This page is generated automatically.

d8 controls the Deckhouse Kubernetes Platform

Common options:

  • --help, -h
    help for d8
  • --version, -v
    version for d8

d8 backup

Backup various parts of Deckhouse Kubernetes Platform

Options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 backup cluster-config

Usage:
d8 backup cluster-config <backup-tarball-path> [options]

Take a snapshot of cluster configuration

Options

  • --compress, -c
    Compress result file

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 backup etcd

Usage:
d8 backup etcd <snapshot-path> [options]

Take a snapshot of ETCD state

Options

  • --etcd-pod, -p
    Name of the etcd pod to snapshot from. (optional)
  • --verbose
    Verbose log output.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 backup loki

Usage:
d8 backup loki [options]

Dump logs from Loki api.

Options

  • --days
    Limit maximum number of days in range to output per queue from Loki. (Default 5 maximum number of days in range per queue.)
  • --end
    Set end timestamp range to dump logs from Loki. (Default get max end timestamp from Loki, ex. "2025-01-14 15:04:05".)
  • --limit
    Limit the number of lines to output per queue from Loki. (Default 5000 max limit strings per queue.)
  • --start
    Set start timestamp range to dump logs from Loki. (Default get max start timestamp from Loki, ex. "2025-01-12 15:04:05".)

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 completion

Generate the autocompletion script for the specified shell

d8 completion bash

Usage:
d8 completion bash [options]

Generate the autocompletion script for bash

Options

  • --no-descriptions
    disable completion descriptions

d8 completion fish

Usage:
d8 completion fish [options]

Generate the autocompletion script for fish

Options

  • --no-descriptions
    disable completion descriptions

d8 completion powershell

Usage:
d8 completion powershell [options]

Generate the autocompletion script for powershell

Options

  • --no-descriptions
    disable completion descriptions

d8 completion zsh

Usage:
d8 completion zsh [options]

Generate the autocompletion script for zsh

Options

  • --no-descriptions
    disable completion descriptions

d8 dk

A set of tools for building, distributing, and deploying containerized applications

d8 dk build

Usage:
d8 dk build [IMAGE_NAME...] [options]

Build images

Options

  • --add-custom-tag
    Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")
  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --build-report-path
    Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --save-build-report
    Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk bundle

Usage:
d8 dk bundle [options]

Work with werf bundles: publish bundles into container registry and deploy bundles into Kubernetes cluster

d8 dk bundle apply

Usage:
d8 dk bundle apply [options]

Apply bundle into Kubernetes

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --atomic
    Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)
  • --auto-rollback, -R
    Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --deploy-graph-path
    Save deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used
  • --deploy-report-path
    Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images
  • --env
    Use specified environment (default $WERF_ENV)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace
    Use specified Kubernetes namespace (default $WERF_NAMESPACE)
  • --network-parallelism
    Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default $WERF_RELEASE)
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --rollback-graph-path
    Save rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used
  • --save-deploy-report
    Save deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-docker-config-json-value
    Shortcut to set current docker config into the .Values.dockerconfigjson
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --skip-dependencies-repo-refresh, -L
    Do not refresh helm chart repositories locally cached index
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --tag
    Provide exact tag version or semver-based pattern, werf will install or upgrade to the latest version of the specified bundle ($WERF_TAG or latest by default)
  • --timeout, -t
    Resources tracking timeout in seconds ($WERF_TIMEOUT by default)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk bundle copy

Usage:
d8 dk bundle copy [options]

Copy published bundle into another location

Options

  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repos
  • --from
    Source address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.
  • --helm-compatible-chart, -C
    Set chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default true or $WERF_HELM_COMPATIBLE_CHART.
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --rename-chart
    Force setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --to
    Destination address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk bundle publish

Usage:
d8 dk bundle publish [IMAGE_NAME...] [options]

Publish bundle

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-custom-tag
    Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --build-report-path
    Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --disable-default-secret-values
    Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)
  • --disable-default-values
    Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --helm-compatible-chart, -C
    Set chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default false or $WERF_HELM_COMPATIBLE_CHART.
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --rename-chart
    Force setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --save-build-report
    Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --skip-dependencies-repo-refresh, -L
    Do not refresh helm chart repositories locally cached index
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tag
    Publish bundle into container registry repo by the provided tag ($WERF_TAG or latest by default)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-custom-tag
    Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk bundle render

Usage:
d8 dk bundle render [options]

Render Kubernetes manifests from bundle

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --bundle-dir, -b
    Get extracted bundle from directory instead of registry (default $WERF_BUNDLE_DIR)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --disable-default-secret-values
    Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images
  • --env
    Use specified environment (default $WERF_ENV)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --include-crds
    Include CRDs in the templated output (default $WERF_INCLUDE_CRDS)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-version
    Set specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace
    Use specified Kubernetes namespace (default $WERF_NAMESPACE)
  • --network-parallelism
    Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)
  • --output
    Write render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default $WERF_RELEASE)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-docker-config-json-value
    Shortcut to set current docker config into the .Values.dockerconfigjson
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --tag
    Provide exact tag version or semver-based pattern, werf will render the latest version of the specified bundle ($WERF_TAG or latest by default)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --validate
    Validate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk ci-env

Usage:
d8 dk ci-env CI_SYSTEM [options]

Generate werf environment variables for specified CI system

Options

  • --as-env-file
    Create the .env file and print the path for sourcing (default $WERF_AS_ENV_FILE).
  • --as-file
    Create the script and print the path for sourcing (default $WERF_AS_FILE).
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command will copy specified or default (~/.docker) config to the temporary directory and may perform additional login with new config.
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --login-to-registry
    Log in to CI-specific registry automatically if possible (default $WERF_LOGIN_TO_REGISTRY).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to custom file (default $WERF_OUTPUT_FILE_PATH).
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --shell
    Set to cmdexe, powershell or use the default behaviour that is compatible with any unix shell (default $WERF_SHELL).
  • --tagging-strategy
    stub
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk cleanup

Usage:
d8 dk cleanup [options]

Cleanup project images in the container registry

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and delete images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --keep-stages-built-within-last-n-hours
    Keep stages that were built within last hours (default $WERF_KEEP_STAGES_BUILT_WITHIN_LAST_N_HOURS or 2)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Scan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --scan-context-namespace-only
    Scan for used images only in namespace linked with context for each available context in kube-config (or only for the context specified with option --kube-context). When disabled will scan all namespaces in all contexts (or only for the context specified with option --kube-context). (Default $WERF_SCAN_CONTEXT_NAMESPACE_ONLY)
  • --scan-context-only
    Scan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --without-kube
    Do not skip deployed Kubernetes images (default $WERF_WITHOUT_KUBE)

d8 dk completion

Usage:
d8 dk completion [options]

Generate bash completion scripts

Options

  • --shell
    Set to bash, zsh, fish or powershell (default $WERF_SHELL or bash)

d8 dk compose

Usage:
d8 dk compose [options]

Work with docker-compose

d8 dk compose config

Usage:
d8 dk compose config [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]

Run docker-compose config command with forwarded image names.

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-compose-bin-path
    DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)
  • --docker-compose-command-options
    Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)
  • --docker-compose-options
    Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk compose down

Usage:
d8 dk compose down [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]

Run docker-compose down command with forwarded image names.

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-compose-bin-path
    DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)
  • --docker-compose-command-options
    Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)
  • --docker-compose-options
    Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk compose run

Usage:
d8 dk compose run [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] -- SERVICE [COMMAND] [ARGS...]

Run docker-compose run command with forwarded image names.

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-compose-bin-path
    DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)
  • --docker-compose-command-options
    Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)
  • --docker-compose-options
    Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk compose up

Usage:
d8 dk compose up [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] [--] [SERVICE...]

Run docker-compose up command with forwarded image names.

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-compose-bin-path
    DEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)
  • --docker-compose-command-options
    Define docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)
  • --docker-compose-options
    Define docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk config

Usage:
d8 dk config [options]

Work with werf.yaml

d8 dk config graph

Usage:
d8 dk config graph [IMAGE_NAME...] [options]

Print dependency graph for images in werf.yaml.

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk config list

Usage:
d8 dk config list [options]

List image and artifact names defined in werf.yaml.

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-images-only
    Show only final images
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --images-only
    Show only final images
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk config render

Usage:
d8 dk config render [IMAGE_NAME...] [options]

Render werf.yaml.

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk converge

Usage:
d8 dk converge [options]

Build and push images, then deploy application into Kubernetes

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-custom-tag
    Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --atomic
    Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)
  • --auto-rollback, -R
    Enable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)
  • --build-report-path
    Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --deploy-graph-path
    Save deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used
  • --deploy-report-path
    Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --disable-default-secret-values
    Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)
  • --disable-default-values
    Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --network-parallelism
    Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --rollback-graph-path
    Save rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used
  • --save-build-report
    Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path
  • --save-deploy-report
    Save deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-docker-config-json-value
    Shortcut to set current docker config into the .Values.dockerconfigjson
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --skip-dependencies-repo-refresh, -L
    Do not refresh helm chart repositories locally cached index
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --timeout, -t
    Resources tracking timeout in seconds ($WERF_TIMEOUT by default)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-custom-tag
    Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk cr

Usage:
d8 dk cr [options]

Work with container registry: authenticate, list and remove images, etc.

d8 dk cr login

Usage:
d8 dk cr login registry [options]

Login into remote registry.

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --password, -p
    Use specified password for login (default $WERF_PASSWORD)
  • --password-stdin
    Read password from stdin for login (default $WERF_PASSWORD_STDIN)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --username, -u
    Use specified username for login (default $WERF_USERNAME)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk cr logout

Usage:
d8 dk cr logout registry [options]

Logout from a remote registry.

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk dismiss

Usage:
d8 dk dismiss [options]

Delete werf release from Kubernetes

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --deploy-report-path
    Change deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-deploy-report
    Use deploy report, previously saved with --save-deploy-report (by default $WERF_USE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --with-hooks
    Delete Helm Release hooks getting from existing revisions (default $WERF_WITH_HOOKS or true)
  • --with-namespace
    Delete Kubernetes Namespace after purging Helm Release (default $WERF_WITH_NAMESPACE)

d8 dk export

Usage:
d8 dk export [IMAGE_NAME...] [options]

Export images

Options

  • --add-label
    Add label to exported images (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_EXPORT_ADD_LABEL_* (e.g. $WERF_EXPORT_ADD_LABEL_1=labelName1=labelValue1, $WERF_EXPORT_ADD_LABEL_2=labelName2=labelValue2)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tag
    Set a tag template (can specify multiple). It is necessary to use image name shortcut %image% or %image_slug% if multiple images are exported (e.g. REPO:TAG-%image% or REPO-%image%:TAG)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk helm

Usage:
d8 dk helm [options]

Manage application deployment with helm

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm create

Usage:
d8 dk helm create NAME [options]

create a new chart with the given name

Options

  • --starter, -p
    the name or absolute path to Helm starter scaffold

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm dependency

Usage:
d8 dk helm dependency update|build|list [options]

manage a chart's dependencies

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm dependency build

Usage:
d8 dk helm dependency update|build|list build CHART [options]

rebuild the charts/ directory based on the Chart.lock file

Options

  • --keyring
    keyring containing public keys
  • --skip-refresh
    do not refresh the local repository cache
  • --verify
    verify the packages against signatures

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm dependency list

Usage:
d8 dk helm dependency update|build|list list CHART [options]

list the dependencies for the given chart

Options

  • --max-col-width
    maximum column width for output table

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm dependency update

Usage:
d8 dk helm dependency update|build|list update CHART [options]

update charts/ based on the contents of Chart.yaml

Options

  • --keyring
    keyring containing public keys
  • --skip-refresh
    do not refresh the local repository cache
  • --verify
    verify the packages against signatures

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm env

Usage:
d8 dk helm env [options]

helm client environment information

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get

Usage:
d8 dk helm get [options]

download extended information of a named release

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get all

Usage:
d8 dk helm get all RELEASE_NAME [options]

download all information for a named release

Options

  • --revision
    get the named release with revision
  • --template
    go template for formatting the output, eg: {{.Release.Name}}

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get hooks

Usage:
d8 dk helm get hooks RELEASE_NAME [options]

download all hooks for a named release

Options

  • --revision
    get the named release with revision

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get manifest

Usage:
d8 dk helm get manifest RELEASE_NAME [options]

download the manifest for a named release

Options

  • --revision
    get the named release with revision

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get metadata

Usage:
d8 dk helm get metadata RELEASE_NAME [options]

This command fetches metadata for a given release

Options

  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --revision
    specify release revision

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get notes

Usage:
d8 dk helm get notes RELEASE_NAME [options]

download the notes for a named release

Options

  • --revision
    get the named release with revision

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get values

Usage:
d8 dk helm get values RELEASE_NAME [options]

download the values file for a named release

Options

  • --all, -a
    dump all (computed) values
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --revision
    get the named release with revision

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm get-autogenerated-values

Usage:
d8 dk helm get-autogenerated-values [IMAGE_NAME...] [options]

Get service values yaml generated by werf for helm chart during deploy

Options

  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-custom-tag
    Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm get-namespace

Usage:
d8 dk helm get-namespace [options]

Print Kubernetes Namespace that will be used in current configuration with specified params.

