART.--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--rename-chart
Force setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--to
Destination address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk bundle publish
Usage:d8 dk bundle publish [IMAGE_NAME...] [options]
Publish bundle
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tag
Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-path
Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-values
Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-values
Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--helm-compatible-chart
,-C
Set chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default false or $WERF_HELM_COMPATIBLE_CHART.--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--rename-chart
Force setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-report
Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh
,-L
Do not refresh helm chart repositories locally cached index--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tag
Publish bundle into container registry repo by the provided tag ($WERF_TAG or latest by default)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tag
Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk bundle render
Usage:d8 dk bundle render [options]
Render Kubernetes manifests from bundle
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--bundle-dir
,-b
Get extracted bundle from directory instead of registry (default $WERF_BUNDLE_DIR)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--disable-default-secret-values
Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--env
Use specified environment (default $WERF_ENV)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crds
Include CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependencies
Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-version
Set specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
Use specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelism
Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--output
Write render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default $WERF_RELEASE)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-value
Shortcut to set current docker config into the .Values.dockerconfigjson--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tag
Provide exact tag version or semver-based pattern, werf will render the latest version of the specified bundle ($WERF_TAG or latest by default)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--validate
Validate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk ci-env
Usage:d8 dk ci-env CI_SYSTEM [options]
Generate werf environment variables for specified CI system
Options
--as-env-file
Create the .env file and print the path for sourcing (default $WERF_AS_ENV_FILE).--as-file
Create the script and print the path for sourcing (default $WERF_AS_FILE).--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command will copy specified or default (~/.docker) config to the temporary directory and may perform additional login with new config.--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--login-to-registry
Log in to CI-specific registry automatically if possible (default $WERF_LOGIN_TO_REGISTRY).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to custom file (default $WERF_OUTPUT_FILE_PATH).--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--shell
Set to cmdexe, powershell or use the default behaviour that is compatible with any unix shell (default $WERF_SHELL).--tagging-strategy
stub--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk cleanup
Usage:d8 dk cleanup [options]
Cleanup project images in the container registry
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and delete images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--keep-stages-built-within-last-n-hours
Keep stages that were built within last hours (default $WERF_KEEP_STAGES_BUILT_WITHIN_LAST_N_HOURS or 2)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Scan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--scan-context-namespace-only
Scan for used images only in namespace linked with context for each available context in kube-config (or only for the context specified with option --kube-context). When disabled will scan all namespaces in all contexts (or only for the context specified with option --kube-context). (Default $WERF_SCAN_CONTEXT_NAMESPACE_ONLY)--scan-context-only
Scan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--without-kube
Do not skip deployed Kubernetes images (default $WERF_WITHOUT_KUBE)
d8 dk completion
Usage:d8 dk completion [options]
Generate bash completion scripts
Options
--shell
Set to bash, zsh, fish or powershell (default $WERF_SHELL or bash)
d8 dk compose
Usage:d8 dk compose [options]
Work with docker-compose
d8 dk compose config
Usage:d8 dk compose config [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]
Run docker-compose config command with forwarded image names.
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-path
DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-options
Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-options
Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose down
Usage:d8 dk compose down [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]
Run docker-compose down command with forwarded image names.
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-path
DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-options
Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-options
Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose run
Usage:d8 dk compose run [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] -- SERVICE [COMMAND] [ARGS...]
Run docker-compose run command with forwarded image names.
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-path
DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-options
Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-options
Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose up
Usage:d8 dk compose up [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] [--] [SERVICE...]
Run docker-compose up command with forwarded image names.
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-path
DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-options
Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-options
Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk config
Usage:d8 dk config [options]
Work with werf.yaml
d8 dk config graph
Usage:d8 dk config graph [IMAGE_NAME...] [options]
Print dependency graph for images in werf.yaml.
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk config list
Usage:d8 dk config list [options]
List image and artifact names defined in werf.yaml.
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--env
Use specified environment (default $WERF_ENV)--final-images-only
Show only final images--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--images-only
Show only final images--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk config render
Usage:d8 dk config render [IMAGE_NAME...] [options]
Render werf.yaml.
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk converge
Usage:d8 dk converge [options]
Build and push images, then deploy application into Kubernetes
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tag
Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--atomic
Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback
,-R
Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--build-report-path
Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--deploy-graph-path
Save deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-path
Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-values
Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-values
Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelism
Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rollback-graph-path
Save rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-build-report
Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--save-deploy-report
Save deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-value
Shortcut to set current docker config into the .Values.dockerconfigjson--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh
,-L
Do not refresh helm chart repositories locally cached index--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout
,-t
Resources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tag
Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk cr
Usage:d8 dk cr [options]
Work with container registry: authenticate, list and remove images, etc.
d8 dk cr login
Usage:d8 dk cr login registry [options]
Login into remote registry.
Options
--debug
Enable debug (default $WERF_DEBUG).--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--password
,-p
Use specified password for login (default $WERF_PASSWORD)--password-stdin
Read password from stdin for login (default $WERF_PASSWORD_STDIN)--quiet
Disable explanatory output (default $WERF_QUIET).--username
,-u
Use specified username for login (default $WERF_USERNAME)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk cr logout
Usage:d8 dk cr logout registry [options]
Logout from a remote registry.
Options
--debug
Enable debug (default $WERF_DEBUG).--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--quiet
Disable explanatory output (default $WERF_QUIET).--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk dismiss
Usage:d8 dk dismiss [options]
Delete werf release from Kubernetes
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--deploy-report-path
Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-deploy-report
Use deploy report, previously saved with --save-deploy-report (by default $WERF_USE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--verbose
Enable verbose output (default $WERF_VERBOSE).--with-hooks
Delete Helm Release hooks getting from existing revisions (default $WERF_WITH_HOOKS or true)--with-namespace
Delete Kubernetes Namespace after purging Helm Release (default $WERF_WITH_NAMESPACE)
d8 dk export
Usage:d8 dk export [IMAGE_NAME...] [options]
Export images
Options
--add-label
Add label to exported images (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_EXPORT_ADD_LABEL_* (e.g. $WERF_EXPORT_ADD_LABEL_1=labelName1=labelValue1, $WERF_EXPORT_ADD_LABEL_2=labelName2=labelValue2)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tag
Set a tag template (can specify multiple). It is necessary to use image name shortcut %image% or %image_slug% if multiple images are exported (e.g. REPO:TAG-%image% or REPO-%image%:TAG)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk helm
Usage:d8 dk helm [options]
Manage application deployment with helm
Options
--debug
Enable debug (default $WERF_DEBUG).--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependencies
Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm create
Usage:d8 dk helm create NAME [options]
create a new chart with the given name
Options
--starter
,-p
the name or absolute path to Helm starter scaffold
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency
Usage:d8 dk helm dependency update|build|list [options]
manage a chart's dependencies
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency build
Usage:d8 dk helm dependency update|build|list build CHART [options]
rebuild the charts/ directory based on the Chart.lock file
Options
--keyring
keyring containing public keys--skip-refresh
do not refresh the local repository cache--verify
verify the packages against signatures
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency list
Usage:d8 dk helm dependency update|build|list list CHART [options]
list the dependencies for the given chart
Options
--max-col-width
maximum column width for output table
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency update
Usage:d8 dk helm dependency update|build|list update CHART [options]
update charts/ based on the contents of Chart.yaml
Options
--keyring
keyring containing public keys--skip-refresh
do not refresh the local repository cache--verify
verify the packages against signatures
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm env
Usage:d8 dk helm env [options]
helm client environment information
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get
Usage:d8 dk helm get [options]
download extended information of a named release
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get all
Usage:d8 dk helm get all RELEASE_NAME [options]
download all information for a named release
Options
--revision
get the named release with revision--template
go template for formatting the output, eg: {{.Release.Name}}
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get hooks
Usage:d8 dk helm get hooks RELEASE_NAME [options]
download all hooks for a named release
Options
--revision
get the named release with revision
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get manifest
Usage:d8 dk helm get manifest RELEASE_NAME [options]
download the manifest for a named release
Options
--revision
get the named release with revision
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get metadata
Usage:d8 dk helm get metadata RELEASE_NAME [options]
This command fetches metadata for a given release
Options
--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--revision
specify release revision
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get notes
Usage:d8 dk helm get notes RELEASE_NAME [options]
download the notes for a named release
Options
--revision
get the named release with revision
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get values
Usage:d8 dk helm get values RELEASE_NAME [options]
download the values file for a named release
Options
--all
,-a
dump all (computed) values--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--revision
get the named release with revision
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm get-autogenerated-values
Usage:d8 dk helm get-autogenerated-values [IMAGE_NAME...] [options]
Get service values yaml generated by werf for helm chart during deploy
Options
--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tag
Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm get-namespace
Usage:d8 dk helm get-namespace [options]
Print Kubernetes Namespace that will be used in current configuration with specified params.
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm get-release
Usage:d8 dk helm get-release [options]
Print Helm Release name that will be used in current configuration with specified params.
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm history
Usage:d8 dk helm history RELEASE_NAME [options]
fetch release history
Options
--max
maximum number of revision to include in history--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm install
Usage:d8 dk helm install [NAME] [CHART] [options]
install a chart
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomic
if set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--cleanup-on-fail
allow deletion of new resources created in this installation when install fails--create-namespace
create the release namespace if not present--dependency-update
update dependencies if they are missing before installing the chart--deploy-report-path
save deploy report in JSON to the specified path--description
add a custom description--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validation
if set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-run
simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dns
enable DNS lookups when rendering templates--force
force resource updates through a replacement strategy--generate-name
,-g
generate the name (and omit the NAME parameter)--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--labels
,-l
Labels that would be added to release metadata. Should be divided by comma.--name-template
specify template used to name the release--no-hooks
prevent hooks from running during install--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--post-renderer
the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-args
an argument to the post-renderer (can specify multiple)--render-subchart-notes
if set, render subchart notes along with the parent--replace
re-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repo
chart repository url where to locate the requested chart--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-file
set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-json
set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literal
set a literal STRING value on the command line--set-string
set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crds
if set, no CRDs will be installed. By default, CRDs are installed if not already present--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)--username
chart repository username where to locate the requested chart--values
,-f
specify values in a YAML file or a URL (can specify multiple)--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--wait
if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobs
if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm lint
Usage:d8 dk helm lint PATH [options]
examine a chart for possible issues
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--env
Use specified environment (default $WERF_ENV)--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--kube-version
Kubernetes version used for capabilities and deprecation checks--quiet
print only warnings and errors--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-file
set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-json
set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literal
set a literal STRING value on the command line--set-string
set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--strict
fail on lint warnings--values
,-f
specify values in a YAML file or a URL (can specify multiple)--with-subcharts
lint dependent charts
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm list
Usage:d8 dk helm list [options]
list releases
Options
--all
,-a
show all releases without any filter applied--all-namespaces
,-A
list releases across all namespaces--date
,-d
sort by release date--deployed
show deployed releases. If no other is specified, this will be automatically enabled--failed
show failed releases--filter
,-f
a regular expression (Perl compatible). Any releases that match the expression will be included in the results--max
,-m
maximum number of releases to fetch--no-headers
don't print headers when using the default output format--offset
next release index in the list, used to offset from start value--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--pending
show pending releases--reverse
,-r
reverse the sort order--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Works only for secret(default) and configmap storage backends.--short
,-q
output short (quiet) listing format--superseded
show superseded releases--time-format
format time using golang time formatter. Example: --time-format "2006-01-02 15:04:05Z0700"--uninstalled
show uninstalled releases (if 'helm uninstall --keep-history' was used)--uninstalling
show releases that are currently being uninstalled
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm package
Usage:d8 dk helm package [CHART_PATH] [...] [options]
package a chart directory into a chart archive
Options
--app-version
set the appVersion on the chart to this version--dependency-update
,-u
update dependencies from "Chart.yaml" to dir "charts/" before packaging--destination
,-d
location to write the chart.--key
name of the key to use when signing. Used if --sign is true--keyring
location of a public keyring--passphrase-file
location of a file which contains the passphrase for the signing key. Use "-" in order to read from stdin.--sign
use a PGP private key to sign this package--version
set the version on the chart to this semver version
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin
Usage:d8 dk helm plugin [options]
install, list, or uninstall Helm plugins
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin install
Usage:d8 dk helm plugin install [options] <path|url>...
