okd.iamgini.comOpenShift, Kubernetes, Docker Cheat sheet | Comprehensive CLI Cheat sheet for OpenShift,

Kubernetes, Podman and Docker .OpenShift, Kubernetes, Docker Cheat sheetOpenShift Kubernetes Docker Cheatsheet Comprehensive CLI Cheat sheet for OpenShift, Kubernetes, Podman and Docker iamgini.com All Cheatsheets View on GitHubOpenShift, Kubernetes, Docker Cheat sheet Comprehensive CLI Cheatsheet for OpenShift, Kubernetes and Docker. Most of the time oc and kubectl shares the same command set but some cases we have some differences. oc has support for logging to OpenShift cluster with kubectl you need to create your kubeconfig file with credentials. Read more OpenShift articles and How-to’s on techbeatly.com References Developer CLI Commands 10 most important differences between OpenShift and Kubernetes Enterprise Kubernetes with OpenShift (Part one) Table of Contents OpenShift, Kubernetes, Docker Cheat sheet CLI Installation OpenShift CLI Installation Install and Set Up kubectl Basic Structure of OpenShift/Kubernetes definition file Login and Logout oc status Managing Projects Viewing, Finding Resources Taints and Tolerations Controlling Access & Managing Users Check Access oc describe oc export Managing pods Static Pods Managing Nodes PV & PVC - PersistentVolume & PersistentVolumeClaim oc exec - execute command inside a containe Events and Troubleshooting Help and Understand Applications Get Help Build from image Enable/Disable scheduling Resource quotas Labels & Annotations Limit ranges ClusterQuota or ClusterResourceQuota Config View Managing Environment Variables Security Context Constraints Services & Routes Scaling & AutoScaling of the pod - HorizontalPodAutoscaler Configuration Maps (ConfigMap) Creation of objects Reading config maps Dynamically change the config map Mounting config map as ENV The Replication Controller PersistentVolume PersistentVolumeClaim Deployments Deployment strategies Rolling Triggers Recreate Custom Lifecycle hooks Deployment Pod Resources Blue-Green deployments A/B Deployments Canary Deployments Rollbacks Pipelines Configuration Management Secrets Creation Using secrets in Pods ENV Adding Removing Change triggers OpenShift Builds Build strategies Build sources Build Configurations S2I Troubleshooting Integrated logging Simple metrics Resource scheduling Multiproject quota Essential Docker Registry Commands Private Docker Registry and Access Docker Commands Basic Networking Technical Jargons Points to Remember OpenShift 4 (to be moved to above sub-sections later) Cluster Details Check logs of systemd services Run commands on nodes Pod Logs Troubleshoting containers Debug levels StorageClass & Persistent Storage Networking Acronyms CLI Installation OpenShift CLI Installation oc command line tool will be installed on all master and node machines during cluster installation. You can also install oc utility on any other machines which is not part of openshift cluster. Download oc cli tool from : https://www.okd.io/download.html On a RHEL system with valid subscription you can install with yum as below. $ sudo yum install -y atomic-openshift-clients Many common oc operations are invoked using the following syntax: $ oc action object_type object_name_or_id Install and Set Up kubectl Download the latest release with the command: curl -LO https://storage.googleapis.com/kubernetes-release/release/`curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt`/bin/linux/amd64/kubectl Make the kubectl binary executable. chmod +x ./kubectl Move the binary in to your PATH. sudo mv ./kubectl /usr/local/bin/kubectl Test to ensure the version you installed is up-to-date: kubectl version Basic Structure of OpenShift/Kubernetes definition file (below one is a service definition) apiVersion: v1 kind: Service metadata: name: my-service spec: type: NodePort ports: - targetPort: 80 port: 80 nodePort: 30008 selector: app: myapp type: front-end Login and Logout oc login https://10.142.0.2:8443 -u admin -p openshift # Login to openshift cluster oc whoami # identify the current login oc whoami -t # get token oc whoami show-console # show console URL oc login -u system:admin # login to cluster from any master node without a password oc logout # logout from cluster oc status oc status -v # get oc cluster status oc types # to list all concepts and types Managing Projects oc get projects # list Existing Projects oc get project # Display current project oc project myproject # switch to a project oc new-project testlab display-name=’testlab’ description=’testlab’ # create a new project oc adm new-project testlab node-selector=’project101=testlab’ # create a new project with node-selector. # Project pods will be created only those nodes with a label "project101=testlab" oc delete project testlab # delete a project oc delete all all # delete all from a project oc delete all -l app=web # delete all where label app=web Viewing, Finding Resources oc get all # list all resource items -w watches the result output in realtime. oc process # process a template into list of resources. Taints and Tolerations kubectl taint nodes node1 app=blue:NoSchedule # Apply taint on node kubectl taint nodes node1 app=blue:NoSchedule- # untaint a node by using "-" at the end. Controlling Access & Managing Users oc create user USER_NAME # create a user oc adm add-role-to-user ROLE_NAME USERNAME -n PROJECT_NAME # add cluster role to a user # add-role-to-group - to add role to a group # add-cluster-role-to-user - to add cluster role to a user # add-cluster-role-to-group - to add cluster role to a group eg: oc adm add-role-to-user edit demo-user -n demo-project oc adm policy add-cluster-role-to-user cluster-admin develoer # add cluster-admin role to the user developer oc adm policy remove-cluster-role-from-group \ self-provisioner \ system:authenticated \ system:authenticated:oauth # remove role from a group oc get sa # list all service accounts oc get cluserrole # list all cluster rolesrole oc get rolebinding -n PROJECT_NAME # list all roles details for the project oc describe policybindings :default -n PROJECT_NAME # OCP 3.7show details of a project policy details oc describe rolebinding.rbac -n PROJECT_NAME # OCP 3.7show details of a project policy details oc describe user USER_NAME # details of a user oc adm policy who-can edit pod -n PROJECT_NAME # list details of access You can also create user with HTPasswdIdentityProvider module as below. htpasswd -b /etc/origin/master/htpasswd user1 password1 # create user1 # -b used to take password from command line rather than promopting for it. htpasswd -D /etc/origin/master/htpasswd user1 # -D deletes user1 Check Access kubectl auth can-i create deployments # check access kubectl auth can-i create deployments \ as user1 # check access for a user kubectl auth can-i create deployments \ as user1 \ namespace dev # check access for a user in a namespace oc describe oc describe node node1 # show deatils of a specific resource oc describe pod POD_NAME # pod details oc describe svc SERVICE_NAME # service details oc describe route ROUTE_NAME # route details oc export oc export RESOURCE_TYPE RESOURCE_NAME -o OUTPUT_FORMAT # export a definition of a resource (creating a backup etc) in JSON or YAML format. oc export pod mysql-1-p1d35 -o yaml oc export svc/myapp -o json Managing pods Get pods, Rollout, delete etc. oc get pods # list running pods inside a project oc get pods -o wide # detailed listing of pods oc get pod -o name # for pod names oc get pods -n PROJECT_NAME # list running pods inside a project/name-space oc get pods show-labels # show pod labels oc get pods selector env=dev # list pods with env=dev oc get po POD_NAME -o=jsonpath="{..image}" # get othe pod image details oc get po POD_NAME -o=jsonpath="{..uid}" # get othe pod uid details oc adm manage-node NODE_NAME list-pods # list all pods running on specific node oc rollout history dc/name # available revisions oc rollout latest hello # deploy a new version of app. oc rollout undo dc/name # rollback to the last successful deployed revision of your...