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm get-release

Usage:
d8 dk helm get-release [options]

Print Helm Release name that will be used in current configuration with specified params.

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm history

Usage:
d8 dk helm history RELEASE_NAME [options]

fetch release history

Options

  • --max
    maximum number of revision to include in history
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm install

Usage:
d8 dk helm install [NAME] [CHART] [options]

install a chart

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --atomic
    if set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used
  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --cleanup-on-fail
    allow deletion of new resources created in this installation when install fails
  • --create-namespace
    create the release namespace if not present
  • --dependency-update
    update dependencies if they are missing before installing the chart
  • --deploy-report-path
    save deploy report in JSON to the specified path
  • --description
    add a custom description
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --disable-openapi-validation
    if set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
  • --dry-run
    simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.
  • --enable-dns
    enable DNS lookups when rendering templates
  • --force
    force resource updates through a replacement strategy
  • --generate-name, -g
    generate the name (and omit the NAME parameter)
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --labels, -l
    Labels that would be added to release metadata. Should be divided by comma.
  • --name-template
    specify template used to name the release
  • --no-hooks
    prevent hooks from running during install
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --post-renderer
    the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path
  • --post-renderer-args
    an argument to the post-renderer (can specify multiple)
  • --render-subchart-notes
    if set, render subchart notes along with the parent
  • --replace
    re-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production
  • --repo
    chart repository url where to locate the requested chart
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --set-file
    set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)
  • --set-json
    set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)
  • --set-literal
    set a literal STRING value on the command line
  • --set-string
    set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --skip-crds
    if set, no CRDs will be installed. By default, CRDs are installed if not already present
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)
  • --username
    chart repository username where to locate the requested chart
  • --values, -f
    specify values in a YAML file or a URL (can specify multiple)
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
  • --wait
    if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout
  • --wait-for-jobs
    if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm lint

Usage:
d8 dk helm lint PATH [options]

examine a chart for possible issues

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --env
    Use specified environment (default $WERF_ENV)
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --kube-version
    Kubernetes version used for capabilities and deprecation checks
  • --quiet
    print only warnings and errors
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --set-file
    set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)
  • --set-json
    set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)
  • --set-literal
    set a literal STRING value on the command line
  • --set-string
    set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --strict
    fail on lint warnings
  • --values, -f
    specify values in a YAML file or a URL (can specify multiple)
  • --with-subcharts
    lint dependent charts

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm list

Usage:
d8 dk helm list [options]

list releases

Options

  • --all, -a
    show all releases without any filter applied
  • --all-namespaces, -A
    list releases across all namespaces
  • --date, -d
    sort by release date
  • --deployed
    show deployed releases. If no other is specified, this will be automatically enabled
  • --failed
    show failed releases
  • --filter, -f
    a regular expression (Perl compatible). Any releases that match the expression will be included in the results
  • --max, -m
    maximum number of releases to fetch
  • --no-headers
    don't print headers when using the default output format
  • --offset
    next release index in the list, used to offset from start value
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --pending
    show pending releases
  • --reverse, -r
    reverse the sort order
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Works only for secret(default) and configmap storage backends.
  • --short, -q
    output short (quiet) listing format
  • --superseded
    show superseded releases
  • --time-format
    format time using golang time formatter. Example: --time-format "2006-01-02 15:04:05Z0700"
  • --uninstalled
    show uninstalled releases (if 'helm uninstall --keep-history' was used)
  • --uninstalling
    show releases that are currently being uninstalled

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm package

Usage:
d8 dk helm package [CHART_PATH] [...] [options]

package a chart directory into a chart archive

Options

  • --app-version
    set the appVersion on the chart to this version
  • --dependency-update, -u
    update dependencies from "Chart.yaml" to dir "charts/" before packaging
  • --destination, -d
    location to write the chart.
  • --key
    name of the key to use when signing. Used if --sign is true
  • --keyring
    location of a public keyring
  • --passphrase-file
    location of a file which contains the passphrase for the signing key. Use "-" in order to read from stdin.
  • --sign
    use a PGP private key to sign this package
  • --version
    set the version on the chart to this semver version

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm plugin

Usage:
d8 dk helm plugin [options]

install, list, or uninstall Helm plugins

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm plugin install

Usage:
d8 dk helm plugin install [options] <path|url>...

install one or more Helm plugins

Options

  • --version
    specify a version constraint. If this is not specified, the latest version is installed

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm plugin list

Usage:
d8 dk helm plugin list [options]

list installed Helm plugins

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm plugin uninstall

Usage:
d8 dk helm plugin uninstall <plugin>... [options]

uninstall one or more Helm plugins

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm plugin update

Usage:
d8 dk helm plugin update <plugin>... [options]

update one or more Helm plugins

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm pull

Usage:
d8 dk helm pull [chart URL | repo/chartname] [...] [options]

download a chart from a repository and (optionally) unpack it in local directory

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --destination, -d
    location to write the chart. If this and untardir are specified, untardir is appended to this
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored.
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --prov
    fetch the provenance file, but don't perform verification
  • --repo
    chart repository url where to locate the requested chart
  • --untar
    if set to true, will untar the chart after downloading it
  • --untardir
    if untar is specified, this flag specifies the name of the directory into which the chart is expanded
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm registry

Usage:
d8 dk helm registry [options]

login to or logout from a registry

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm registry login

Usage:
d8 dk helm registry login [host] [options]

login to a registry

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify registry client using this SSL certificate file
  • --insecure
    allow connections to TLS registry without certs
  • --key-file
    identify registry client using this SSL key file
  • --password, -p
    registry password or identity token
  • --password-stdin
    read password or identity token from stdin
  • --username, -u
    registry username

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm registry logout

Usage:
d8 dk helm registry logout [host] [options]

logout from a registry

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] [options]

add, list, remove, update, and index chart repositories

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo add

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] add [NAME] [URL] [options]

add a chart repository

Options

  • --allow-deprecated-repos
    by default, this command will not allow adding official repos that have been permanently deleted. This disables that behavior
  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --force-update
    replace (overwrite) the repo if it already exists
  • --insecure-skip-tls-verify
    skip tls certificate checks for the repository
  • --key-file
    identify HTTPS client using this SSL key file
  • --no-update
    Ignored. Formerly, it would disabled forced updates. It is deprecated by force-update.
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password
  • --password-stdin
    read chart repository password from stdin
  • --username
    chart repository username

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo index

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] index [DIR] [options]

generate an index file given a directory containing packaged charts

Options

  • --json
    output in JSON format
  • --merge
    merge the generated index into the given index
  • --url
    url of chart repository

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo list

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] list [options]

list chart repositories

Options

  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo remove

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] remove [REPO1 [REPO2 ...]] [options]

remove one or more chart repositories

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm repo update

Usage:
d8 dk helm repo add|remove|list|index|update [ARGS] update [REPO1 [REPO2 ...]] [options]

update information of available charts locally from chart repositories

Options

  • --fail-on-repo-update-fail
    update fails if any of the repository updates fail

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm rollback

Usage:
d8 dk helm rollback <RELEASE> [REVISION] [options]

roll back a release to a previous revision

Options

  • --cleanup-on-fail
    allow deletion of new resources created in this rollback when rollback fails
  • --deploy-report-path
    save deploy report in JSON to the specified path
  • --dry-run
    simulate a rollback
  • --force
    force resource update through delete/recreate if needed
  • --history-max
    limit the maximum number of revisions saved per release. Use 0 for no limit
  • --no-hooks
    prevent hooks from running during rollback
  • --recreate-pods
    performs pods restart for the resource if applicable
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)
  • --wait
    if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout
  • --wait-for-jobs
    if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm search

Usage:
d8 dk helm search [keyword] [options]

search for a keyword in charts

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm search hub

Usage:
d8 dk helm search [keyword] hub [KEYWORD] [options]

search for charts in the Artifact Hub or your own hub instance

Options

  • --endpoint
    Hub instance to query for charts
  • --fail-on-no-result
    search fails if no results are found
  • --list-repo-url
    print charts repository URL
  • --max-col-width
    maximum column width for output table
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm search repo

Usage:
d8 dk helm search [keyword] repo [keyword] [options]

search repositories for a keyword in charts

Options

  • --devel
    use development versions (alpha, beta, and release candidate releases), too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --fail-on-no-result
    search fails if no results are found
  • --max-col-width
    maximum column width for output table
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --regexp, -r
    use regular expressions for searching repositories you have added
  • --version
    search using semantic versioning constraints on repositories you have added
  • --versions, -l
    show the long listing, with each version of each chart on its own line, for repositories you have added

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm secret

Usage:
d8 dk helm secret [options]

Work with secrets

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm secret decrypt

Usage:
d8 dk helm secret decrypt [options]

Decrypt data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret encrypt

Usage:
d8 dk helm secret encrypt [options]

Encrypt data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret file

Usage:
d8 dk helm secret file [options]

Work with secret files

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm secret file decrypt

Usage:
d8 dk helm secret file decrypt [FILE_PATH] [options]

Decrypt secret file data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret file edit

Usage:
d8 dk helm secret file edit FILE_PATH [options]

Edit or create new secret file

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret file encrypt

Usage:
d8 dk helm secret file encrypt [FILE_PATH] [options]

Encrypt file data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret generate-secret-key

Usage:
d8 dk helm secret generate-secret-key [options]

Generate hex encryption key

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret rotate-secret-key

Usage:
d8 dk helm secret rotate-secret-key [EXTRA_SECRET_VALUES_FILE_PATH...] [options]

Regenerate secret files with new secret key

Options

  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --env
    Use specified environment (default $WERF_ENV)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret values

Usage:
d8 dk helm secret values [options]

Work with secret values files

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm secret values decrypt

Usage:
d8 dk helm secret values decrypt [FILE_PATH] [options]

Decrypt secret values file data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret values edit

Usage:
d8 dk helm secret values edit FILE_PATH [options]

Edit or create new secret values file

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm secret values encrypt

Usage:
d8 dk helm secret values encrypt [FILE_PATH] [options]

Encrypt values file data

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --output-file-path, -o
    Write to file instead of stdout
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