install one or more Helm plugins
Options
--version
specify a version constraint. If this is not specified, the latest version is installed
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin list
Usage:d8 dk helm plugin list [options]
list installed Helm plugins
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin uninstall
Usage:d8 dk helm plugin uninstall <plugin>... [options]
uninstall one or more Helm plugins
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin update
Usage:d8 dk helm plugin update <plugin>... [options]
update one or more Helm plugins
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm pull
Usage:d8 dk helm pull [chart URL | repo/chartname] [...] [options]
download a chart from a repository and (optionally) unpack it in local directory
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--destination
,-d
location to write the chart. If this and untardir are specified, untardir is appended to this--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored.--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--prov
fetch the provenance file, but don't perform verification--repo
chart repository url where to locate the requested chart--untar
if set to true, will untar the chart after downloading it--untardir
if untar is specified, this flag specifies the name of the directory into which the chart is expanded--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm registry
Usage:d8 dk helm registry [options]
login to or logout from a registry
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm registry login
Usage:d8 dk helm registry login [host] [options]
login to a registry
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify registry client using this SSL certificate file--insecure
allow connections to TLS registry without certs--key-file
identify registry client using this SSL key file--password
,-p
registry password or identity token--password-stdin
read password or identity token from stdin--username
,-u
registry username
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm registry logout
Usage:d8 dk helm registry logout [host] [options]
logout from a registry
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] [options]
add, list, remove, update, and index chart repositories
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo add
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] add [NAME] [URL] [options]
add a chart repository
Options
--allow-deprecated-repos
by default, this command will not allow adding official repos that have been permanently deleted. This disables that behavior--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--force-update
replace (overwrite) the repo if it already exists--insecure-skip-tls-verify
skip tls certificate checks for the repository--key-file
identify HTTPS client using this SSL key file--no-update
Ignored. Formerly, it would disabled forced updates. It is deprecated by force-update.--pass-credentials
pass credentials to all domains--password
chart repository password--password-stdin
read chart repository password from stdin--username
chart repository username
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo index
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] index [DIR] [options]
generate an index file given a directory containing packaged charts
Options
--json
output in JSON format--merge
merge the generated index into the given index--url
url of chart repository
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo list
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] list [options]
list chart repositories
Options
--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo remove
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] remove [REPO1 [REPO2 ...]] [options]
remove one or more chart repositories
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm repo update
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] update [REPO1 [REPO2 ...]] [options]
update information of available charts locally from chart repositories
Options
--fail-on-repo-update-fail
update fails if any of the repository updates fail
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm rollback
Usage:d8 dk helm rollback <RELEASE> [REVISION] [options]
roll back a release to a previous revision
Options
--cleanup-on-fail
allow deletion of new resources created in this rollback when rollback fails--deploy-report-path
save deploy report in JSON to the specified path--dry-run
simulate a rollback--force
force resource update through delete/recreate if needed--history-max
limit the maximum number of revisions saved per release. Use 0 for no limit--no-hooks
prevent hooks from running during rollback--recreate-pods
performs pods restart for the resource if applicable--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)--wait
if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobs
if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm search
Usage:d8 dk helm search [keyword] [options]
search for a keyword in charts
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm search hub
Usage:d8 dk helm search [keyword] hub [KEYWORD] [options]
search for charts in the Artifact Hub or your own hub instance
Options
--endpoint
Hub instance to query for charts--fail-on-no-result
search fails if no results are found--list-repo-url
print charts repository URL--max-col-width
maximum column width for output table--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm search repo
Usage:d8 dk helm search [keyword] repo [keyword] [options]
search repositories for a keyword in charts
Options
--devel
use development versions (alpha, beta, and release candidate releases), too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--fail-on-no-result
search fails if no results are found--max-col-width
maximum column width for output table--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--regexp
,-r
use regular expressions for searching repositories you have added--version
search using semantic versioning constraints on repositories you have added--versions
,-l
show the long listing, with each version of each chart on its own line, for repositories you have added
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm secret
Usage:d8 dk helm secret [options]
Work with secrets
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm secret decrypt
Usage:d8 dk helm secret decrypt [options]
Decrypt data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret encrypt
Usage:d8 dk helm secret encrypt [options]
Encrypt data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file
Usage:d8 dk helm secret file [options]
Work with secret files
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm secret file decrypt
Usage:d8 dk helm secret file decrypt [FILE_PATH] [options]
Decrypt secret file data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file edit
Usage:d8 dk helm secret file edit FILE_PATH [options]
Edit or create new secret file
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file encrypt
Usage:d8 dk helm secret file encrypt [FILE_PATH] [options]
Encrypt file data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret generate-secret-key
Usage:d8 dk helm secret generate-secret-key [options]
Generate hex encryption key
Options
--debug
Enable debug (default $WERF_DEBUG).--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--quiet
Disable explanatory output (default $WERF_QUIET).--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret rotate-secret-key
Usage:d8 dk helm secret rotate-secret-key [EXTRA_SECRET_VALUES_FILE_PATH...] [options]
Regenerate secret files with new secret key
Options
--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--env
Use specified environment (default $WERF_ENV)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values
Usage:d8 dk helm secret values [options]
Work with secret values files
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm secret values decrypt
Usage:d8 dk helm secret values decrypt [FILE_PATH] [options]
Decrypt secret values file data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values edit
Usage:d8 dk helm secret values edit FILE_PATH [options]
Edit or create new secret values file
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values encrypt
Usage:d8 dk helm secret values encrypt [FILE_PATH] [options]
Encrypt values file data
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--output-file-path
,-o
Write to file instead of stdout--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--namespace
,-n
namespace scope for this request--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm show
Usage:d8 dk helm show [options]
show information of a chart
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm show all
Usage:d8 dk helm show all [CHART] [options]
show all information of the chart
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--repo
chart repository url where to locate the requested chart--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm show chart
Usage:d8 dk helm show chart [CHART] [options]
show the chart's definition
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--repo
chart repository url where to locate the requested chart--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm show crds
Usage:d8 dk helm show crds [CHART] [options]
show the chart's CRDs
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--repo
chart repository url where to locate the requested chart--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm show readme
Usage:d8 dk helm show readme [CHART] [options]
show the chart's README
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verify
skip tls certificate checks for the chart download--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--repo
chart repository url where to locate the requested chart--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm show values
Usage:d8 dk helm show values [CHART] [options]
show the chart's values
Options
--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verify
skip tls certificate checks for the chart download--jsonpath
supply a JSONPath expression to filter the output--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--repo
chart repository url where to locate the requested chart--username
chart repository username where to locate the requested chart--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm status
Usage:d8 dk helm status RELEASE_NAME [options]
display the status of the named release
Options
--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--revision
if set, display the status of the named release with revision--show-desc
if set, display the description message of the named release--show-resources
if set, display the resources of the named release
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm template
Usage:d8 dk helm template [NAME] [CHART] [options]
locally render templates
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--api-versions
,-a
Kubernetes api versions used for Capabilities.APIVersions--atomic
if set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--cleanup-on-fail
allow deletion of new resources created in this installation when install fails--create-namespace
create the release namespace if not present--dependency-update
update dependencies if they are missing before installing the chart--deploy-report-path
save deploy report in JSON to the specified path--description
add a custom description--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validation
if set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-run
simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dns
enable DNS lookups when rendering templates--force
force resource updates through a replacement strategy--generate-name
,-g
generate the name (and omit the NAME parameter)--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crds
include CRDs in the templated output--insecure-skip-tls-verify
skip tls certificate checks for the chart download--is-upgrade
set .Release.IsUpgrade instead of .Release.IsInstall--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--kube-version
Kubernetes version used for Capabilities.KubeVersion--labels
,-l
Labels that would be added to release metadata. Should be divided by comma.--name-template
specify template used to name the release--no-hooks
prevent hooks from running during install--output-dir
writes the executed templates to files in output-dir instead of stdout--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--post-renderer
the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-args
an argument to the post-renderer (can specify multiple)--release-name
use release name in the output-dir path.--render-subchart-notes
if set, render subchart notes along with the parent--replace
re-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repo
chart repository url where to locate the requested chart--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-file
set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-json
set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literal
set a literal STRING value on the command line--set-string
set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--show-only
,-s
only show manifests rendered from the given templates--skip-crds
if set, no CRDs will be installed. By default, CRDs are installed if not already present--skip-tests
skip tests from templated output--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)--username
chart repository username where to locate the requested chart--validate
validate your manifests against the Kubernetes cluster you are currently pointing at. This is the same validation performed on an install--values
,-f
specify values in a YAML file or a URL (can specify multiple)--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--wait
if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobs
if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm test
Usage:d8 dk helm test [RELEASE] [options]
run tests for a release
Options
--filter
specify tests by attribute (currently "name") using attribute=value syntax or '!attribute=value' to exclude a test (can specify multiple or separate values with commas: name=test1,name=test2)--logs
dump the logs from test pods (this runs after all tests are complete, but before any cleanup)--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm uninstall
Usage:d8 dk helm uninstall RELEASE_NAME [...] [options]
uninstall a release
Options
--cascade
Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents. Defaults to background.--description
add a custom description--dry-run
simulate a uninstall--ignore-not-found
Treat "release not found" as a successful uninstall--keep-history
remove all associated resources and mark the release as deleted, but retain the release history--no-hooks
prevent hooks from running during uninstallation--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)--wait
if set, will wait until all the resources are deleted before returning. It will wait for as long as --timeout
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm upgrade
Usage:d8 dk helm upgrade [RELEASE] [CHART] [options]
upgrade a release
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomic
if set, upgrade process rolls back changes made in case of failed upgrade. The --wait flag will be set automatically if --atomic is used--ca-file
verify certificates of HTTPS-enabled servers using this CA bundle--cert-file
identify HTTPS client using this SSL certificate file--cleanup-on-fail
allow deletion of new resources created in this upgrade when upgrade fails--create-namespace
if --install is set, create the release namespace if not present--dependency-update
update dependencies if they are missing before installing the chart--deploy-report-path
save deploy report in JSON to the specified path--description
add a custom description--devel
use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validation
if set, the upgrade process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-run
simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dns
enable DNS lookups when rendering templates--force
force resource updates through a replacement strategy--history-max
limit the maximum number of revisions saved per release. Use 0 for no limit--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verify
skip tls certificate checks for the chart download--install
,-i
if a release by this name doesn't already exist, run an install--key-file
identify HTTPS client using this SSL key file--keyring
location of public keys used for verification--labels
,-l