Global options

  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --namespace, -n
    namespace scope for this request
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds

d8 dk helm show

Usage:
d8 dk helm show [options]

show information of a chart

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm show all

Usage:
d8 dk helm show all [CHART] [options]

show all information of the chart

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --repo
    chart repository url where to locate the requested chart
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm show chart

Usage:
d8 dk helm show chart [CHART] [options]

show the chart's definition

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --repo
    chart repository url where to locate the requested chart
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm show crds

Usage:
d8 dk helm show crds [CHART] [options]

show the chart's CRDs

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --repo
    chart repository url where to locate the requested chart
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm show readme

Usage:
d8 dk helm show readme [CHART] [options]

show the chart's README

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --repo
    chart repository url where to locate the requested chart
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm show values

Usage:
d8 dk helm show values [CHART] [options]

show the chart's values

Options

  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --jsonpath
    supply a JSONPath expression to filter the output
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --repo
    chart repository url where to locate the requested chart
  • --username
    chart repository username where to locate the requested chart
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm status

Usage:
d8 dk helm status RELEASE_NAME [options]

display the status of the named release

Options

  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --revision
    if set, display the status of the named release with revision
  • --show-desc
    if set, display the description message of the named release
  • --show-resources
    if set, display the resources of the named release

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm template

Usage:
d8 dk helm template [NAME] [CHART] [options]

locally render templates

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --api-versions, -a
    Kubernetes api versions used for Capabilities.APIVersions
  • --atomic
    if set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used
  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --cleanup-on-fail
    allow deletion of new resources created in this installation when install fails
  • --create-namespace
    create the release namespace if not present
  • --dependency-update
    update dependencies if they are missing before installing the chart
  • --deploy-report-path
    save deploy report in JSON to the specified path
  • --description
    add a custom description
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --disable-openapi-validation
    if set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
  • --dry-run
    simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.
  • --enable-dns
    enable DNS lookups when rendering templates
  • --force
    force resource updates through a replacement strategy
  • --generate-name, -g
    generate the name (and omit the NAME parameter)
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --include-crds
    include CRDs in the templated output
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --is-upgrade
    set .Release.IsUpgrade instead of .Release.IsInstall
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --kube-version
    Kubernetes version used for Capabilities.KubeVersion
  • --labels, -l
    Labels that would be added to release metadata. Should be divided by comma.
  • --name-template
    specify template used to name the release
  • --no-hooks
    prevent hooks from running during install
  • --output-dir
    writes the executed templates to files in output-dir instead of stdout
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --post-renderer
    the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path
  • --post-renderer-args
    an argument to the post-renderer (can specify multiple)
  • --release-name
    use release name in the output-dir path.
  • --render-subchart-notes
    if set, render subchart notes along with the parent
  • --replace
    re-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production
  • --repo
    chart repository url where to locate the requested chart
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --set-file
    set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)
  • --set-json
    set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)
  • --set-literal
    set a literal STRING value on the command line
  • --set-string
    set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --show-only, -s
    only show manifests rendered from the given templates
  • --skip-crds
    if set, no CRDs will be installed. By default, CRDs are installed if not already present
  • --skip-tests
    skip tests from templated output
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)
  • --username
    chart repository username where to locate the requested chart
  • --validate
    validate your manifests against the Kubernetes cluster you are currently pointing at. This is the same validation performed on an install
  • --values, -f
    specify values in a YAML file or a URL (can specify multiple)
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
  • --wait
    if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout
  • --wait-for-jobs
    if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm test

Usage:
d8 dk helm test [RELEASE] [options]

run tests for a release

Options

  • --filter
    specify tests by attribute (currently "name") using attribute=value syntax or '!attribute=value' to exclude a test (can specify multiple or separate values with commas: name=test1,name=test2)
  • --logs
    dump the logs from test pods (this runs after all tests are complete, but before any cleanup)
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm uninstall

Usage:
d8 dk helm uninstall RELEASE_NAME [...] [options]

uninstall a release

Options

  • --cascade
    Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents. Defaults to background.
  • --description
    add a custom description
  • --dry-run
    simulate a uninstall
  • --ignore-not-found
    Treat "release not found" as a successful uninstall
  • --keep-history
    remove all associated resources and mark the release as deleted, but retain the release history
  • --no-hooks
    prevent hooks from running during uninstallation
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)
  • --wait
    if set, will wait until all the resources are deleted before returning. It will wait for as long as --timeout

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm upgrade

Usage:
d8 dk helm upgrade [RELEASE] [CHART] [options]

upgrade a release

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --atomic
    if set, upgrade process rolls back changes made in case of failed upgrade. The --wait flag will be set automatically if --atomic is used
  • --ca-file
    verify certificates of HTTPS-enabled servers using this CA bundle
  • --cert-file
    identify HTTPS client using this SSL certificate file
  • --cleanup-on-fail
    allow deletion of new resources created in this upgrade when upgrade fails
  • --create-namespace
    if --install is set, create the release namespace if not present
  • --dependency-update
    update dependencies if they are missing before installing the chart
  • --deploy-report-path
    save deploy report in JSON to the specified path
  • --description
    add a custom description
  • --devel
    use development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored
  • --disable-openapi-validation
    if set, the upgrade process will not validate rendered templates against the Kubernetes OpenAPI Schema
  • --dry-run
    simulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.
  • --enable-dns
    enable DNS lookups when rendering templates
  • --force
    force resource updates through a replacement strategy
  • --history-max
    limit the maximum number of revisions saved per release. Use 0 for no limit
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-skip-tls-verify
    skip tls certificate checks for the chart download
  • --install, -i
    if a release by this name doesn't already exist, run an install
  • --key-file
    identify HTTPS client using this SSL key file
  • --keyring
    location of public keys used for verification
  • --labels, -l
    Labels that would be added to release metadata. Should be separated by comma. Original release labels will be merged with upgrade labels. You can unset label using null.
  • --no-hooks
    disable pre/post upgrade hooks
  • --output, -o
    prints the output in the specified format. Allowed values: table, json, yaml
  • --pass-credentials
    pass credentials to all domains
  • --password
    chart repository password where to locate the requested chart
  • --plain-http
    use insecure HTTP connections for the chart download
  • --post-renderer
    the path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path
  • --post-renderer-args
    an argument to the post-renderer (can specify multiple)
  • --recreate-pods
    performs pods restart for the resource if applicable
  • --render-subchart-notes
    if set, render subchart notes along with the parent
  • --repo
    chart repository url where to locate the requested chart
  • --reset-then-reuse-values
    when upgrading, reset the values to the ones built into the chart, apply the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' or '--reuse-values' is specified, this is ignored
  • --reset-values
    when upgrading, reset the values to the ones built into the chart
  • --reuse-values
    when upgrading, reuse the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' is specified, this is ignored
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    set values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --set-file
    set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)
  • --set-json
    set JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)
  • --set-literal
    set a literal STRING value on the command line
  • --set-string
    set STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
  • --skip-crds
    if set, no CRDs will be installed when an upgrade is performed with install flag enabled. By default, CRDs are installed if not already present, when an upgrade is performed with install flag enabled
  • --timeout
    time to wait for any individual Kubernetes operation (like Jobs for hooks)
  • --username
    chart repository username where to locate the requested chart
  • --values, -f
    specify values in a YAML file or a URL (can specify multiple)
  • --verify
    verify the package before using it
  • --version
    specify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
  • --wait
    if set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout
  • --wait-for-jobs
    if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm verify

Usage:
d8 dk helm verify PATH [options]

verify that a chart at the given path has been signed and is valid

Options

  • --keyring
    keyring containing public keys

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk helm version

Usage:
d8 dk helm version [options]

print the client version information

Options

  • --client, -c
    display client version information
  • --short
    print the version number
  • --template
    template for version string format

Global options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --namespace, -n
    namespace scope for this request
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk host

Usage:
d8 dk host [options]

Work with werf cache and data of all projects on the host machine

d8 dk host cleanup

Usage:
d8 dk host cleanup [options]

Cleanup old unused werf cache and data of all projects on host machine.

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --force
    Force deletion of images which are being used by some containers (default $WERF_FORCE)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --project-name, -N
    Set a specific project name (default $WERF_PROJECT_NAME)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk host purge

Usage:
d8 dk host purge [options]

Purge werf images, cache and other data for all projects on host machine

Options

  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --force
    First remove containers that use werf docker images which are going to be deleted
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --project-name, -N
    Set a specific project name (default $WERF_PROJECT_NAME)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk kube-run

Usage:
d8 dk kube-run [options] [IMAGE_NAME] [-- COMMAND ARG...]

Run container for project image in Kubernetes

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --auto-pull-secret
    Automatically create docker config secret in the namespace and plug it via pod's imagePullSecrets for private registry access (default $WERF_AUTO_PULL_SECRET or true if not specified)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --copy-from
    Copy file/dir from container to local machine after user command execution. Example: "/from/file:to". Can be specified multiple times. Can also be defined with "$WERF_COPY_FROM_*", e.g. "WERF_COPY_FROM_1=from:to".
  • --copy-to
    Copy file/dir from local machine to container before user command execution. Example: "from:/to/file". Can be specified multiple times. Can also be defined with "$WERF_COPY_TO_*", e.g. "WERF_COPY_TO_1=from:to".
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --extra-options
    Pass extra options to "kubectl run" command, which will create a Pod (default $WERF_EXTRA_OPTIONS)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --interactive, -i
    Enable interactive mode (default $WERF_INTERACTIVE or false if not specified)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --overrides
    Inline JSON to override/extend any fields in created Pod, e.g. to add imagePullSecrets field (default $WERF_OVERRIDES). %pod_name% and %container_name% will be replaced with names of a created pod and a container.
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --pod
    Set created pod name (default $WERF_POD or autogenerated if not specified)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --rm
    Remove pod and other created resources after command completion (default $WERF_RM or true if not specified)
  • --rm-with-namespace
    Remove also a namespace after command completion (default $WERF_RM_WITH_NAMESPACE or false if not specified)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --tty, -t
    Allocate a TTY (default $WERF_TTY or false if not specified)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk managed-images

Usage:
d8 dk managed-images [options]

Work with managed images which will be preserved during cleanup procedure

d8 dk managed-images add

Usage:
d8 dk managed-images add [options]

Add image record to the list of managed images which will be preserved during cleanup procedure.

Options

  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk managed-images ls

Usage:
d8 dk managed-images ls [options]

List managed images which will be preserved during cleanup procedure.

Options

  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read images from the specified repo
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk managed-images rm

Usage:
d8 dk managed-images rm [options]

Remove image record from the list of managed images which will be preserved during cleanup procedure.

Options

  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk plan

Usage:
d8 dk plan [options]

Prepare deploy plan and show how resources in a Kubernetes cluster would change on next deploy

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-custom-tag
    Set tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --build-report-path
    Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --disable-default-secret-values
    Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)
  • --disable-default-values
    Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --env
    Use specified environment (default $WERF_ENV)
  • --exit-code
    If true, returns exit code 0 if no changes, exit code 2 if any changes planned or exit code 1 in case of an error (default $WERF_EXIT_CODE or false)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --network-parallelism
    Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --save-build-report
    Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-docker-config-json-value
    Shortcut to set current docker config into the .Values.dockerconfigjson
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --skip-dependencies-repo-refresh, -L
    Do not refresh helm chart repositories locally cached index
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --timeout, -t
    Resources tracking timeout in seconds ($WERF_TIMEOUT by default)
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-custom-tag
    Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk purge

Usage:
d8 dk purge [options]

Purge all project images in the container registry

Options

  • --allowed-docker-storage-volume-usage
    Set allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)
  • --allowed-docker-storage-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)
  • --allowed-local-cache-volume-usage
    Set allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)
  • --allowed-local-cache-volume-usage-margin
    During cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-auto-host-cleanup
    Disable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to delete images from the specified repo
  • --docker-server-storage-path
    Use specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk render

Usage:
d8 dk render [IMAGE_NAME...] [options]

Render Kubernetes templates

Options

  • --add-annotation
    Add annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)
  • --add-label
    Add label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)
  • --build-report-path
    Change build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --disable-default-secret-values
    Do not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)
  • --disable-default-values
    Do not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --hooks-status-progress-period
    Hooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
  • --ignore-secret-key
    Disable secrets decryption (default $WERF_IGNORE_SECRET_KEY)
  • --include-crds
    Include CRDs in the templated output (default $WERF_INCLUDE_CRDS)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --introspect-before-error
    Introspect failed stage in the clean state, before running all assembly instructions of the stage
  • --introspect-error
    Introspect failed stage in the state, right after running failed assembly instruction
  • --introspect-stage
    Introspect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --kube-version
    Set specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --namespace
    Use specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)
  • --network-parallelism
    Parallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)
  • --output
    Write render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)
  • --parallel, -p
    Run in parallel (default $WERF_PARALLEL or true)
  • --parallel-tasks-limit
    Parallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --release
    Use specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)
  • --releases-history-max
    Max releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --save-build-report
    Save build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --secret-values
    Specify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)
  • --set
    Set helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)
  • --set-docker-config-json-value
    Shortcut to set current docker config into the .Values.dockerconfigjson
  • --set-file
    Set values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)
  • --set-string
    Set STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)
  • --show-only, -s
    only show manifests rendered from the given templates
  • --skip-dependencies-repo-refresh, -L
    Do not refresh helm chart repositories locally cached index
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --status-progress-period
    Status progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
  • --stub-tags
    Use stubs instead of real tags (default $WERF_STUB_TAGS)
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --use-custom-tag
    Use a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")
  • --validate
    Validate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)
  • --values
    Specify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
  • --without-images
    Disable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)

d8 dk run

Usage:
d8 dk run [options] [IMAGE_NAME] [-- COMMAND ARG...]

Run container for project image

Options

  • --bash
    Use predefined docker options and command for debug
  • --cache-repo
    Specify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)
  • --config
    Use custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)
  • --config-templates-dir
    Custom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)
  • --container-registry-mirror
    (Buildah-only) Use specified mirrors for docker.io
  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --dir
    Use specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)
  • --docker-config
    Specify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo
  • --docker-options
    Define docker run options (default $WERF_DOCKER_OPTIONS)
  • --dry-run
    Indicate what the command would do without actually doing that (default $WERF_DRY_RUN)
  • --env
    Use specified environment (default $WERF_ENV)
  • --final-repo
    Container registry storage address (default $WERF_FINAL_REPO)
  • --final-repo-container-registry
    Choose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --final-repo-docker-hub-password
    final-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)
  • --final-repo-docker-hub-token
    final-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)
  • --final-repo-docker-hub-username
    final-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)
  • --final-repo-github-token
    final-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)
  • --final-repo-harbor-password
    final-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)
  • --final-repo-harbor-username
    final-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)
  • --final-repo-quay-token
    final-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)
  • --follow
    Enable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree
  • --git-work-tree
    Use specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)
  • --giterminism-config
    Custom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --insecure-helm-dependencies
    Allow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)
  • --insecure-registry
    Use plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-project-dir
    Print current project directory path (default $WERF_LOG_PROJECT_DIR)
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --platform
    Enable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --repo
    Container registry storage address (default $WERF_REPO)
  • --repo-container-registry
    Choose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).
  • --repo-docker-hub-password
    repo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)
  • --repo-docker-hub-token
    repo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)
  • --repo-docker-hub-username
    repo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)
  • --repo-github-token
    repo GitHub token (default $WERF_REPO_GITHUB_TOKEN)
  • --repo-harbor-password
    repo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)
  • --repo-harbor-username
    repo Harbor username (default $WERF_REPO_HARBOR_USERNAME)
  • --repo-quay-token
    repo quay.io token (default $WERF_REPO_QUAY_TOKEN)
  • --require-built-images, -Z
    Requires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)
  • --secondary-repo
    Specify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)
  • --shell
    Use predefined docker options and command for debug
  • --skip-tls-verify-registry
    Skip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)
  • --ssh-key
    Use only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}
  • --synchronization, -S
    Address of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).
  • --virtual-merge
    Enable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)

d8 dk slugify

Usage:
d8 dk slugify STRING [options]

Print slugged string by specified format.

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --format, -f
    r|helm-release: suitable for Helm Release ns|kubernetes-namespace: suitable for Kubernetes Namespace tag|docker-tag: suitable for Docker Tag
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk synchronization

Usage:
d8 dk synchronization [options]

Run synchronization server

Options

  • --debug
    Enable debug (default $WERF_DEBUG).
  • --dev
    Enable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development
  • --dev-branch
    Set dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")
  • --dev-ignore
    Add rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)
  • --home-dir
    Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
  • --host
    Bind synchronization server to the specified host (default localhost or $WERF_HOST)
  • --kube-config
    Kubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)
  • --kube-config-base64
    Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
  • --kube-context
    Kubernetes config context (default $WERF_KUBE_CONTEXT)
  • --kubernetes
    Use kubernetes lock-manager stages-storage-cache (default $WERF_KUBERNETES)
  • --kubernetes-namespace-prefix
    Use specified prefix for namespaces created for lock-manager and stages-storage-cache (defaults to 'werf-synchronization-' when --kubernetes option is used or $WERF_KUBERNETES_NAMESPACE_PREFIX)
  • --local
    Use file lock-manager and file stages-storage-cache (true by default or $WERF_LOCAL)
  • --local-lock-manager-base-dir
    Use specified directory as base for file lock-manager (~/.werf/synchronization_server/lock_manager by default or $WERF_LOCAL_LOCK_MANAGER_BASE_DIR)
  • --local-stages-storage-cache-base-dir
    Use specified directory as base for file stages-storage-cache (~/.werf/synchronization_server/stages_storage_cache by default or $WERF_LOCAL_STAGES_STORAGE_CACHE_BASE_DIR)
  • --log-color-mode
    Set log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.
  • --log-debug
    Enable debug (default $WERF_LOG_DEBUG).
  • --log-pretty
    Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).
  • --log-quiet
    Disable explanatory output (default $WERF_LOG_QUIET).
  • --log-terminal-width
    Set log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140
  • --log-time
    Add time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).
  • --log-time-format
    Specify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).
  • --log-verbose
    Enable verbose output (default $WERF_LOG_VERBOSE).
  • --loose-giterminism
    Loose werf giterminism mode restrictions
  • --port
    Bind synchronization server to the specified port (default 55581 or $WERF_PORT)
  • --quiet
    Disable explanatory output (default $WERF_QUIET).
  • --tmp-dir
    Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
  • --ttl
    Time to live for lock-manager locks and stages-storage-cache records (default $WERF_TTL)
  • --verbose
    Enable verbose output (default $WERF_VERBOSE).

d8 dk version

Usage:
d8 dk version [options]

Print version

d8 help

Help about any command

d8 k

kubectl controls the Kubernetes cluster manager

Options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k alpha

Usage:
d8 k alpha [options]

Commands for features in alpha

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k annotate

Usage:
d8 k annotate [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]

Update the annotations on a resource

Options

  • --all
    Select all resources, in the namespace of the specified resource types.
  • --all-namespaces, -A
    If true, check the specified action in all namespaces.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to update the annotation
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --list
    If true, display the annotations for a given resource.
  • --local
    If true, annotation will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --overwrite
    If true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --resource-version
    If non-empty, the annotation update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k api-resources

Usage:
d8 k api-resources [options]

Print the supported API resources on the server

Options

  • --api-group
    Limit to resources in the specified API group.
  • --cached
    Use the cached list of resources if available.
  • --categories
    Limit to resources that belong to the specified categories.
  • --namespaced
    If false, non-namespaced resources will be returned, otherwise returning namespaced resources by default.
  • --no-headers
    When using the default or custom-column output format, don't print headers (default print headers).
  • --output, -o
    Output format. One of: (wide, name).
  • --sort-by
    If non-empty, sort list of resources using specified field. The field can be either 'name' or 'kind'.
  • --verbs
    Limit to resources that support the specified verbs.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k api-versions

Usage:
d8 k api-versions [options]

Print the supported API versions on the server, in the form of "group/version"

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k apply

Usage:
d8 k apply (-f FILENAME | -k DIRECTORY) [options]

Apply a configuration to a resource by file name or stdin

Options

  • --all
    Select all resources in the namespace of the specified resource types.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --cascade
    Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    The files that contain the configurations to apply.
  • --force
    If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
  • --force-conflicts
    If true, server-side apply will force the changes against conflicts.
  • --grace-period
    Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).
  • --kustomize, -k
    Process a kustomization directory. This flag can't be used together with -f or -R.
  • --openapi-patch
    If true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked-in types.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --overwrite
    Automatically resolve conflicts between the modified and live configuration by using values from the modified configuration
  • --prune
    Automatically delete resource objects, that do not appear in the configs and are created by either apply or create --save-config. Should be used with either -l or --all.
  • --prune-allowlist
    Overwrite the default allowlist with for --prune
  • --prune-whitelist
    Overwrite the default whitelist with for --prune
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --server-side
    If true, apply runs in the server instead of the client.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --timeout
    The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --wait
    If true, wait for resources to be gone before returning. This waits for finalizers.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k apply edit-last-applied

Usage:
d8 k apply (-f FILENAME | -k DIRECTORY) edit-last-applied (RESOURCE/NAME | -f FILENAME) [options]

Edit latest last-applied-configuration annotations of a resource/object

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files to use to edit the resource
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --windows-line-endings
    Defaults to the line ending native to your platform.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k apply set-last-applied

Usage:
d8 k apply (-f FILENAME | -k DIRECTORY) set-last-applied -f FILENAME [options]

Set the last-applied-configuration annotation on a live object to match the contents of a file

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --create-annotation
    Will create 'last-applied-configuration' annotations if current objects doesn't have one
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --filename, -f
    Filename, directory, or URL to files that contains the last-applied-configuration annotations
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k apply view-last-applied

Usage:
d8 k apply (-f FILENAME | -k DIRECTORY) view-last-applied (TYPE [NAME | -l label] | TYPE/NAME | -f FILENAME) [options]

View the latest last-applied-configuration annotations of a resource/object

Options

  • --all
    Select all resources in the namespace of the specified resource types
  • --filename, -f
    Filename, directory, or URL to files that contains the last-applied-configuration annotations
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. Must be one of (yaml, json)
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k attach

Usage:
d8 k attach (POD | TYPE/NAME) -c CONTAINER [options]

Attach to a running container

Options

  • --container, -c
    Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
  • --quiet, -q
    Only print output from the remote session
  • --stdin, -i
    Pass stdin to the container
  • --tty, -t
    Stdin is a TTY

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k auth

Usage:
d8 k auth [options]

Inspect authorization

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k auth can-i

Usage:
d8 k auth can-i VERB [TYPE | TYPE/NAME | NONRESOURCEURL] [options]

Check whether an action is allowed

Options

  • --all-namespaces, -A
    If true, check the specified action in all namespaces.
  • --list
    If true, prints all allowed actions.
  • --no-headers
    If true, prints allowed actions without headers
  • --quiet, -q
    If true, suppress output and just return the exit code.
  • --subresource
    SubResource such as pod/log or deployment/scale