Labels that would be added to release metadata. Should be separated by comma. Original release labels will be merged with upgrade labels. You can unset label using null.--no-hooks
disable pre/post upgrade hooks--output
,-o
prints the output in the specified format. Allowed values: table, json, yaml--pass-credentials
pass credentials to all domains--password
chart repository password where to locate the requested chart--plain-http
use insecure HTTP connections for the chart download--post-renderer
the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-args
an argument to the post-renderer (can specify multiple)--recreate-pods
performs pods restart for the resource if applicable--render-subchart-notes
if set, render subchart notes along with the parent--repo
chart repository url where to locate the requested chart--reset-then-reuse-values
when upgrading, reset the values to the ones built into the chart, apply the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' or '--reuse-values' is specified, this is ignored--reset-values
when upgrading, reset the values to the ones built into the chart--reuse-values
when upgrading, reuse the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' is specified, this is ignored--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-file
set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-json
set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literal
set a literal STRING value on the command line--set-string
set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crds
if set, no CRDs will be installed when an upgrade is performed with install flag enabled. By default, CRDs are installed if not already present, when an upgrade is performed with install flag enabled--timeout
time to wait for any individual Kubernetes operation (like Jobs for hooks)--username
chart repository username where to locate the requested chart--values
,-f
specify values in a YAML file or a URL (can specify multiple)--verify
verify the package before using it--version
specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--wait
if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobs
if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm verify
Usage:d8 dk helm verify PATH [options]
verify that a chart at the given path has been signed and is valid
Options
--keyring
keyring containing public keys
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk helm version
Usage:d8 dk helm version [options]
print the client version information
Options
--client
,-c
display client version information--short
print the version number--template
template for version string format
Global options
--debug
Enable debug (default $WERF_DEBUG).--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--namespace
,-n
namespace scope for this request--quiet
Disable explanatory output (default $WERF_QUIET).--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk host
Usage:d8 dk host [options]
Work with werf cache and data of all projects on the host machine
d8 dk host cleanup
Usage:d8 dk host cleanup [options]
Cleanup old unused werf cache and data of all projects on host machine.
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--force
Force deletion of images which are being used by some containers (default $WERF_FORCE)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name
,-N
Set a specific project name (default $WERF_PROJECT_NAME)--quiet
Disable explanatory output (default $WERF_QUIET).--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk host purge
Usage:d8 dk host purge [options]
Purge werf images, cache and other data for all projects on host machine
Options
--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--force
First remove containers that use werf docker images which are going to be deleted--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name
,-N
Set a specific project name (default $WERF_PROJECT_NAME)--quiet
Disable explanatory output (default $WERF_QUIET).--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk kube-run
Usage:d8 dk kube-run [options] [IMAGE_NAME] [-- COMMAND ARG...]
Run container for project image in Kubernetes
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--auto-pull-secret
Automatically create docker config secret in the namespace and plug it via pod's imagePullSecrets for private registry access (default $WERF_AUTO_PULL_SECRET or true if not specified)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--copy-from
Copy file/dir from container to local machine after user command execution. Example: "/from/file:to". Can be specified multiple times. Can also be defined with "$WERF_COPY_FROM_*", e.g. "WERF_COPY_FROM_1=from:to".--copy-to
Copy file/dir from local machine to container before user command execution. Example: "from:/to/file". Can be specified multiple times. Can also be defined with "$WERF_COPY_TO_*", e.g. "WERF_COPY_TO_1=from:to".--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--extra-options
Pass extra options to "kubectl run" command, which will create a Pod (default $WERF_EXTRA_OPTIONS)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--interactive
,-i
Enable interactive mode (default $WERF_INTERACTIVE or false if not specified)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--overrides
Inline JSON to override/extend any fields in created Pod, e.g. to add imagePullSecrets field (default $WERF_OVERRIDES). %pod_name% and %container_name% will be replaced with names of a created pod and a container.--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--pod
Set created pod name (default $WERF_POD or autogenerated if not specified)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rm
Remove pod and other created resources after command completion (default $WERF_RM or true if not specified)--rm-with-namespace
Remove also a namespace after command completion (default $WERF_RM_WITH_NAMESPACE or false if not specified)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--tty
,-t
Allocate a TTY (default $WERF_TTY or false if not specified)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk managed-images
Usage:d8 dk managed-images [options]
Work with managed images which will be preserved during cleanup procedure
d8 dk managed-images add
Usage:d8 dk managed-images add [options]
Add image record to the list of managed images which will be preserved during cleanup procedure.
Options
--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk managed-images ls
Usage:d8 dk managed-images ls [options]
List managed images which will be preserved during cleanup procedure.
Options
--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read images from the specified repo--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk managed-images rm
Usage:d8 dk managed-images rm [options]
Remove image record from the list of managed images which will be preserved during cleanup procedure.
Options
--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk plan
Usage:d8 dk plan [options]
Prepare deploy plan and show how resources in a Kubernetes cluster would change on next deploy
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tag
Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-path
Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-values
Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-values
Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--env
Use specified environment (default $WERF_ENV)--exit-code
If true, returns exit code 0 if no changes, exit code 2 if any changes planned or exit code 1 in case of an error (default $WERF_EXIT_CODE or false)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelism
Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-report
Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-value
Shortcut to set current docker config into the .Values.dockerconfigjson--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh
,-L
Do not refresh helm chart repositories locally cached index--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout
,-t
Resources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tag
Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk purge
Usage:d8 dk purge [options]
Purge all project images in the container registry
Options
--allowed-docker-storage-volume-usage
Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usage
Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-margin
During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanup
Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to delete images from the specified repo--docker-server-storage-path
Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk render
Usage:d8 dk render [IMAGE_NAME...] [options]
Render Kubernetes templates
Options
--add-annotation
Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-label
Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--build-report-path
Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-default-secret-values
Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-values
Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-period
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-key
Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crds
Include CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-error
Introspect failed stage in the clean state, before running all assembly instructions of the stage--introspect-error
Introspect failed stage in the state, right after running failed assembly instruction--introspect-stage
Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--kube-version
Set specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--namespace
Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelism
Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--output
Write render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--parallel
,-p
Run in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limit
Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--release
Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-max
Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-report
Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-values
Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--set
Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-value
Shortcut to set current docker config into the .Values.dockerconfigjson--set-file
Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-string
Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--show-only
,-s
only show manifests rendered from the given templates--skip-dependencies-repo-refresh
,-L
Do not refresh helm chart repositories locally cached index--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-period
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--stub-tags
Use stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tag
Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--validate
Validate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--values
Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-images
Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk run
Usage:d8 dk run [options] [IMAGE_NAME] [-- COMMAND ARG...]
Run container for project image
Options
--bash
Use predefined docker options and command for debug--cache-repo
Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--config
Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dir
Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror
(Buildah-only) Use specified mirrors for docker.io--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dir
Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-config
Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-options
Define docker run options (default $WERF_DOCKER_OPTIONS)--dry-run
Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)--env
Use specified environment (default $WERF_ENV)--final-repo
Container registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registry
Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-password
final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-token
final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-username
final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-token
final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-password
final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-username
final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-token
final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--follow
Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-tree
Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-config
Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependencies
Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registry
Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dir
Print current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--platform
Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quiet
Disable explanatory output (default $WERF_QUIET).--repo
Container registry storage address (default $WERF_REPO)--repo-container-registry
Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-password
repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-token
repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-username
repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-token
repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-password
repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-username
repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-token
repo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images
,-Z
Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repo
Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--shell
Use predefined docker options and command for debug--skip-tls-verify-registry
Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-key
Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization
,-S
Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verbose
Enable verbose output (default $WERF_VERBOSE).--virtual-merge
Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk slugify
Usage:d8 dk slugify STRING [options]
Print slugged string by specified format.
Options
--debug
Enable debug (default $WERF_DEBUG).--format
,-f
r|helm-release: suitable for Helm Release ns|kubernetes-namespace: suitable for Kubernetes Namespace tag|docker-tag: suitable for Docker Tag--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--quiet
Disable explanatory output (default $WERF_QUIET).--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk synchronization
Usage:d8 dk synchronization [options]
Run synchronization server
Options
--debug
Enable debug (default $WERF_DEBUG).--dev
Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branch
Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignore
Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--home-dir
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--host
Bind synchronization server to the specified host (default localhost or $WERF_HOST)--kube-config
Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-context
Kubernetes config context (default $WERF_KUBE_CONTEXT)--kubernetes
Use kubernetes lock-manager stages-storage-cache (default $WERF_KUBERNETES)--kubernetes-namespace-prefix
Use specified prefix for namespaces created for lock-manager and stages-storage-cache (defaults to 'werf-synchronization-' when --kubernetes option is used or $WERF_KUBERNETES_NAMESPACE_PREFIX)--local
Use file lock-manager and file stages-storage-cache (true by default or $WERF_LOCAL)--local-lock-manager-base-dir
Use specified directory as base for file lock-manager (~/.werf/synchronization_server/lock_manager by default or $WERF_LOCAL_LOCK_MANAGER_BASE_DIR)--local-stages-storage-cache-base-dir
Use specified directory as base for file stages-storage-cache (~/.werf/synchronization_server/stages_storage_cache by default or $WERF_LOCAL_STAGES_STORAGE_CACHE_BASE_DIR)--log-color-mode
Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debug
Enable debug (default $WERF_LOG_DEBUG).--log-pretty
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quiet
Disable explanatory output (default $WERF_LOG_QUIET).--log-terminal-width
Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-time
Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-format
Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verbose
Enable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminism
Loose werf giterminism mode restrictions--port
Bind synchronization server to the specified port (default 55581 or $WERF_PORT)--quiet
Disable explanatory output (default $WERF_QUIET).--tmp-dir
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--ttl
Time to live for lock-manager locks and stages-storage-cache records (default $WERF_TTL)--verbose
Enable verbose output (default $WERF_VERBOSE).
d8 dk version
Usage:d8 dk version [options]
Print version
d8 help
Help about any command
d8 k
kubectl controls the Kubernetes cluster manager
Options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k alpha
Usage:d8 k alpha [options]
Commands for features in alpha
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k annotate
Usage:d8 k annotate [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]
Update the annotations on a resource
Options
--all
Select all resources, in the namespace of the specified resource types.--all-namespaces
,-A
If true, check the specified action in all namespaces.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename
,-f
Filename, directory, or URL to files identifying the resource to update the annotation--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--list
If true, display the annotations for a given resource.--local
If true, annotation will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwrite
If true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-version
If non-empty, the annotation update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-resources
Usage:d8 k api-resources [options]
Print the supported API resources on the server
Options
--api-group
Limit to resources in the specified API group.--cached
Use the cached list of resources if available.--categories
Limit to resources that belong to the specified categories.--namespaced
If false, non-namespaced resources will be returned, otherwise returning namespaced resources by default.--no-headers
When using the default or custom-column output format, don't print headers (default print headers).--output
,-o
Output format. One of: (wide, name).--sort-by
If non-empty, sort list of resources using specified field. The field can be either 'name' or 'kind'.--verbs
Limit to resources that support the specified verbs.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-versions
Usage:d8 k api-versions [options]
Print the supported API versions on the server, in the form of "group/version"
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) [options]
Apply a configuration to a resource by file name or stdin
Options
--all
Select all resources in the namespace of the specified resource types.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascade
Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
The files that contain the configurations to apply.--force
If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--force-conflicts
If true, server-side apply will force the changes against conflicts.--grace-period
Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize
,-k
Process a kustomization directory. This flag can't be used together with -f or -R.--openapi-patch
If true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked-in types.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwrite
Automatically resolve conflicts between the modified and live configuration by using values from the modified configuration--prune
Automatically delete resource objects, that do not appear in the configs and are created by either apply or create --save-config. Should be used with either -l or --all.--prune-allowlist
Overwrite the default allowlist withfor --prune --prune-whitelist
Overwrite the default whitelist withfor --prune --record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-side
If true, apply runs in the server instead of the client.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeout
The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--wait
If true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply edit-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) edit-last-applied (RESOURCE/NAME | -f FILENAME) [options]
Edit latest last-applied-configuration annotations of a resource/object
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files to use to edit the resource--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endings
Defaults to the line ending native to your platform.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply set-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) set-last-applied -f FILENAME [options]
Set the last-applied-configuration annotation on a live object to match the contents of a file
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--create-annotation
Will create 'last-applied-configuration' annotations if current objects doesn't have one--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename
,-f
Filename, directory, or URL to files that contains the last-applied-configuration annotations--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply view-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) view-last-applied (TYPE [NAME | -l label] | TYPE/NAME | -f FILENAME) [options]
View the latest last-applied-configuration annotations of a resource/object
Options
--all
Select all resources in the namespace of the specified resource types--filename
,-f
Filename, directory, or URL to files that contains the last-applied-configuration annotations--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. Must be one of (yaml, json)--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k attach
Usage:d8 k attach (POD | TYPE/NAME) -c CONTAINER [options]
Attach to a running container
Options
--container
,-c
Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet
,-q
Only print output from the remote session--stdin
,-i
Pass stdin to the container--tty
,-t
Stdin is a TTY
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth
Usage:d8 k auth [options]
Inspect authorization
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth can-i
Usage:d8 k auth can-i VERB [TYPE | TYPE/NAME | NONRESOURCEURL] [options]
Check whether an action is allowed
Options
--all-namespaces
,-A
If true, check the specified action in all namespaces.--list
If true, prints all allowed actions.--no-headers
If true, prints allowed actions without headers--quiet
,-q
If true, suppress output and just return the exit code.--subresource
SubResource such as pod/log or deployment/scale
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth reconcile
Usage:d8 k auth reconcile -f FILENAME [options]
Reconciles rules for RBAC role, role binding, cluster role, and cluster role binding objects
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename
,-f
Filename, directory, or URL to files identifying the resource to reconcile.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--remove-extra-permissions
If true, removes extra permissions added to roles--remove-extra-subjects
If true, removes extra subjects added to rolebindings--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth whoami
Usage:d8 k auth whoami [options]
Experimental: Check self subject attributes
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k autoscale
Usage:d8 k autoscale (-f FILENAME | TYPE NAME | TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [options]
Auto-scale a deployment, replica set, stateful set, or replication controller
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cpu-percent
The target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to autoscale.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--max
The upper limit for the number of pods that can be set by the autoscaler. Required.--min
The lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value.--name
The name for the newly created object. If not specified, the name of the input resource will be used.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate
Usage:d8 k certificate SUBCOMMAND [options]
Modify certificate resources
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate approve
Usage:d8 k certificate SUBCOMMAND approve (-f FILENAME | NAME) [options]
Approve a certificate signing request
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename
,-f
Filename, directory, or URL to files identifying the resource to update--force
Update the CSR even if it is already approved.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate deny
Usage:d8 k certificate SUBCOMMAND deny (-f FILENAME | NAME) [options]
Deny a certificate signing request
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename
,-f
Filename, directory, or URL to files identifying the resource to update--force
Update the CSR even if it is already denied.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info
Usage:d8 k cluster-info [options]
Display cluster information
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info dump
Usage:d8 k cluster-info dump [options]
Dump relevant information for debugging and diagnosis
Options
--all-namespaces
,-A
If true, dump all namespaces. If true, --namespaces is ignored.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--namespaces
A comma separated list of namespaces to dump.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-directory
Where to output the files. If empty or '-' uses stdout, otherwise creates a directory hierarchy in that directory--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k completion
Usage:d8 k completion SHELL [options]
Output shell completion code for the specified shell (bash, zsh, fish, or powershell)
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config
Usage:d8 k config SUBCOMMAND [options]
Modify kubeconfig files
Options
--kubeconfig
use a particular kubeconfig file
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config current-context
Usage:d8 k config SUBCOMMAND current-context [options]
Display the current-context
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-cluster
Usage:d8 k config SUBCOMMAND delete-cluster NAME [options]
Delete the specified cluster from the kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-context
Usage:d8 k config SUBCOMMAND delete-context NAME [options]
Delete the specified context from the kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-user
Usage:d8 k config SUBCOMMAND delete-user NAME [options]
Delete the specified user from the kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-clusters
Usage:d8 k config SUBCOMMAND get-clusters [options]
Display clusters defined in the kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-contexts
Usage:d8 k config SUBCOMMAND get-contexts [(-o|--output=)name)] [options]
Describe one or many contexts
Options
--no-headers
When using the default or custom-column output format, don't print headers (default print headers).--output
,-o
Output format. One of: (name).
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-users
Usage:d8 k config SUBCOMMAND get-users [options]
Display users defined in the kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config rename-context
Usage:d8 k config SUBCOMMAND rename-context CONTEXT_NAME NEW_NAME [options]
Rename a context from the kubeconfig file
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set
Usage:d8 k config SUBCOMMAND set PROPERTY_NAME PROPERTY_VALUE [options]
Set an individual value in a kubeconfig file
Options
--set-raw-bytes
When writing a []byte PROPERTY_VALUE, write the given string directly without base64 decoding.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-cluster
Usage:d8 k config SUBCOMMAND set-cluster NAME [--server=server] [--certificate-authority=path/to/certificate/authority] [--insecure-skip-tls-verify=true] [--tls-server-name=example.com] [options]
Set a cluster entry in kubeconfig
Options
--certificate-authority
Path to certificate-authority file for the cluster entry in kubeconfig--embed-certs
embed-certs for the cluster entry in kubeconfig--insecure-skip-tls-verify
insecure-skip-tls-verify for the cluster entry in kubeconfig--proxy-url
proxy-url for the cluster entry in kubeconfig--server
server for the cluster entry in kubeconfig--tls-server-name
tls-server-name for the cluster entry in kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-context
Usage:d8 k config SUBCOMMAND set-context [NAME | --current] [--cluster=cluster_nickname] [--user=user_nickname] [--namespace=namespace] [options]
Set a context entry in kubeconfig
Options
--cluster
cluster for the context entry in kubeconfig--current
Modify the current context--namespace
namespace for the context entry in kubeconfig--user
user for the context entry in kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-credentials
Usage:d8 k config SUBCOMMAND set-credentials NAME [--client-certificate=path/to/certfile] [--client-key=path/to/keyfile] [--token=bearer_token] [--username=basic_user] [--password=basic_password] [--auth-provider=provider_name] [--auth-provider-arg=key=value] [--exec-command=exec_command] [--exec-api-version=exec_api_version] [--exec-arg=arg] [--exec-env=key=value] [options]
Set a user entry in kubeconfig
Options
--auth-provider
Auth provider for the user entry in kubeconfig--auth-provider-arg
'key=value' arguments for the auth provider--client-certificate
Path to client-certificate file for the user entry in kubeconfig--client-key
Path to client-key file for the user entry in kubeconfig--embed-certs
Embed client cert/key for the user entry in kubeconfig--exec-api-version
API version of the exec credential plugin for the user entry in kubeconfig--exec-arg
New arguments for the exec credential plugin command for the user entry in kubeconfig--exec-command
Command for the exec credential plugin for the user entry in kubeconfig--exec-env
'key=value' environment values for the exec credential plugin--password
password for the user entry in kubeconfig--token
token for the user entry in kubeconfig--username
username for the user entry in kubeconfig
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--user
The name of the kubeconfig user to use--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config unset
Usage:d8 k config SUBCOMMAND unset PROPERTY_NAME [options]
Unset an individual value in a kubeconfig file
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config use-context
Usage:d8 k config SUBCOMMAND use-context CONTEXT_NAME [options]
Set the current-context in a kubeconfig file
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k config view
Usage:d8 k config SUBCOMMAND view [options]
Display merged kubeconfig settings or a specified kubeconfig file
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--flatten
Flatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files)--merge
Merge the full hierarchy of kubeconfig files--minify
Remove all information not used by current-context from the output--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--raw
Display raw byte data and sensitive data--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
use a particular kubeconfig file--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k cordon
Usage:d8 k cordon NODE [options]
Mark node as unschedulable
Options
--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k cp
Usage:d8 k cp <file-spec-src> <file-spec-dest> [options]
Copy files and directories to and from containers
Options
--container
,-c
Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--no-preserve
The copied file/directory's ownership and permissions will not be preserved in the container--retries
Set number of retries to complete a copy operation from a container. Specify 0 to disable or any negative value for infinite retrying. The default is 0 (no retry).