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k auth reconcile

Usage:
d8 k auth reconcile -f FILENAME [options]

Reconciles rules for RBAC role, role binding, cluster role, and cluster role binding objects

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to reconcile.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --remove-extra-permissions
    If true, removes extra permissions added to roles
  • --remove-extra-subjects
    If true, removes extra subjects added to rolebindings
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k auth whoami

Usage:
d8 k auth whoami [options]

Experimental: Check self subject attributes

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k autoscale

Usage:
d8 k autoscale (-f FILENAME | TYPE NAME | TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [options]

Auto-scale a deployment, replica set, stateful set, or replication controller

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --cpu-percent
    The target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to autoscale.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --max
    The upper limit for the number of pods that can be set by the autoscaler. Required.
  • --min
    The lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value.
  • --name
    The name for the newly created object. If not specified, the name of the input resource will be used.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k certificate

Usage:
d8 k certificate SUBCOMMAND [options]

Modify certificate resources

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k certificate approve

Usage:
d8 k certificate SUBCOMMAND approve (-f FILENAME | NAME) [options]

Approve a certificate signing request

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to update
  • --force
    Update the CSR even if it is already approved.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k certificate deny

Usage:
d8 k certificate SUBCOMMAND deny (-f FILENAME | NAME) [options]

Deny a certificate signing request

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to update
  • --force
    Update the CSR even if it is already denied.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k cluster-info

Usage:
d8 k cluster-info [options]

Display cluster information

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k cluster-info dump

Usage:
d8 k cluster-info dump [options]

Dump relevant information for debugging and diagnosis

Options

  • --all-namespaces, -A
    If true, dump all namespaces. If true, --namespaces is ignored.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --namespaces
    A comma separated list of namespaces to dump.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --output-directory
    Where to output the files. If empty or '-' uses stdout, otherwise creates a directory hierarchy in that directory
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k completion

Usage:
d8 k completion SHELL [options]

Output shell completion code for the specified shell (bash, zsh, fish, or powershell)

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config

Usage:
d8 k config SUBCOMMAND [options]

Modify kubeconfig files

Options

  • --kubeconfig
    use a particular kubeconfig file

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config current-context

Usage:
d8 k config SUBCOMMAND current-context [options]

Display the current-context

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config delete-cluster

Usage:
d8 k config SUBCOMMAND delete-cluster NAME [options]

Delete the specified cluster from the kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config delete-context

Usage:
d8 k config SUBCOMMAND delete-context NAME [options]

Delete the specified context from the kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config delete-user

Usage:
d8 k config SUBCOMMAND delete-user NAME [options]

Delete the specified user from the kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config get-clusters

Usage:
d8 k config SUBCOMMAND get-clusters [options]

Display clusters defined in the kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config get-contexts

Usage:
d8 k config SUBCOMMAND get-contexts [(-o|--output=)name)] [options]

Describe one or many contexts

Options

  • --no-headers
    When using the default or custom-column output format, don't print headers (default print headers).
  • --output, -o
    Output format. One of: (name).

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config get-users

Usage:
d8 k config SUBCOMMAND get-users [options]

Display users defined in the kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config rename-context

Usage:
d8 k config SUBCOMMAND rename-context CONTEXT_NAME NEW_NAME [options]

Rename a context from the kubeconfig file

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config set

Usage:
d8 k config SUBCOMMAND set PROPERTY_NAME PROPERTY_VALUE [options]

Set an individual value in a kubeconfig file

Options

  • --set-raw-bytes
    When writing a []byte PROPERTY_VALUE, write the given string directly without base64 decoding.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config set-cluster

Usage:
d8 k config SUBCOMMAND set-cluster NAME [--server=server] [--certificate-authority=path/to/certificate/authority] [--insecure-skip-tls-verify=true] [--tls-server-name=example.com] [options]

Set a cluster entry in kubeconfig

Options

  • --certificate-authority
    Path to certificate-authority file for the cluster entry in kubeconfig
  • --embed-certs
    embed-certs for the cluster entry in kubeconfig
  • --insecure-skip-tls-verify
    insecure-skip-tls-verify for the cluster entry in kubeconfig
  • --proxy-url
    proxy-url for the cluster entry in kubeconfig
  • --server
    server for the cluster entry in kubeconfig
  • --tls-server-name
    tls-server-name for the cluster entry in kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config set-context

Usage:
d8 k config SUBCOMMAND set-context [NAME | --current] [--cluster=cluster_nickname] [--user=user_nickname] [--namespace=namespace] [options]

Set a context entry in kubeconfig

Options

  • --cluster
    cluster for the context entry in kubeconfig
  • --current
    Modify the current context
  • --namespace
    namespace for the context entry in kubeconfig
  • --user
    user for the context entry in kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config set-credentials

Usage:
d8 k config SUBCOMMAND set-credentials NAME [--client-certificate=path/to/certfile] [--client-key=path/to/keyfile] [--token=bearer_token] [--username=basic_user] [--password=basic_password] [--auth-provider=provider_name] [--auth-provider-arg=key=value] [--exec-command=exec_command] [--exec-api-version=exec_api_version] [--exec-arg=arg] [--exec-env=key=value] [options]

Set a user entry in kubeconfig

Options

  • --auth-provider
    Auth provider for the user entry in kubeconfig
  • --auth-provider-arg
    'key=value' arguments for the auth provider
  • --client-certificate
    Path to client-certificate file for the user entry in kubeconfig
  • --client-key
    Path to client-key file for the user entry in kubeconfig
  • --embed-certs
    Embed client cert/key for the user entry in kubeconfig
  • --exec-api-version
    API version of the exec credential plugin for the user entry in kubeconfig
  • --exec-arg
    New arguments for the exec credential plugin command for the user entry in kubeconfig
  • --exec-command
    Command for the exec credential plugin for the user entry in kubeconfig
  • --exec-env
    'key=value' environment values for the exec credential plugin
  • --password
    password for the user entry in kubeconfig
  • --token
    token for the user entry in kubeconfig
  • --username
    username for the user entry in kubeconfig

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --user
    The name of the kubeconfig user to use
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config unset

Usage:
d8 k config SUBCOMMAND unset PROPERTY_NAME [options]

Unset an individual value in a kubeconfig file

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config use-context

Usage:
d8 k config SUBCOMMAND use-context CONTEXT_NAME [options]

Set the current-context in a kubeconfig file

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k config view

Usage:
d8 k config SUBCOMMAND view [options]

Display merged kubeconfig settings or a specified kubeconfig file

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --flatten
    Flatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files)
  • --merge
    Merge the full hierarchy of kubeconfig files
  • --minify
    Remove all information not used by current-context from the output
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --raw
    Display raw byte data and sensitive data
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    use a particular kubeconfig file
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k cordon

Usage:
d8 k cordon NODE [options]

Mark node as unschedulable

Options

  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k cp

Usage:
d8 k cp <file-spec-src> <file-spec-dest> [options]

Copy files and directories to and from containers

Options

  • --container, -c
    Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen
  • --no-preserve
    The copied file/directory's ownership and permissions will not be preserved in the container
  • --retries
    Set number of retries to complete a copy operation from a container. Specify 0 to disable or any negative value for infinite retrying. The default is 0 (no retry).

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create

Usage:
d8 k create -f FILENAME [options]

Create a resource from a file or from stdin

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --edit
    Edit the API resource before creating
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files to use to create the resource
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --raw
    Raw URI to POST to the server. Uses the transport specified by the kubeconfig file.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --windows-line-endings
    Only relevant if --edit=true. Defaults to the line ending native to your platform.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create clusterrole

Usage:
d8 k create -f FILENAME clusterrole NAME --verb=verb --resource=resource.group [--resource-name=resourcename] [--dry-run=server|client|none] [options]

Create a cluster role

Options

  • --aggregation-rule
    An aggregation label selector for combining ClusterRoles.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --non-resource-url
    A partial url that user should have access to.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --resource
    Resource that the rule applies to
  • --resource-name
    Resource in the white list that the rule applies to, repeat this flag for multiple items
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --verb
    Verb that applies to the resources contained in the rule

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create clusterrolebinding

Usage:
d8 k create -f FILENAME clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]

Create a cluster role binding for a particular cluster role

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --clusterrole
    ClusterRole this ClusterRoleBinding should reference
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --group
    Groups to bind to the clusterrole. The flag can be repeated to add multiple groups.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --serviceaccount
    Service accounts to bind to the clusterrole, in the format :. The flag can be repeated to add multiple service accounts.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --user
    Usernames to bind to the clusterrole. The flag can be repeated to add multiple users.
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create configmap

Usage:
d8 k create -f FILENAME configmap NAME [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]

Create a config map from a local file, directory or literal value

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --append-hash
    Append a hash of the configmap to its name.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --from-env-file
    Specify the path to a file to read lines of key=val pairs to create a configmap.
  • --from-file
    Key file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.
  • --from-literal
    Specify a key and literal value to insert in configmap (i.e. mykey=somevalue)
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create cronjob

Usage:
d8 k create -f FILENAME cronjob NAME --image=image --schedule='0/5 * * * ?' -- [COMMAND] [args...] [options]

Create a cron job with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --image
    Image name to run.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --restart
    job's restart policy. supported values: OnFailure, Never
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --schedule
    A schedule in the Cron format the job should be run with.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create deployment

Usage:
d8 k create -f FILENAME deployment NAME --image=image -- [COMMAND] [args...] [options]

Create a deployment with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --image
    Image names to run.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --port
    The port that this container exposes.
  • --replicas, -r
    Number of replicas to create. Default is 1.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create ingress

Usage:
d8 k create -f FILENAME ingress NAME --rule=host/path=service:port[,tls[=secret]]  [options]

Create an ingress with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --annotation
    Annotation to insert in the ingress object, in the format annotation=value
  • --class
    Ingress Class to be used
  • --default-backend
    Default service for backend, in format of svcname:port
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --rule
    Rule in format host/path=service:port[,tls=secretname]. Paths containing the leading character '*' are considered pathType=Prefix. tls argument is optional.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create job

Usage:
d8 k create -f FILENAME job NAME --image=image [--from=cronjob/name] -- [COMMAND] [args...] [options]

Create a job with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --from
    The name of the resource to create a Job from (only cronjob is supported).
  • --image
    Image name to run.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create namespace

Usage:
d8 k create -f FILENAME namespace NAME [--dry-run=server|client|none] [options]

Create a namespace with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create poddisruptionbudget

Usage:
d8 k create -f FILENAME poddisruptionbudget NAME --selector=SELECTOR --min-available=N [--dry-run=server|client|none] [options]

Create a pod disruption budget with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --max-unavailable
    The maximum number or percentage of unavailable pods this budget requires.
  • --min-available
    The minimum number or percentage of available pods this budget requires.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --selector
    A label selector to use for this budget. Only equality-based selector requirements are supported.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create priorityclass

Usage:
d8 k create -f FILENAME priorityclass NAME --value=VALUE --global-default=BOOL [--dry-run=server|client|none] [options]

Create a priority class with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --description
    description is an arbitrary string that usually provides guidelines on when this priority class should be used.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --global-default
    global-default specifies whether this PriorityClass should be considered as the default priority.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --preemption-policy
    preemption-policy is the policy for preempting pods with lower priority.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --value
    the value of this priority class.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create quota

Usage:
d8 k create -f FILENAME quota NAME [--hard=key1=value1,key2=value2] [--scopes=Scope1,Scope2] [--dry-run=server|client|none] [options]

Create a quota with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --hard
    A comma-delimited set of resource=quantity pairs that define a hard limit.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --scopes
    A comma-delimited set of quota scopes that must all match each object tracked by the quota.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create role