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create
Usage:d8 k create -f FILENAME [options]
Create a resource from a file or from stdin
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--edit
Edit the API resource before creating--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files to use to create the resource--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--raw
Raw URI to POST to the server. Uses the transport specified by the kubeconfig file.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endings
Only relevant if --edit=true. Defaults to the line ending native to your platform.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrole
Usage:d8 k create -f FILENAME clusterrole NAME --verb=verb --resource=resource.group [--resource-name=resourcename] [--dry-run=server|client|none] [options]
Create a cluster role
Options
--aggregation-rule
An aggregation label selector for combining ClusterRoles.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--non-resource-url
A partial url that user should have access to.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resource
Resource that the rule applies to--resource-name
Resource in the white list that the rule applies to, repeat this flag for multiple items--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verb
Verb that applies to the resources contained in the rule
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrolebinding
Usage:d8 k create -f FILENAME clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]
Create a cluster role binding for a particular cluster role
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterrole
ClusterRole this ClusterRoleBinding should reference--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--group
Groups to bind to the clusterrole. The flag can be repeated to add multiple groups.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccount
Service accounts to bind to the clusterrole, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--user
Usernames to bind to the clusterrole. The flag can be repeated to add multiple users.--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create configmap
Usage:d8 k create -f FILENAME configmap NAME [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]
Create a config map from a local file, directory or literal value
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hash
Append a hash of the configmap to its name.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--from-env-file
Specify the path to a file to read lines of key=val pairs to create a configmap.--from-file
Key file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.--from-literal
Specify a key and literal value to insert in configmap (i.e. mykey=somevalue)--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create cronjob
Usage:d8 k create -f FILENAME cronjob NAME --image=image --schedule='0/5 * * * ?' -- [COMMAND] [args...] [options]
Create a cron job with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--image
Image name to run.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--restart
job's restart policy. supported values: OnFailure, Never--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--schedule
A schedule in the Cron format the job should be run with.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create deployment
Usage:d8 k create -f FILENAME deployment NAME --image=image -- [COMMAND] [args...] [options]
Create a deployment with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--image
Image names to run.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--port
The port that this container exposes.--replicas
,-r
Number of replicas to create. Default is 1.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create ingress
Usage:d8 k create -f FILENAME ingress NAME --rule=host/path=service:port[,tls[=secret]] [options]
Create an ingress with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotation
Annotation to insert in the ingress object, in the format annotation=value--class
Ingress Class to be used--default-backend
Default service for backend, in format of svcname:port--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rule
Rule in format host/path=service:port[,tls=secretname]. Paths containing the leading character '*' are considered pathType=Prefix. tls argument is optional.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create job
Usage:d8 k create -f FILENAME job NAME --image=image [--from=cronjob/name] -- [COMMAND] [args...] [options]
Create a job with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--from
The name of the resource to create a Job from (only cronjob is supported).--image
Image name to run.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create namespace
Usage:d8 k create -f FILENAME namespace NAME [--dry-run=server|client|none] [options]
Create a namespace with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create poddisruptionbudget
Usage:d8 k create -f FILENAME poddisruptionbudget NAME --selector=SELECTOR --min-available=N [--dry-run=server|client|none] [options]
Create a pod disruption budget with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--max-unavailable
The maximum number or percentage of unavailable pods this budget requires.--min-available
The minimum number or percentage of available pods this budget requires.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selector
A label selector to use for this budget. Only equality-based selector requirements are supported.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create priorityclass
Usage:d8 k create -f FILENAME priorityclass NAME --value=VALUE --global-default=BOOL [--dry-run=server|client|none] [options]
Create a priority class with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--description
description is an arbitrary string that usually provides guidelines on when this priority class should be used.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--global-default
global-default specifies whether this PriorityClass should be considered as the default priority.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--preemption-policy
preemption-policy is the policy for preempting pods with lower priority.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--value
the value of this priority class.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create quota
Usage:d8 k create -f FILENAME quota NAME [--hard=key1=value1,key2=value2] [--scopes=Scope1,Scope2] [--dry-run=server|client|none] [options]
Create a quota with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--hard
A comma-delimited set of resource=quantity pairs that define a hard limit.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--scopes
A comma-delimited set of quota scopes that must all match each object tracked by the quota.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create role
Usage:d8 k create -f FILENAME role NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename] [--dry-run=server|client|none] [options]
Create a role with single rule
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resource
Resource that the rule applies to--resource-name
Resource in the white list that the rule applies to, repeat this flag for multiple items--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verb
Verb that applies to the resources contained in the rule
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create rolebinding
Usage:d8 k create -f FILENAME rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]
Create a role binding for a particular role or cluster role
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterrole
ClusterRole this RoleBinding should reference--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--group
Groups to bind to the role. The flag can be repeated to add multiple groups.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--role
Role this RoleBinding should reference--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccount
Service accounts to bind to the role, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--user
Usernames to bind to the role. The flag can be repeated to add multiple users.--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) [options]
Create a secret using a specified subcommand
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret docker-registry
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-file=[key=]source] [--dry-run=server|client|none] [options]
Create a secret for use with a Docker registry
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hash
Append a hash of the secret to its name.--docker-email
Email for Docker registry--docker-password
Password for Docker registry authentication--docker-server
Server location for Docker registry--docker-username
Username for Docker registry authentication--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--from-file
Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret generic
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) generic NAME [--type=string] [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]
Create a secret from a local file, directory, or literal value
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hash
Append a hash of the secret to its name.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--from-env-file
Specify the path to a file to read lines of key=val pairs to create a secret.--from-file
Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.--from-literal
Specify a key and literal value to insert in secret (i.e. mykey=somevalue)--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--type
The type of secret to create--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret tls
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) tls NAME --cert=path/to/cert/file --key=path/to/key/file [--dry-run=server|client|none] [options]
Create a TLS secret
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hash
Append a hash of the secret to its name.--cert
Path to PEM encoded public key certificate.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--key
Path to private key associated with given certificate.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service
Usage:d8 k create -f FILENAME service [options]
Create a service using a specified subcommand
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service clusterip
Usage:d8 k create -f FILENAME service clusterip NAME [--tcp=<port>:<targetPort>] [--dry-run=server|client|none] [options]
Create a ClusterIP service
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterip
Assign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--tcp
Port pairs can be specified as ': '. --template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service externalname
Usage:d8 k create -f FILENAME service externalname NAME --external-name external.name [--dry-run=server|client|none] [options]
Create an ExternalName service
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-name
External name of service--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--tcp
Port pairs can be specified as ': '. --template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service loadbalancer
Usage:d8 k create -f FILENAME service loadbalancer NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]
Create a LoadBalancer service
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--tcp
Port pairs can be specified as ': '. --template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service nodeport
Usage:d8 k create -f FILENAME service nodeport NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]
Create a NodePort service
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--node-port
Port used to expose the service on each node in a cluster.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--tcp
Port pairs can be specified as ': '. --template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create serviceaccount
Usage:d8 k create -f FILENAME serviceaccount NAME [--dry-run=server|client|none] [options]
Create a service account with the specified name
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k create token
Usage:d8 k create -f FILENAME token SERVICE_ACCOUNT_NAME [options]
Request a service account token
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--audience
Audience of the requested token. If unset, defaults to requesting a token for use with the Kubernetes API server. May be repeated to request a token valid for multiple audiences.--bound-object-kind
Kind of an object to bind the token to. Supported kinds are Pod, Secret. If set, --bound-object-name must be provided.--bound-object-name
Name of an object to bind the token to. The token will expire when the object is deleted. Requires --bound-object-kind.--bound-object-uid
UID of an object to bind the token to. Requires --bound-object-kind and --bound-object-name. If unset, the UID of the existing object is used.--duration
Requested lifetime of the issued token. If not set, the lifetime will be determined by the server automatically. The server may return a token with a longer or shorter lifetime.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k debug
Usage:d8 k debug (POD | TYPE[[.VERSION].GROUP]/NAME) [ -- COMMAND [args...] ] [options]
Create debugging sessions for troubleshooting workloads and nodes
Options
--arguments-only
If specified, everything after -- will be passed to the new container as Args instead of Command.--attach
If true, wait for the container to start running, and then attach as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true.--container
,-c
Container name to use for debug container.--copy-to
Create a copy of the target Pod with this name.--env
Environment variables to set in the container.--filename
,-f
identifying the resource to debug--image
Container image to use for debug container.--image-pull-policy
The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--profile
Debugging profile. Options are "legacy", "general", "baseline", "netadmin", or "restricted".--quiet
,-q
If true, suppress informational messages.--replace
When used with '--copy-to', delete the original Pod.--same-node
When used with '--copy-to', schedule the copy of target Pod on the same node.--set-image
When used with '--copy-to', a list of name=image pairs for changing container images, similar to how 'kubectl set image' works.--share-processes
When used with '--copy-to', enable process namespace sharing in the copy.--stdin
,-i
Keep stdin open on the container(s) in the pod, even if nothing is attached.--target
When using an ephemeral container, target processes in this container name.--tty
,-t
Allocate a TTY for the debugging container.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k delete
Usage:d8 k delete ([-f FILENAME] | [-k DIRECTORY] | TYPE [(NAME | -l label | --all)]) [options]
Delete resources by file names, stdin, resources and names, or by resources and label selector
Options
--all
Delete all resources, in the namespace of the specified resource types.--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--cascade
Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename
,-f
containing the resource to delete.--force
If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-period
Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--ignore-not-found
Treat "resource not found" as a successful delete. Defaults to "true" when --all is specified.--interactive
,-i
If true, delete resource only when user confirms. This flag is in Alpha.--kustomize
,-k
Process a kustomization directory. This flag can't be used together with -f or -R.--now
If true, resources are signaled for immediate shutdown (same as --grace-period=1).--output
,-o
Output mode. Use "-o name" for shorter output (resource/name).--raw
Raw URI to DELETE to the server. Uses the transport specified by the kubeconfig file.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeout
The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--wait
If true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k describe
Usage:d8 k describe (-f FILENAME | TYPE [NAME_PREFIX | -l label] | TYPE/NAME) [options]
Show details of a specific resource or group of resources
Options
--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--chunk-size
Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--filename
,-f
Filename, directory, or URL to files containing the resource to describe--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-events
If true, display events related to the described object.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k diff
Usage:d8 k diff -f FILENAME [options]
Diff the live version against a would-be applied version
Options
--concurrency
Number of objects to process in parallel when diffing against the live version. Larger number = faster, but more memory, I/O and CPU over that shorter period of time.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files contains the configuration to diff--force-conflicts
If true, server-side apply will force the changes against conflicts.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--prune
Include resources that would be deleted by pruning. Can be used with -l and default shows all resources would be pruned--prune-allowlist
Overwrite the default whitelist withfor --prune --recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-side
If true, apply runs in the server instead of the client.--show-managed-fields
If true, include managed fields in the diff.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k drain
Usage:d8 k drain NODE [options]
Drain node in preparation for maintenance
Options
--chunk-size
Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--delete-emptydir-data
Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).--delete-local-data
Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).--disable-eviction
Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, use with caution.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--force
Continue even if there are pods that do not declare a controller.--grace-period
Period of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used.--ignore-daemonsets
Ignore DaemonSet-managed pods.--pod-selector
Label selector to filter pods on the node--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--skip-wait-for-delete-timeout
If pod DeletionTimestamp older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip.--timeout
The length of time to wait before giving up, zero means infinite
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k edit
Usage:d8 k edit (RESOURCE/NAME | -f FILENAME) [options]
Edit a resource on the server
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files to use to edit the resource--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-patch
Output the patch if the resource is edited.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--subresource
If specified, edit will operate on the subresource of the requested object. Must be one of [status]. This flag is beta and may change in the future.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endings
Defaults to the line ending native to your platform.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k events
Usage:d8 k events [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file] [--for TYPE/NAME] [--watch] [--types=Normal,Warning] [options]
List events
Options
--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-size
Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--for
Filter events to only those pertaining to the specified resource.--no-headers
When using the default output format, don't print headers.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--types
Output only events of given types.--watch
,-w
After listing the requested events, watch for more events.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k exec
Usage:d8 k exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] [options]
Execute a command in a container
Options
--container
,-c
Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--filename
,-f
to use to exec into the resource--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet
,-q
Only print output from the remote session--stdin
,-i
Pass stdin to the container--tty
,-t
Stdin is a TTY
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k explain
Usage:d8 k explain TYPE [--recursive=FALSE|TRUE] [--api-version=api-version-group] [--output=plaintext|plaintext-openapiv2] [options]
Get documentation for a resource
Options
--api-version
Use given api-version (group/version) of the resource.--output
Format in which to render the schema. Valid values are: (plaintext, plaintext-openapiv2).--recursive
When true, print the name of all the fields recursively. Otherwise, print the available fields with their description.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k expose
Usage:d8 k expose (-f FILENAME | TYPE NAME) [--port=port] [--protocol=TCP|UDP|SCTP] [--target-port=number-or-name] [--name=name] [--external-ip=external-ip-of-service] [--type=type] [options]
Take a replication controller, service, deployment or pod and expose it as a new Kubernetes service
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cluster-ip
ClusterIP to be assigned to the service. Leave empty to auto-allocate, or set to 'None' to create a headless service.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-ip
Additional external IP address (not managed by Kubernetes) to accept for the service. If this IP is routed to a node, the service can be accessed by this IP in addition to its generated service IP.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to expose a service--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--labels
,-l
Labels to apply to the service created by this call.--load-balancer-ip
IP to assign to the LoadBalancer. If empty, an ephemeral IP will be created and used (cloud-provider specific).--name
The name for the newly created object.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-type
The method used to override the generated object: json, merge, or strategic.--overrides
An inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--port
The port that the service should serve on. Copied from the resource being exposed, if unspecified--protocol
The network protocol for the service to be created. Default is 'TCP'.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selector
A label selector to use for this service. Only equality-based selector requirements are supported. If empty (the default) infer the selector from the replication controller or replica set.)--session-affinity
If non-empty, set the session affinity for the service to this; legal values: 'None', 'ClientIP'--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--target-port
Name or number for the port on the container that the service should direct traffic to. Optional.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--type
Type for this service: ClusterIP, NodePort, LoadBalancer, or ExternalName. Default is 'ClusterIP'.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k get
Usage:d8 k get [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file|custom-columns|custom-columns-file|wide] (TYPE[.VERSION][.GROUP] [NAME | -l label] | TYPE[.VERSION][.GROUP]/NAME ...) [flags] [options]
Display one or many resources
Options
--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-size
Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--ignore-not-found
If the requested object does not exist the command will return exit code 0.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--label-columns
,-L
Accepts a comma separated list of labels that are going to be presented as columns. Names are case-sensitive. You can also use multiple flag options like -L label1 -L label2...--no-headers
When using the default or custom-column output format, don't print headers (default print headers).--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file, custom-columns, custom-columns-file, wide). See custom columns [https://kubernetes.io/docs/reference/kubectl/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [https://kubernetes.io/docs/reference/kubectl/jsonpath/].--output-watch-events
Output watch event objects when --watch or --watch-only is used. Existing objects are output as initial ADDED events.--raw
Raw URI to request from the server. Uses the transport specified by the kubeconfig file.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-print
If true, have the server return the appropriate table output. Supports extension APIs and CRDs.--show-kind
If present, list the resource type for the requested object(s).--show-labels
When printing, show all labels as the last column (default hide labels column)--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--sort-by
If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.--subresource
If specified, gets the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--watch
,-w
After listing/getting the requested object, watch for changes.--watch-only
Watch for changes to the requested object(s), without listing/getting first.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k kustomize
Usage:d8 k kustomize DIR [options]
Build a kustomization target from a directory or URL
Options
--as-current-user
use the uid and gid of the command executor to run the function in the container--enable-alpha-plugins
enable kustomize plugins--enable-helm
Enable use of the Helm chart inflator generator.--enable-managedby-label
enable adding app.kubernetes.io/managed-by--env
,-e
a list of environment variables to be used by functions--helm-api-versions
Kubernetes api versions used by Helm for Capabilities.APIVersions--helm-command
helm command (path to executable)--helm-kube-version
Kubernetes version used by Helm for Capabilities.KubeVersion--load-restrictor
if set to 'LoadRestrictionsNone', local kustomizations may load files from outside their root. This does, however, break the relocatability of the kustomization.--mount
a list of storage options read from the filesystem--network
enable network access for functions that declare it--network-name
the docker network to run the container in--output
,-o
If specified, write output to this path.--reorder
Reorder the resources just before output. Use 'legacy' to apply a legacy reordering (Namespaces first, Webhooks last, etc). Use 'none' to suppress a final reordering.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k label
Usage:d8 k label [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]
Update the labels on a resource
Options
--all
Select all resources, in the namespace of the specified resource types--all-namespaces
,-A
If true, check the specified action in all namespaces.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename
,-f
Filename, directory, or URL to files identifying the resource to update the labels--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--list
If true, display the labels for a given resource.--local
If true, label will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwrite
If true, allow labels to be overwritten, otherwise reject label updates that overwrite existing labels.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-version
If non-empty, the labels update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k logs
Usage:d8 k logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER] [options]
Print the logs for a container in a pod
Options
--all-containers
Get all containers' logs in the pod(s).--container
,-c
Print the logs of this container--follow
,-f
Specify if the logs should be streamed.--ignore-errors
If watching / following pod logs, allow for any errors that occur to be non-fatal--insecure-skip-tls-verify-backend
Skip verifying the identity of the kubelet that logs are requested from. In theory, an attacker could provide invalid log content back. You might want to use this if your kubelet serving certificates have expired.--limit-bytes
Maximum bytes of logs to return. Defaults to no limit.--max-log-requests
Specify maximum number of concurrent logs to follow when using by a selector. Defaults to 5.--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--prefix
Prefix each log line with the log source (pod name and container name)--previous
,-p
If true, print the logs for the previous instance of the container in a pod if it exists.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--since
Only return logs newer than a relative duration like 5s, 2m, or 3h. Defaults to all logs. Only one of since-time / since may be used.--since-time
Only return logs after a specific date (RFC3339). Defaults to all logs. Only one of since-time / since may be used.--tail
Lines of recent log file to display. Defaults to -1 with no selector, showing all log lines otherwise 10, if a selector is provided.--timestamps
Include timestamps on each line in the log output
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k options
Usage:d8 k options [options]
Print the list of flags inherited by all commands
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k patch
Usage:d8 k patch (-f FILENAME | TYPE NAME) [-p PATCH|--patch-file FILE] [options]
Update fields of a resource
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to update--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--local
If true, patch will operate on the content of the file, not the server-side resource.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--patch
,-p
The patch to be applied to the resource JSON file.--patch-file
A file containing a patch to be applied to the resource.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--subresource
If specified, patch will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--type
The type of patch being provided; one of [json merge strategic]
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin
Usage:d8 k plugin [flags] [options]
Provides utilities for interacting with plugins
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin list
Usage:d8 k plugin [flags] list [options]
List all visible plugin executables on a user's PATH
Options
--name-only
If true, display only the binary name of each plugin, rather than its full path
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k port-forward
Usage:d8 k port-forward TYPE/NAME [options] [LOCAL_PORT:]REMOTE_PORT [...[LOCAL_PORT_N:]REMOTE_PORT_N]
Forward one or more local ports to a pod
Options
--address
Addresses to listen on (comma separated). Only accepts IP addresses or localhost as a value. When localhost is supplied, kubectl will try to bind on both 127.0.0.1 and ::1 and will fail if neither of these addresses are available to bind.--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k proxy
Usage:d8 k proxy [--port=PORT] [--www=static-dir] [--www-prefix=prefix] [--api-prefix=prefix] [options]
Run a proxy to the Kubernetes API server
Options
--accept-hosts
Regular expression for hosts that the proxy should accept.--accept-paths
Regular expression for paths that the proxy should accept.--address
The IP address on which to serve on.--api-prefix
Prefix to serve the proxied API under.--append-server-path
If true, enables automatic path appending of the kube context server path to each request.--disable-filter
If true, disable request filtering in the proxy. This is dangerous, and can leave you vulnerable to XSRF attacks, when used with an accessible port.--keepalive
keepalive specifies the keep-alive period for an active network connection. Set to 0 to disable keepalive.--port
,-p
The port on which to run the proxy. Set to 0 to pick a random port.--reject-methods
Regular expression for HTTP methods that the proxy should reject (example --reject-methods='POST,PUT,PATCH').--reject-paths
Regular expression for paths that the proxy should reject. Paths specified here will be rejected even accepted by --accept-paths.--unix-socket
,-u
Unix socket on which to run the proxy.--www
,-w
Also serve static files from the given directory under the specified prefix.--www-prefix
,-P
Prefix to serve static files under, if static file directory is specified.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k replace
Usage:d8 k replace -f FILENAME [options]
Replace a resource by file name or stdin
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascade
Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
The files that contain the configurations to replace.--force
If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-period
Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize
,-k
Process a kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--raw
Raw URI to PUT to the server. Uses the transport specified by the kubeconfig file.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--subresource
If specified, replace will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeout
The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--wait
If true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout
Usage:d8 k rollout SUBCOMMAND [options]
Manage the rollout of a resource
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout history
Usage:d8 k rollout SUBCOMMAND history (TYPE NAME | TYPE/NAME) [flags] [options]
View rollout history
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revision
See the details, including podTemplate of the revision specified--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout pause
Usage:d8 k rollout SUBCOMMAND pause RESOURCE [options]
Mark the provided resource as paused
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout restart
Usage:d8 k rollout SUBCOMMAND restart RESOURCE [options]
Restart a resource
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout resume
Usage:d8 k rollout SUBCOMMAND resume RESOURCE [options]
Resume a paused resource
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout status
Usage:d8 k rollout SUBCOMMAND status (TYPE NAME | TYPE/NAME) [flags] [options]
Show the status of the rollout
Options
--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revision
Pin to a specific revision for showing its status. Defaults to 0 (last revision).--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeout
The length of time to wait before ending watch, zero means never. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).--watch
,-w
Watch the status of the rollout until it's done.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout undo
Usage:d8 k rollout SUBCOMMAND undo (TYPE NAME | TYPE/NAME) [flags] [options]
Undo a previous rollout
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--to-revision
The revision to rollback to. Default to 0 (last revision).