Usage:
d8 k create -f FILENAME role NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename] [--dry-run=server|client|none] [options]

Create a role with single rule

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --resource
    Resource that the rule applies to
  • --resource-name
    Resource in the white list that the rule applies to, repeat this flag for multiple items
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --verb
    Verb that applies to the resources contained in the rule

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create rolebinding

Usage:
d8 k create -f FILENAME rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]

Create a role binding for a particular role or cluster role

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --clusterrole
    ClusterRole this RoleBinding should reference
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --group
    Groups to bind to the role. The flag can be repeated to add multiple groups.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --role
    Role this RoleBinding should reference
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --serviceaccount
    Service accounts to bind to the role, in the format :. The flag can be repeated to add multiple service accounts.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --user
    Usernames to bind to the role. The flag can be repeated to add multiple users.
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create secret

Usage:
d8 k create -f FILENAME secret (docker-registry | generic | tls) [options]

Create a secret using a specified subcommand

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create secret docker-registry

Usage:
d8 k create -f FILENAME secret (docker-registry | generic | tls) docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-file=[key=]source] [--dry-run=server|client|none] [options]

Create a secret for use with a Docker registry

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --append-hash
    Append a hash of the secret to its name.
  • --docker-email
    Email for Docker registry
  • --docker-password
    Password for Docker registry authentication
  • --docker-server
    Server location for Docker registry
  • --docker-username
    Username for Docker registry authentication
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --from-file
    Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create secret generic

Usage:
d8 k create -f FILENAME secret (docker-registry | generic | tls) generic NAME [--type=string] [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]

Create a secret from a local file, directory, or literal value

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --append-hash
    Append a hash of the secret to its name.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --from-env-file
    Specify the path to a file to read lines of key=val pairs to create a secret.
  • --from-file
    Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.
  • --from-literal
    Specify a key and literal value to insert in secret (i.e. mykey=somevalue)
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --type
    The type of secret to create
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create secret tls

Usage:
d8 k create -f FILENAME secret (docker-registry | generic | tls) tls NAME --cert=path/to/cert/file --key=path/to/key/file [--dry-run=server|client|none] [options]

Create a TLS secret

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --append-hash
    Append a hash of the secret to its name.
  • --cert
    Path to PEM encoded public key certificate.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --key
    Path to private key associated with given certificate.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create service

Usage:
d8 k create -f FILENAME service [options]

Create a service using a specified subcommand

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create service clusterip

Usage:
d8 k create -f FILENAME service clusterip NAME [--tcp=<port>:<targetPort>] [--dry-run=server|client|none] [options]

Create a ClusterIP service

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --clusterip
    Assign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --tcp
    Port pairs can be specified as ':'.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create service externalname

Usage:
d8 k create -f FILENAME service externalname NAME --external-name external.name [--dry-run=server|client|none] [options]

Create an ExternalName service

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --external-name
    External name of service
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --tcp
    Port pairs can be specified as ':'.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create service loadbalancer

Usage:
d8 k create -f FILENAME service loadbalancer NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]

Create a LoadBalancer service

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --tcp
    Port pairs can be specified as ':'.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create service nodeport

Usage:
d8 k create -f FILENAME service nodeport NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]

Create a NodePort service

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --node-port
    Port used to expose the service on each node in a cluster.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --tcp
    Port pairs can be specified as ':'.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create serviceaccount

Usage:
d8 k create -f FILENAME serviceaccount NAME [--dry-run=server|client|none] [options]

Create a service account with the specified name

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k create token

Usage:
d8 k create -f FILENAME token SERVICE_ACCOUNT_NAME [options]

Request a service account token

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --audience
    Audience of the requested token. If unset, defaults to requesting a token for use with the Kubernetes API server. May be repeated to request a token valid for multiple audiences.
  • --bound-object-kind
    Kind of an object to bind the token to. Supported kinds are Pod, Secret. If set, --bound-object-name must be provided.
  • --bound-object-name
    Name of an object to bind the token to. The token will expire when the object is deleted. Requires --bound-object-kind.
  • --bound-object-uid
    UID of an object to bind the token to. Requires --bound-object-kind and --bound-object-name. If unset, the UID of the existing object is used.
  • --duration
    Requested lifetime of the issued token. If not set, the lifetime will be determined by the server automatically. The server may return a token with a longer or shorter lifetime.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k debug

Usage:
d8 k debug (POD | TYPE[[.VERSION].GROUP]/NAME) [ -- COMMAND [args...] ] [options]

Create debugging sessions for troubleshooting workloads and nodes

Options

  • --arguments-only
    If specified, everything after -- will be passed to the new container as Args instead of Command.
  • --attach
    If true, wait for the container to start running, and then attach as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true.
  • --container, -c
    Container name to use for debug container.
  • --copy-to
    Create a copy of the target Pod with this name.
  • --env
    Environment variables to set in the container.
  • --filename, -f
    identifying the resource to debug
  • --image
    Container image to use for debug container.
  • --image-pull-policy
    The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.
  • --profile
    Debugging profile. Options are "legacy", "general", "baseline", "netadmin", or "restricted".
  • --quiet, -q
    If true, suppress informational messages.
  • --replace
    When used with '--copy-to', delete the original Pod.
  • --same-node
    When used with '--copy-to', schedule the copy of target Pod on the same node.
  • --set-image
    When used with '--copy-to', a list of name=image pairs for changing container images, similar to how 'kubectl set image' works.
  • --share-processes
    When used with '--copy-to', enable process namespace sharing in the copy.
  • --stdin, -i
    Keep stdin open on the container(s) in the pod, even if nothing is attached.
  • --target
    When using an ephemeral container, target processes in this container name.
  • --tty, -t
    Allocate a TTY for the debugging container.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k delete

Usage:
d8 k delete ([-f FILENAME] | [-k DIRECTORY] | TYPE [(NAME | -l label | --all)]) [options]

Delete resources by file names, stdin, resources and names, or by resources and label selector

Options

  • --all
    Delete all resources, in the namespace of the specified resource types.
  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --cascade
    Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --filename, -f
    containing the resource to delete.
  • --force
    If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
  • --grace-period
    Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).
  • --ignore-not-found
    Treat "resource not found" as a successful delete. Defaults to "true" when --all is specified.
  • --interactive, -i
    If true, delete resource only when user confirms. This flag is in Alpha.
  • --kustomize, -k
    Process a kustomization directory. This flag can't be used together with -f or -R.
  • --now
    If true, resources are signaled for immediate shutdown (same as --grace-period=1).
  • --output, -o
    Output mode. Use "-o name" for shorter output (resource/name).
  • --raw
    Raw URI to DELETE to the server. Uses the transport specified by the kubeconfig file.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --timeout
    The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
  • --wait
    If true, wait for resources to be gone before returning. This waits for finalizers.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k describe

Usage:
d8 k describe (-f FILENAME | TYPE [NAME_PREFIX | -l label] | TYPE/NAME) [options]

Show details of a specific resource or group of resources

Options

  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --chunk-size
    Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.
  • --filename, -f
    Filename, directory, or URL to files containing the resource to describe
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-events
    If true, display events related to the described object.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k diff

Usage:
d8 k diff -f FILENAME [options]

Diff the live version against a would-be applied version

Options

  • --concurrency
    Number of objects to process in parallel when diffing against the live version. Larger number = faster, but more memory, I/O and CPU over that shorter period of time.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files contains the configuration to diff
  • --force-conflicts
    If true, server-side apply will force the changes against conflicts.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --prune
    Include resources that would be deleted by pruning. Can be used with -l and default shows all resources would be pruned
  • --prune-allowlist
    Overwrite the default whitelist with for --prune
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --server-side
    If true, apply runs in the server instead of the client.
  • --show-managed-fields
    If true, include managed fields in the diff.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k drain

Usage:
d8 k drain NODE [options]

Drain node in preparation for maintenance

Options

  • --chunk-size
    Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.
  • --delete-emptydir-data
    Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).
  • --delete-local-data
    Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).
  • --disable-eviction
    Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, use with caution.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --force
    Continue even if there are pods that do not declare a controller.
  • --grace-period
    Period of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used.
  • --ignore-daemonsets
    Ignore DaemonSet-managed pods.
  • --pod-selector
    Label selector to filter pods on the node
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --skip-wait-for-delete-timeout
    If pod DeletionTimestamp older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip.
  • --timeout
    The length of time to wait before giving up, zero means infinite

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k edit

Usage:
d8 k edit (RESOURCE/NAME | -f FILENAME) [options]

Edit a resource on the server

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files to use to edit the resource
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --output-patch
    Output the patch if the resource is edited.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --subresource
    If specified, edit will operate on the subresource of the requested object. Must be one of [status]. This flag is beta and may change in the future.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --windows-line-endings
    Defaults to the line ending native to your platform.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k events

Usage:
d8 k events [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file] [--for TYPE/NAME] [--watch] [--types=Normal,Warning] [options]

List events

Options

  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --chunk-size
    Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.
  • --for
    Filter events to only those pertaining to the specified resource.
  • --no-headers
    When using the default output format, don't print headers.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --types
    Output only events of given types.
  • --watch, -w
    After listing the requested events, watch for more events.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k exec

Usage:
d8 k exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] [options]

Execute a command in a container

Options

  • --container, -c
    Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen
  • --filename, -f
    to use to exec into the resource
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
  • --quiet, -q
    Only print output from the remote session
  • --stdin, -i
    Pass stdin to the container
  • --tty, -t
    Stdin is a TTY

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k explain

Usage:
d8 k explain TYPE [--recursive=FALSE|TRUE] [--api-version=api-version-group] [--output=plaintext|plaintext-openapiv2] [options]

Get documentation for a resource

Options

  • --api-version
    Use given api-version (group/version) of the resource.
  • --output
    Format in which to render the schema. Valid values are: (plaintext, plaintext-openapiv2).
  • --recursive
    When true, print the name of all the fields recursively. Otherwise, print the available fields with their description.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k expose

Usage:
d8 k expose (-f FILENAME | TYPE NAME) [--port=port] [--protocol=TCP|UDP|SCTP] [--target-port=number-or-name] [--name=name] [--external-ip=external-ip-of-service] [--type=type] [options]

Take a replication controller, service, deployment or pod and expose it as a new Kubernetes service

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --cluster-ip
    ClusterIP to be assigned to the service. Leave empty to auto-allocate, or set to 'None' to create a headless service.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --external-ip
    Additional external IP address (not managed by Kubernetes) to accept for the service. If this IP is routed to a node, the service can be accessed by this IP in addition to its generated service IP.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to expose a service
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --labels, -l
    Labels to apply to the service created by this call.
  • --load-balancer-ip
    IP to assign to the LoadBalancer. If empty, an ephemeral IP will be created and used (cloud-provider specific).
  • --name
    The name for the newly created object.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --override-type
    The method used to override the generated object: json, merge, or strategic.
  • --overrides
    An inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.
  • --port
    The port that the service should serve on. Copied from the resource being exposed, if unspecified
  • --protocol
    The network protocol for the service to be created. Default is 'TCP'.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --selector
    A label selector to use for this service. Only equality-based selector requirements are supported. If empty (the default) infer the selector from the replication controller or replica set.)
  • --session-affinity
    If non-empty, set the session affinity for the service to this; legal values: 'None', 'ClientIP'
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --target-port
    Name or number for the port on the container that the service should direct traffic to. Optional.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --type
    Type for this service: ClusterIP, NodePort, LoadBalancer, or ExternalName. Default is 'ClusterIP'.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k get

Usage:
d8 k get [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file|custom-columns|custom-columns-file|wide] (TYPE[.VERSION][.GROUP] [NAME | -l label] | TYPE[.VERSION][.GROUP]/NAME ...) [flags] [options]