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k run
Usage:d8 k run NAME --image=image [--env="key=value"] [--port=port] [--dry-run=server|client] [--overrides=inline-json] [--command] -- [COMMAND] [args...] [options]
Run a particular image on the cluster
Options
--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotations
Annotations to apply to the pod.--attach
If true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true. With '--restart=Never' the exit code of the container process is returned.--cascade
Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--command
If true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--env
Environment variables to set in the container.--expose
If true, create a ClusterIP service associated with the pod. Requires `--port`.--field-manager
Name of the manager used to track field ownership.--filename
,-f
to use to replace the resource.--force
If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-period
Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--image
The image for the container to run.--image-pull-policy
The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--kustomize
,-k
Process a kustomization directory. This flag can't be used together with -f or -R.--labels
,-l
Comma separated labels to apply to the pod. Will override previous values.--leave-stdin-open
If the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-type
The method used to override the generated object: json, merge, or strategic.--overrides
An inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--pod-running-timeout
The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--port
The port that this container exposes.--privileged
If true, run the container in privileged mode.--quiet
,-q
If true, suppress prompt messages.--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--restart
The restart policy for this Pod. Legal values [Always, OnFailure, Never].--rm
If true, delete the pod after it exits. Only valid when attaching to the container, e.g. with '--attach' or with '-i/--stdin'.--save-config
If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--stdin
,-i
Keep stdin open on the container in the pod, even if nothing is attached.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeout
The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--tty
,-t
Allocate a TTY for the container in the pod.--wait
If true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k scale
Usage:d8 k scale [--resource-version=version] [--current-replicas=count] --replicas=COUNT (-f FILENAME | TYPE NAME) [options]
Set a new size for a deployment, replica set, or replication controller
Options
--all
Select all resources in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--current-replicas
Precondition for current size. Requires that the current size of the resource match this value in order to scale. -1 (default) for no condition.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename
,-f
Filename, directory, or URL to files identifying the resource to set a new size--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--replicas
The new desired number of replicas. Required.--resource-version
Precondition for resource version. Requires that the current resource version match this value in order to scale.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeout
The length of time to wait before giving up on a scale operation, zero means don't wait. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set
Usage:d8 k set SUBCOMMAND [options]
Set specific features on objects
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set env
Usage:d8 k set SUBCOMMAND env RESOURCE/NAME KEY_1=VAL_1 ... KEY_N=VAL_N [options]
Update environment variables on a pod template
Options
--all
If true, select all resources in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers
,-c
The names of containers in the selected pod templates to change - may use wildcards--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--env
,-e
Specify a key-value pair for an environment variable to set into each container.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files the resource to update the env--from
The name of a resource from which to inject environment variables--keys
Comma-separated list of keys to import from specified resource--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--list
If true, display the environment and any changes in the standard format. this flag will removed when we have kubectl view env.--local
If true, set env will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwrite
If true, allow environment to be overwritten, otherwise reject updates that overwrite existing environment.--prefix
Prefix to append to variable names--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resolve
If true, show secret or configmap references when listing variables--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set image
Usage:d8 k set SUBCOMMAND image (-f FILENAME | TYPE NAME) CONTAINER_NAME_1=CONTAINER_IMAGE_1 ... CONTAINER_NAME_N=CONTAINER_IMAGE_N [options]
Update the image of a pod template
Options
--all
Select all resources, in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--local
If true, set image will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set resources
Usage:d8 k set SUBCOMMAND resources (-f FILENAME | TYPE NAME) ([--limits=LIMITS & --requests=REQUESTS] [options]
Update resource requests/limits on objects with pod templates
Options
--all
Select all resources, in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers
,-c
The names of containers in the selected pod templates to change, all containers are selected by default - may use wildcards--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--limits
The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--local
If true, set resources will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--requests
The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set selector
Usage:d8 k set SUBCOMMAND selector (-f FILENAME | TYPE NAME) EXPRESSIONS [--resource-version=version] [options]
Set the selector on a resource
Options
--all
Select all resources in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
identifying the resource.--local
If true, annotation will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-version
If non-empty, the selectors update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set serviceaccount
Usage:d8 k set SUBCOMMAND serviceaccount (-f FILENAME | TYPE NAME) SERVICE_ACCOUNT [options]
Update the service account of a resource
Options
--all
Select all resources, in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files identifying the resource to get from a server.--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--local
If true, set serviceaccount will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--record
Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k set subject
Usage:d8 k set SUBCOMMAND subject (-f FILENAME | TYPE NAME) [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]
Update the user, group, or service account in a role binding or cluster role binding
Options
--all
Select all resources, in the namespace of the specified resource types--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--filename
,-f
Filename, directory, or URL to files the resource to update the subjects--group
Groups to bind to the role--kustomize
,-k
Process the kustomization directory. This flag can't be used together with -f or -R.--local
If true, set subject will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--serviceaccount
Service accounts to bind to the role--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--user
Usernames to bind to the role
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k taint
Usage:d8 k taint NODE NAME KEY_1=VAL_1:TAINT_EFFECT_1 ... KEY_N=VAL_N:TAINT_EFFECT_N [options]
Update the taints on one or more nodes
Options
--all
Select all nodes in the cluster--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager
Name of the manager used to track field ownership.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwrite
If true, allow taints to be overwritten, otherwise reject taint updates that overwrite existing taints.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate
Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k top
Usage:d8 k top [options]
Display resource (CPU/memory) usage
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k top node
Usage:d8 k top node [NAME | -l label] [options]
Display resource (CPU/memory) usage of nodes
Options
--no-headers
If present, print output without headers--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-capacity
Print node resources based on Capacity instead of Allocatable(default) of the nodes.--sort-by
If non-empty, sort nodes list using specified field. The field can be either 'cpu' or 'memory'.--use-protocol-buffers
Enables using protocol-buffers to access Metrics API.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k top pod
Usage:d8 k top pod [NAME | -l label] [options]
Display resource (CPU/memory) usage of pods
Options
--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--containers
If present, print usage of containers within a pod.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--no-headers
If present, print output without headers.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--sort-by
If non-empty, sort pods list using specified field. The field can be either 'cpu' or 'memory'.--sum
Print the sum of the resource usage--use-protocol-buffers
Enables using protocol-buffers to access Metrics API.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k uncordon
Usage:d8 k uncordon NODE [options]
Mark node as schedulable
Options
--dry-run
Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k version
Usage:d8 k version [options]
Print the client and server version information
Options
--client
If true, shows client version only (no server required).--output
,-o
One of 'yaml' or 'json'.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 k wait
Usage:d8 k wait ([-f FILENAME] | resource.group/resource.name | resource.group [(-l label | --all)]) [--for=delete|--for condition=available|--for=jsonpath='{}'[=value]] [options]
Experimental: Wait for a specific condition on one or many resources
Options
--all
Select all resources in the namespace of the specified resource types--all-namespaces
,-A
If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keys
If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-selector
Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename
,-f
identifying the resource.--for
The condition to wait on: [delete|condition=condition-name[=condition-value]|jsonpath='{JSONPath expression}'=[JSONPath value]]. The default condition-value is true. Condition values are compared after Unicode simple case folding, which is a more general form of case-insensitivity.--local
If true, annotation will NOT contact api-server but run locally.--output
,-o
Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive
,-R
Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector
,-l
Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)--show-managed-fields
If true, keep the managedFields when printing objects in JSON or YAML format.--template
Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeout
The length of time to wait before giving up. Zero means check once and don't wait, negative means wait for a week.