Display one or many resources

Options

  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --chunk-size
    Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --ignore-not-found
    If the requested object does not exist the command will return exit code 0.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --label-columns, -L
    Accepts a comma separated list of labels that are going to be presented as columns. Names are case-sensitive. You can also use multiple flag options like -L label1 -L label2...
  • --no-headers
    When using the default or custom-column output format, don't print headers (default print headers).
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file, custom-columns, custom-columns-file, wide). See custom columns [https://kubernetes.io/docs/reference/kubectl/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [https://kubernetes.io/docs/reference/kubectl/jsonpath/].
  • --output-watch-events
    Output watch event objects when --watch or --watch-only is used. Existing objects are output as initial ADDED events.
  • --raw
    Raw URI to request from the server. Uses the transport specified by the kubeconfig file.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --server-print
    If true, have the server return the appropriate table output. Supports extension APIs and CRDs.
  • --show-kind
    If present, list the resource type for the requested object(s).
  • --show-labels
    When printing, show all labels as the last column (default hide labels column)
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --sort-by
    If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
  • --subresource
    If specified, gets the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --watch, -w
    After listing/getting the requested object, watch for changes.
  • --watch-only
    Watch for changes to the requested object(s), without listing/getting first.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k kustomize

Usage:
d8 k kustomize DIR [options]

Build a kustomization target from a directory or URL

Options

  • --as-current-user
    use the uid and gid of the command executor to run the function in the container
  • --enable-alpha-plugins
    enable kustomize plugins
  • --enable-helm
    Enable use of the Helm chart inflator generator.
  • --enable-managedby-label
    enable adding app.kubernetes.io/managed-by
  • --env, -e
    a list of environment variables to be used by functions
  • --helm-api-versions
    Kubernetes api versions used by Helm for Capabilities.APIVersions
  • --helm-command
    helm command (path to executable)
  • --helm-kube-version
    Kubernetes version used by Helm for Capabilities.KubeVersion
  • --load-restrictor
    if set to 'LoadRestrictionsNone', local kustomizations may load files from outside their root. This does, however, break the relocatability of the kustomization.
  • --mount
    a list of storage options read from the filesystem
  • --network
    enable network access for functions that declare it
  • --network-name
    the docker network to run the container in
  • --output, -o
    If specified, write output to this path.
  • --reorder
    Reorder the resources just before output. Use 'legacy' to apply a legacy reordering (Namespaces first, Webhooks last, etc). Use 'none' to suppress a final reordering.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k label

Usage:
d8 k label [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]

Update the labels on a resource

Options

  • --all
    Select all resources, in the namespace of the specified resource types
  • --all-namespaces, -A
    If true, check the specified action in all namespaces.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to update the labels
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --list
    If true, display the labels for a given resource.
  • --local
    If true, label will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --overwrite
    If true, allow labels to be overwritten, otherwise reject label updates that overwrite existing labels.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --resource-version
    If non-empty, the labels update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k logs

Usage:
d8 k logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER] [options]

Print the logs for a container in a pod

Options

  • --all-containers
    Get all containers' logs in the pod(s).
  • --container, -c
    Print the logs of this container
  • --follow, -f
    Specify if the logs should be streamed.
  • --ignore-errors
    If watching / following pod logs, allow for any errors that occur to be non-fatal
  • --insecure-skip-tls-verify-backend
    Skip verifying the identity of the kubelet that logs are requested from. In theory, an attacker could provide invalid log content back. You might want to use this if your kubelet serving certificates have expired.
  • --limit-bytes
    Maximum bytes of logs to return. Defaults to no limit.
  • --max-log-requests
    Specify maximum number of concurrent logs to follow when using by a selector. Defaults to 5.
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
  • --prefix
    Prefix each log line with the log source (pod name and container name)
  • --previous, -p
    If true, print the logs for the previous instance of the container in a pod if it exists.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --since
    Only return logs newer than a relative duration like 5s, 2m, or 3h. Defaults to all logs. Only one of since-time / since may be used.
  • --since-time
    Only return logs after a specific date (RFC3339). Defaults to all logs. Only one of since-time / since may be used.
  • --tail
    Lines of recent log file to display. Defaults to -1 with no selector, showing all log lines otherwise 10, if a selector is provided.
  • --timestamps
    Include timestamps on each line in the log output

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k options

Usage:
d8 k options [options]

Print the list of flags inherited by all commands

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k patch

Usage:
d8 k patch (-f FILENAME | TYPE NAME) [-p PATCH|--patch-file FILE] [options]

Update fields of a resource

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to update
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --local
    If true, patch will operate on the content of the file, not the server-side resource.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --patch, -p
    The patch to be applied to the resource JSON file.
  • --patch-file
    A file containing a patch to be applied to the resource.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --subresource
    If specified, patch will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --type
    The type of patch being provided; one of [json merge strategic]

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k plugin

Usage:
d8 k plugin [flags] [options]

Provides utilities for interacting with plugins

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k plugin list

Usage:
d8 k plugin [flags] list [options]

List all visible plugin executables on a user's PATH

Options

  • --name-only
    If true, display only the binary name of each plugin, rather than its full path

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k port-forward

Usage:
d8 k port-forward TYPE/NAME [options] [LOCAL_PORT:]REMOTE_PORT [...[LOCAL_PORT_N:]REMOTE_PORT_N]

Forward one or more local ports to a pod

Options

  • --address
    Addresses to listen on (comma separated). Only accepts IP addresses or localhost as a value. When localhost is supplied, kubectl will try to bind on both 127.0.0.1 and ::1 and will fail if neither of these addresses are available to bind.
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k proxy

Usage:
d8 k proxy [--port=PORT] [--www=static-dir] [--www-prefix=prefix] [--api-prefix=prefix] [options]

Run a proxy to the Kubernetes API server

Options

  • --accept-hosts
    Regular expression for hosts that the proxy should accept.
  • --accept-paths
    Regular expression for paths that the proxy should accept.
  • --address
    The IP address on which to serve on.
  • --api-prefix
    Prefix to serve the proxied API under.
  • --append-server-path
    If true, enables automatic path appending of the kube context server path to each request.
  • --disable-filter
    If true, disable request filtering in the proxy. This is dangerous, and can leave you vulnerable to XSRF attacks, when used with an accessible port.
  • --keepalive
    keepalive specifies the keep-alive period for an active network connection. Set to 0 to disable keepalive.
  • --port, -p
    The port on which to run the proxy. Set to 0 to pick a random port.
  • --reject-methods
    Regular expression for HTTP methods that the proxy should reject (example --reject-methods='POST,PUT,PATCH').
  • --reject-paths
    Regular expression for paths that the proxy should reject. Paths specified here will be rejected even accepted by --accept-paths.
  • --unix-socket, -u
    Unix socket on which to run the proxy.
  • --www, -w
    Also serve static files from the given directory under the specified prefix.
  • --www-prefix, -P
    Prefix to serve static files under, if static file directory is specified.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k replace

Usage:
d8 k replace -f FILENAME [options]

Replace a resource by file name or stdin

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --cascade
    Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    The files that contain the configurations to replace.
  • --force
    If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
  • --grace-period
    Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).
  • --kustomize, -k
    Process a kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --raw
    Raw URI to PUT to the server. Uses the transport specified by the kubeconfig file.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --subresource
    If specified, replace will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --timeout
    The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
  • --wait
    If true, wait for resources to be gone before returning. This waits for finalizers.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout

Usage:
d8 k rollout SUBCOMMAND [options]

Manage the rollout of a resource

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout history

Usage:
d8 k rollout SUBCOMMAND history (TYPE NAME | TYPE/NAME) [flags] [options]

View rollout history

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --revision
    See the details, including podTemplate of the revision specified
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout pause

Usage:
d8 k rollout SUBCOMMAND pause RESOURCE [options]

Mark the provided resource as paused

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout restart

Usage:
d8 k rollout SUBCOMMAND restart RESOURCE [options]

Restart a resource

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout resume

Usage:
d8 k rollout SUBCOMMAND resume RESOURCE [options]

Resume a paused resource

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout status

Usage:
d8 k rollout SUBCOMMAND status (TYPE NAME | TYPE/NAME) [flags] [options]

Show the status of the rollout

Options

  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --revision
    Pin to a specific revision for showing its status. Defaults to 0 (last revision).
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --timeout
    The length of time to wait before ending watch, zero means never. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
  • --watch, -w
    Watch the status of the rollout until it's done.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k rollout undo

Usage:
d8 k rollout SUBCOMMAND undo (TYPE NAME | TYPE/NAME) [flags] [options]

Undo a previous rollout

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --to-revision
    The revision to rollback to. Default to 0 (last revision).

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k run

Usage:
d8 k run NAME --image=image [--env="key=value"] [--port=port] [--dry-run=server|client] [--overrides=inline-json] [--command] -- [COMMAND] [args...] [options]

Run a particular image on the cluster

Options

  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --annotations
    Annotations to apply to the pod.
  • --attach
    If true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true. With '--restart=Never' the exit code of the container process is returned.
  • --cascade
    Must be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.
  • --command
    If true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --env
    Environment variables to set in the container.
  • --expose
    If true, create a ClusterIP service associated with the pod. Requires `--port`.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    to use to replace the resource.
  • --force
    If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
  • --grace-period
    Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).
  • --image
    The image for the container to run.
  • --image-pull-policy
    The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.
  • --kustomize, -k
    Process a kustomization directory. This flag can't be used together with -f or -R.
  • --labels, -l
    Comma separated labels to apply to the pod. Will override previous values.
  • --leave-stdin-open
    If the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --override-type
    The method used to override the generated object: json, merge, or strategic.
  • --overrides
    An inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.
  • --pod-running-timeout
    The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
  • --port
    The port that this container exposes.
  • --privileged
    If true, run the container in privileged mode.
  • --quiet, -q
    If true, suppress prompt messages.
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --restart
    The restart policy for this Pod. Legal values [Always, OnFailure, Never].
  • --rm
    If true, delete the pod after it exits. Only valid when attaching to the container, e.g. with '--attach' or with '-i/--stdin'.
  • --save-config
    If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --stdin, -i
    Keep stdin open on the container in the pod, even if nothing is attached.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --timeout
    The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
  • --tty, -t
    Allocate a TTY for the container in the pod.
  • --wait
    If true, wait for resources to be gone before returning. This waits for finalizers.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k scale

Usage:
d8 k scale [--resource-version=version] [--current-replicas=count] --replicas=COUNT (-f FILENAME | TYPE NAME) [options]

Set a new size for a deployment, replica set, or replication controller

Options

  • --all
    Select all resources in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --current-replicas
    Precondition for current size. Requires that the current size of the resource match this value in order to scale. -1 (default) for no condition.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to set a new size
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --replicas
    The new desired number of replicas. Required.
  • --resource-version
    Precondition for resource version. Requires that the current resource version match this value in order to scale.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --timeout
    The length of time to wait before giving up on a scale operation, zero means don't wait. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set

Usage:
d8 k set SUBCOMMAND [options]

Set specific features on objects

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set env

Usage:
d8 k set SUBCOMMAND env RESOURCE/NAME KEY_1=VAL_1 ... KEY_N=VAL_N [options]

Update environment variables on a pod template

Options

  • --all
    If true, select all resources in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --containers, -c
    The names of containers in the selected pod templates to change - may use wildcards
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --env, -e
    Specify a key-value pair for an environment variable to set into each container.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files the resource to update the env
  • --from
    The name of a resource from which to inject environment variables
  • --keys
    Comma-separated list of keys to import from specified resource
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --list
    If true, display the environment and any changes in the standard format. this flag will removed when we have kubectl view env.
  • --local
    If true, set env will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --overwrite
    If true, allow environment to be overwritten, otherwise reject updates that overwrite existing environment.
  • --prefix
    Prefix to append to variable names
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --resolve
    If true, show secret or configmap references when listing variables
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set image