Global options
--as
Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation.--cache-dir
Default cache directory--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--match-server-version
Require server version to match client version--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--profile
Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output
Name of the file to write the profile to--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errors
Treat warnings received from the server as errors and exit with a non-zero exit code
d8 login
Log in to the Deckhouse Kubernetes Platform
Options
--add-dir-header
If true, adds the file directory to the header of the log messages--alsologtostderr
log to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-at
when logging hits line file:N, emit a stack trace--log-dir
If non-empty, write log files in this directory (no effect when -logtostderr=true)--log-file
If non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-size
Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderr
log to standard error instead of files--one-output
If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headers
If true, avoid header prefixes in the log messages--skip-log-headers
If true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthreshold
logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging
d8 login get-token
Usage:d8 login get-token [flags] [options]
Run as a kubectl credential plugin
Options
--authentication-timeout-sec
[authcode] Timeout of authentication in seconds--browser-command
[authcode] Command to open the browser--certificate-authority
Path to a cert file for the certificate authority--certificate-authority-data
Base64 encoded cert for the certificate authority--force-refresh
If set, refresh the ID token regardless of its expiration time--grant-type
Authorization grant type to use. One of (auto|authcode|authcode-keyboard|password|device-code)--insecure-skip-tls-verify
If set, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--listen-address
[authcode] Address to bind to the local server. If multiple addresses are set, it will try binding in order--listen-port
[authcode] deprecated: port to bind to the local server--local-server-cert
[authcode] Certificate path for the local server--local-server-key
[authcode] Certificate key path for the local server--oidc-auth-request-extra-params
[authcode, authcode-keyboard] Extra query parameters to send with an authentication request--oidc-client-id
Client ID of the provider (mandatory)--oidc-client-secret
Client secret of the provider--oidc-extra-scope
Scopes to request to the provider--oidc-issuer-url
Issuer URL of the provider (mandatory)--oidc-redirect-url-authcode-keyboard
[authcode-keyboard] Redirect URL--oidc-redirect-url-hostname
[authcode] Hostname of the redirect URL--oidc-use-pkce
Force PKCE usage--open-url-after-authentication
[authcode] If set, open the URL in the browser after authentication--password
[password] Password for resource owner password credentials grant--skip-open-browser
[authcode] Do not open the browser automatically--tls-renegotiation-freely
If set, allow a remote server to repeatedly request renegotiation--tls-renegotiation-once
If set, allow a remote server to request renegotiation once per connection--token-cache-dir
Path to a directory for token cache--username
[password] Username for resource owner password credentials grant
Global options
--add-dir-header
If true, adds the file directory to the header of the log messages--alsologtostderr
log to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-at
when logging hits line file:N, emit a stack trace--log-dir
If non-empty, write log files in this directory (no effect when -logtostderr=true)--log-file
If non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-size
Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderr
log to standard error instead of files--one-output
If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headers
If true, avoid header prefixes in the log messages--skip-log-headers
If true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthreshold
logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging
d8 mirror
Copy Deckhouse Kubernetes Platform distribution to the local filesystem or third-party registry
d8 mirror pull
Usage:d8 mirror pull <images-bundle-path> [options]
Copy Deckhouse Kubernetes Platform distribution to the local filesystem
Options
--deckhouse-tag
Specific Deckhouse build tag to pull. Conflicts with --since-version. If registry contains release channel image for specified tag, all release channels in the bundle will be pointed to it.--exclude-module
,-e
Blacklist specific modules from downloading. Format is "module-name[@version]". Use one flag per each module. Overridden by use of --include-module."--force
Overwrite existing bundle packages if they are conflicting with current pull operation.--gost-digest
Calculate GOST R 34.11-2012 STREEBOG digest for downloaded bundle--images-bundle-chunk-size
,-c
Split resulting bundle file into chunks of at most N gigabytes--include-module
,-i
Whitelist specific modules for downloading. Format is "module-name[@version]". Use one flag per each module. Disables blacklisting by --exclude-module."--insecure
Interact with registries over HTTP.--license
,-l
Deckhouse license key. Shortcut for --source-login=license-token --source-password=<>.--modules-path-suffix
Suffix to append to source repo path to locate modules.--no-modules
Do not pull Deckhouse modules into bundle.--no-platform
Do not pull Deckhouse Kubernetes Platform into bundle.--no-pull-resume
Do not continue last unfinished pull operation and start from scratch.--no-security-db
Do not pull security databases into bundle.--since-version
Minimal Deckhouse release to pull. Ignored if above current Rock Solid release. Conflicts with --deckhouse-tag.--source
Source registry to pull Deckhouse images from.--source-login
Source registry login.--source-password
Source registry password.--tls-skip-verify
Disable TLS certificate validation.--tmp-dir
Path to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 mirror push
Usage:d8 mirror push <images-bundle-path> <registry> [options]
Copy Deckhouse Kubernetes Platform distribution to the third-party registry
Options
--insecure
Interact with registries over HTTP.--modules-path-suffix
Suffix to append to source repo path to locate modules.--registry-login
,-u
Username to log into the target registry.--registry-password
,-p
Password to log into the target registry.--tls-skip-verify
Disable TLS certificate validation.--tmp-dir
Path to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 stronghold
Deckhouse Stronghold commands
d8 stronghold auth
Usage:d8 stronghold auth [options]
Interact with auth methods
d8 stronghold delete
Usage:d8 stronghold delete [options]
Delete secrets and configuration
d8 stronghold kv
Usage:d8 stronghold kv [options]
Interact with Stronghold's Key-Value storage
d8 stronghold lease
Usage:d8 stronghold lease [options]
Interact with leases
d8 stronghold list
Usage:d8 stronghold list [options]
List data or secrets
d8 stronghold login
Usage:d8 stronghold login [options]
Authenticate locally
d8 stronghold operator
Usage:d8 stronghold operator [options]
Perform operator-specific tasks
d8 stronghold patch
Usage:d8 stronghold patch [options]
Patch data, configuration, and secrets
d8 stronghold path-help
Usage:d8 stronghold path-help [options]
Retrieve API help for paths
d8 stronghold pki
Usage:d8 stronghold pki [options]
Interact with Stronghold's PKI Secrets Engine
d8 stronghold policy
Usage:d8 stronghold policy [options]
Interact with policies
d8 stronghold print
Usage:d8 stronghold print [options]
Prints runtime configurations
d8 stronghold read
Usage:d8 stronghold read [options]
Read data and retrieves secrets
d8 stronghold secrets
Usage:d8 stronghold secrets [options]
Interact with secrets engines
d8 stronghold status
Usage:d8 stronghold status [options]
Print seal and HA status
d8 stronghold token
Usage:d8 stronghold token [options]
Interact with tokens
d8 stronghold transit
Usage:d8 stronghold transit [options]
Interact with Stronghold's Transit Secrets Engine
d8 stronghold unwrap
Usage:d8 stronghold unwrap [options]
Unwrap a wrapped secret
d8 stronghold version
Usage:d8 stronghold version [options]
Print version
d8 stronghold write
Usage:d8 stronghold write [options]
Write data, configuration, and secrets
d8 system
Operate system options.
Options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system collect-debug-info
Usage:d8 system collect-debug-info [options]
Collect debug info.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit
Usage:d8 system edit [options]
Edit configuration files
Options
--editor
,-e
Your favourite editor.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit cluster-configuration
Usage:d8 system edit cluster-configuration [options]
Edit cluster-configuration.
Options
--editor
,-e
Your favourite editor.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit provider-cluster-configuration
Usage:d8 system edit provider-cluster-configuration [options]
Edit provider-cluster-configuration.
Options
--editor
,-e
Your favourite editor.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit static-cluster-configuration
Usage:d8 system edit static-cluster-configuration [options]
Edit static-cluster-configuration.
Options
--editor
,-e
Your favourite editor.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system logs
Usage:d8 system logs [options]
Inspect deckhouse-controller logs.
Options
--follow
,-f
Specify if the logs should be streamed.--since
Show logs newer than a relative duration like 5s, 2m, or 1h. Only one of since-time / since may be used.--since-time
Show logs after a specific timestamp, e.g. --since-time='2025-05-19 12:00:00'. Only one of since-time / since may be used.--tail
Limit the number of lines in the output to the last N lines. Defaults to -1 with no limit.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module
Usage:d8 system module [options]
Operate the Deckhouse Kubernetes Platform modules
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module disable
Usage:d8 system module disable [options]
Disable module.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module enable
Usage:d8 system module enable [options]
Enable module.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module list
Usage:d8 system module list [options]
List enabled modules.
Options
--editor
,-e
Your favourite editor.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module snapshots
Usage:d8 system module snapshots [options]
Dump shapshots.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module values
Usage:d8 system module values [options]
Dump values.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue
Usage:d8 system queue [options]
Dump queues.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue list
Usage:d8 system queue list [options]
Dump all queues.
Options
--output
,-o
Output format: json|yaml|text.--show-empty
,-e
Show empty queues.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue main
Usage:d8 system queue main [options]
Dump main queue.
Options
--output
,-o
Output format: json|yaml|text.
Global options
--context
The name of the kubeconfig context to use--kubeconfig
,-k
KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 v
d8 v controls virtual machine related operations on your kubernetes cluster.
Options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v console
Usage:d8 v console (VirtualMachine) [options]
Connect to a console of a virtual machine.
Options
--timeout
The number of minutes to wait for the virtual machine to be ready.
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v evict
Usage:d8 v evict (VirtualMachine) [options]
Evict a virtual machine.
Options
--create-only
,-c
--create-only, -c: Set this flag for create operation only.--force
,-f
--force, -f: Set this flag to force the operation.--timeout
,-t
--timeout, -t: Set this flag to change the timeout.--wait
,-w
--wait, -w: Set this flag to wait for the operation to complete.
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v port-forward
Usage:d8 v port-forward name[.namespace] [protocol/]localPort[:targetPort]... [options]
Forward local ports to a virtual machine
Options
--address
--address=: Set this to the address the local ports should be opened on--stdio
--stdio=true: Set this to true to forward the tunnel to stdout/stdin; Only works with a single port
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v restart
Usage:d8 v restart (VirtualMachine) [options]
Restart a virtual machine.
Options
--create-only
,-c
--create-only, -c: Set this flag for create operation only.--force
,-f
--force, -f: Set this flag to force the operation.--timeout
,-t
--timeout, -t: Set this flag to change the timeout.--wait
,-w
--wait, -w: Set this flag to wait for the operation to complete.
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v scp
Usage:d8 v scp VirtualMachine) [options]
SCP files from/to a virtual machine.
Options
--identity-file
,-i
--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts
--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh
--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts
,-t
--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port
,-p
--port=22: Specify a port on the VM to send SSH traffic to--preserve
Preserves modification times, access times, and modes from the original file.--recursive
,-r
Recursively copy entire directories--username
,-l
--username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v ssh
Usage:d8 v ssh VirtualMachine [options]
Open a SSH connection to a virtual machine.
Options
--command
,-c
--command='ls /': Specify a command to execute in the VM--identity-file
,-i
--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts
--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh
--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts
,-t
--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port
,-p
--port=22: Specify a port on the VM to send SSH traffic to--username
,-l
--username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v start
Usage:d8 v start (VirtualMachine) [options]
Start a virtual machine.
Options
--create-only
,-c
--create-only, -c: Set this flag for create operation only.--force
,-f
--force, -f: Set this flag to force the operation.--timeout
,-t
--timeout, -t: Set this flag to change the timeout.--wait
,-w
--wait, -w: Set this flag to wait for the operation to complete.
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v stop
Usage:d8 v stop (VirtualMachine) [options]
Stop a virtual machine.
Options
--create-only
,-c
--create-only, -c: Set this flag for create operation only.--force
,-f
--force, -f: Set this flag to force the operation.--timeout
,-t
--timeout, -t: Set this flag to change the timeout.--wait
,-w
--wait, -w: Set this flag to wait for the operation to complete.
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v vnc
Usage:d8 v vnc VirtualMachine [options]
Open a vnc connection to a virtual machine.
Options
--address
--address=127.0.0.1: Setting this will change the listening address of the VNC server. Example: --address=0.0.0.0 will make the server listen on all interfaces.--port
--port=0: Assigning a port value to this will try to run the proxy on the given port if the port is accessible; If unassigned, the proxy will run on a random port--proxy-only
--proxy-only=false: Setting this true will run only the vnc proxy and show the port where VNC viewers can connect
Global options
--as
Username to impersonate for the operation--as-group
Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid
UID to impersonate for the operation--certificate-authority
Path to a cert file for the certificate authority--client-certificate
Path to a client certificate file for TLS--client-key
Path to a client key file for TLS--cluster
The name of the kubeconfig cluster to use--context
The name of the kubeconfig context to use--disable-compression
If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify
If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig
Path to the kubeconfig file to use for CLI requests.--log-flush-frequency
Maximum number of seconds between log flushes--namespace
,-n
If present, the namespace scope for this CLI request--password
Password for basic authentication to the API server--proxy-url
If provided, this URL will be used to connect via proxy--request-timeout
The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server
,-s
The address and port of the Kubernetes API server--tls-server-name
If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--token
Bearer token for authentication to the API server--user
The name of the kubeconfig user to use--username
Username for basic authentication to the API server--v
,-v
number for the log level verbosity--vmodule
comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)