Usage:
d8 k set SUBCOMMAND image (-f FILENAME | TYPE NAME) CONTAINER_NAME_1=CONTAINER_IMAGE_1 ... CONTAINER_NAME_N=CONTAINER_IMAGE_N [options]

Update the image of a pod template

Options

  • --all
    Select all resources, in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --local
    If true, set image will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set resources

Usage:
d8 k set SUBCOMMAND resources (-f FILENAME | TYPE NAME)  ([--limits=LIMITS & --requests=REQUESTS] [options]

Update resource requests/limits on objects with pod templates

Options

  • --all
    Select all resources, in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --containers, -c
    The names of containers in the selected pod templates to change, all containers are selected by default - may use wildcards
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --limits
    The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
  • --local
    If true, set resources will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --requests
    The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set selector

Usage:
d8 k set SUBCOMMAND selector (-f FILENAME | TYPE NAME) EXPRESSIONS [--resource-version=version] [options]

Set the selector on a resource

Options

  • --all
    Select all resources in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    identifying the resource.
  • --local
    If true, annotation will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --resource-version
    If non-empty, the selectors update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set serviceaccount

Usage:
d8 k set SUBCOMMAND serviceaccount (-f FILENAME | TYPE NAME) SERVICE_ACCOUNT [options]

Update the service account of a resource

Options

  • --all
    Select all resources, in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files identifying the resource to get from a server.
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --local
    If true, set serviceaccount will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --record
    Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k set subject

Usage:
d8 k set SUBCOMMAND subject (-f FILENAME | TYPE NAME) [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]

Update the user, group, or service account in a role binding or cluster role binding

Options

  • --all
    Select all resources, in the namespace of the specified resource types
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --filename, -f
    Filename, directory, or URL to files the resource to update the subjects
  • --group
    Groups to bind to the role
  • --kustomize, -k
    Process the kustomization directory. This flag can't be used together with -f or -R.
  • --local
    If true, set subject will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --serviceaccount
    Service accounts to bind to the role
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --user
    Usernames to bind to the role

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k taint

Usage:
d8 k taint NODE NAME KEY_1=VAL_1:TAINT_EFFECT_1 ... KEY_N=VAL_N:TAINT_EFFECT_N [options]

Update the taints on one or more nodes

Options

  • --all
    Select all nodes in the cluster
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --field-manager
    Name of the manager used to track field ownership.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --overwrite
    If true, allow taints to be overwritten, otherwise reject taint updates that overwrite existing taints.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --validate
    Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k top

Usage:
d8 k top [options]

Display resource (CPU/memory) usage

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k top node

Usage:
d8 k top node [NAME | -l label] [options]

Display resource (CPU/memory) usage of nodes

Options

  • --no-headers
    If present, print output without headers
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --show-capacity
    Print node resources based on Capacity instead of Allocatable(default) of the nodes.
  • --sort-by
    If non-empty, sort nodes list using specified field. The field can be either 'cpu' or 'memory'.
  • --use-protocol-buffers
    Enables using protocol-buffers to access Metrics API.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k top pod

Usage:
d8 k top pod [NAME | -l label] [options]

Display resource (CPU/memory) usage of pods

Options

  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --containers
    If present, print usage of containers within a pod.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --no-headers
    If present, print output without headers.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
  • --sort-by
    If non-empty, sort pods list using specified field. The field can be either 'cpu' or 'memory'.
  • --sum
    Print the sum of the resource usage
  • --use-protocol-buffers
    Enables using protocol-buffers to access Metrics API.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k uncordon

Usage:
d8 k uncordon NODE [options]

Mark node as schedulable

Options

  • --dry-run
    Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k version

Usage:
d8 k version [options]

Print the client and server version information

Options

  • --client
    If true, shows client version only (no server required).
  • --output, -o
    One of 'yaml' or 'json'.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 k wait

Usage:
d8 k wait ([-f FILENAME] | resource.group/resource.name | resource.group [(-l label | --all)]) [--for=delete|--for condition=available|--for=jsonpath='{}'[=value]] [options]

Experimental: Wait for a specific condition on one or many resources

Options

  • --all
    Select all resources in the namespace of the specified resource types
  • --all-namespaces, -A
    If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
  • --allow-missing-template-keys
    If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
  • --field-selector
    Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
  • --filename, -f
    identifying the resource.
  • --for
    The condition to wait on: [delete|condition=condition-name[=condition-value]|jsonpath='{JSONPath expression}'=[JSONPath value]]. The default condition-value is true. Condition values are compared after Unicode simple case folding, which is a more general form of case-insensitivity.
  • --local
    If true, annotation will NOT contact api-server but run locally.
  • --output, -o
    Output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
  • --recursive, -R
    Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
  • --selector, -l
    Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)
  • --show-managed-fields
    If true, keep the managedFields when printing objects in JSON or YAML format.
  • --template
    Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
  • --timeout
    The length of time to wait before giving up. Zero means check once and don't wait, negative means wait for a week.

Global options

  • --as
    Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation.
  • --cache-dir
    Default cache directory
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --match-server-version
    Require server version to match client version
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --profile
    Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)
  • --profile-output
    Name of the file to write the profile to
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
  • --warnings-as-errors
    Treat warnings received from the server as errors and exit with a non-zero exit code

d8 login

Log in to the Deckhouse Kubernetes Platform

Options

  • --add-dir-header
    If true, adds the file directory to the header of the log messages
  • --alsologtostderr
    log to standard error as well as files (no effect when -logtostderr=true)
  • --log-backtrace-at
    when logging hits line file:N, emit a stack trace
  • --log-dir
    If non-empty, write log files in this directory (no effect when -logtostderr=true)
  • --log-file
    If non-empty, use this log file (no effect when -logtostderr=true)
  • --log-file-max-size
    Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.
  • --logtostderr
    log to standard error instead of files
  • --one-output
    If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
  • --skip-headers
    If true, avoid header prefixes in the log messages
  • --skip-log-headers
    If true, avoid headers when opening log files (no effect when -logtostderr=true)
  • --stderrthreshold
    logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging

d8 login get-token

Usage:
d8 login get-token [flags] [options]

Run as a kubectl credential plugin

Options

  • --authentication-timeout-sec
    [authcode] Timeout of authentication in seconds
  • --browser-command
    [authcode] Command to open the browser
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --certificate-authority-data
    Base64 encoded cert for the certificate authority
  • --force-refresh
    If set, refresh the ID token regardless of its expiration time
  • --grant-type
    Authorization grant type to use. One of (auto|authcode|authcode-keyboard|password|device-code)
  • --insecure-skip-tls-verify
    If set, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --listen-address
    [authcode] Address to bind to the local server. If multiple addresses are set, it will try binding in order
  • --listen-port
    [authcode] deprecated: port to bind to the local server
  • --local-server-cert
    [authcode] Certificate path for the local server
  • --local-server-key
    [authcode] Certificate key path for the local server
  • --oidc-auth-request-extra-params
    [authcode, authcode-keyboard] Extra query parameters to send with an authentication request
  • --oidc-client-id
    Client ID of the provider (mandatory)
  • --oidc-client-secret
    Client secret of the provider
  • --oidc-extra-scope
    Scopes to request to the provider
  • --oidc-issuer-url
    Issuer URL of the provider (mandatory)
  • --oidc-redirect-url-authcode-keyboard
    [authcode-keyboard] Redirect URL
  • --oidc-redirect-url-hostname
    [authcode] Hostname of the redirect URL
  • --oidc-use-pkce
    Force PKCE usage
  • --open-url-after-authentication
    [authcode] If set, open the URL in the browser after authentication
  • --password
    [password] Password for resource owner password credentials grant
  • --skip-open-browser
    [authcode] Do not open the browser automatically
  • --tls-renegotiation-freely
    If set, allow a remote server to repeatedly request renegotiation
  • --tls-renegotiation-once
    If set, allow a remote server to request renegotiation once per connection
  • --token-cache-dir
    Path to a directory for token cache
  • --username
    [password] Username for resource owner password credentials grant

Global options

  • --add-dir-header
    If true, adds the file directory to the header of the log messages
  • --alsologtostderr
    log to standard error as well as files (no effect when -logtostderr=true)
  • --log-backtrace-at
    when logging hits line file:N, emit a stack trace
  • --log-dir
    If non-empty, write log files in this directory (no effect when -logtostderr=true)
  • --log-file
    If non-empty, use this log file (no effect when -logtostderr=true)
  • --log-file-max-size
    Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.
  • --logtostderr
    log to standard error instead of files
  • --one-output
    If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
  • --skip-headers
    If true, avoid header prefixes in the log messages
  • --skip-log-headers
    If true, avoid headers when opening log files (no effect when -logtostderr=true)
  • --stderrthreshold
    logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging

d8 mirror

Copy Deckhouse Kubernetes Platform distribution to the local filesystem or third-party registry

d8 mirror pull

Usage:
d8 mirror pull <images-bundle-path> [options]

Copy Deckhouse Kubernetes Platform distribution to the local filesystem

Options

  • --deckhouse-tag
    Specific Deckhouse build tag to pull. Conflicts with --since-version. If registry contains release channel image for specified tag, all release channels in the bundle will be pointed to it.
  • --exclude-module, -e
    Blacklist specific modules from downloading. Format is "module-name[@version]". Use one flag per each module. Overridden by use of --include-module."
  • --force
    Overwrite existing bundle packages if they are conflicting with current pull operation.
  • --gost-digest
    Calculate GOST R 34.11-2012 STREEBOG digest for downloaded bundle
  • --images-bundle-chunk-size, -c
    Split resulting bundle file into chunks of at most N gigabytes
  • --include-module, -i
    Whitelist specific modules for downloading. Format is "module-name[@version]". Use one flag per each module. Disables blacklisting by --exclude-module."
  • --insecure
    Interact with registries over HTTP.
  • --license, -l
    Deckhouse license key. Shortcut for --source-login=license-token --source-password=<>.
  • --modules-path-suffix
    Suffix to append to source repo path to locate modules.
  • --no-modules
    Do not pull Deckhouse modules into bundle.
  • --no-platform
    Do not pull Deckhouse Kubernetes Platform into bundle.
  • --no-pull-resume
    Do not continue last unfinished pull operation and start from scratch.
  • --no-security-db
    Do not pull security databases into bundle.
  • --since-version
    Minimal Deckhouse release to pull. Ignored if above current Rock Solid release. Conflicts with --deckhouse-tag.
  • --source
    Source registry to pull Deckhouse images from.
  • --source-login
    Source registry login.
  • --source-password
    Source registry password.
  • --tls-skip-verify
    Disable TLS certificate validation.
  • --tmp-dir
    Path to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;

d8 mirror push

Usage:
d8 mirror push <images-bundle-path> <registry> [options]

Copy Deckhouse Kubernetes Platform distribution to the third-party registry

Options

  • --insecure
    Interact with registries over HTTP.
  • --modules-path-suffix
    Suffix to append to source repo path to locate modules.
  • --registry-login, -u
    Username to log into the target registry.
  • --registry-password, -p
    Password to log into the target registry.
  • --tls-skip-verify
    Disable TLS certificate validation.
  • --tmp-dir
    Path to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;

d8 stronghold

Deckhouse Stronghold commands

d8 stronghold auth

Usage:
d8 stronghold auth [options]

Interact with auth methods

d8 stronghold delete

Usage:
d8 stronghold delete [options]

Delete secrets and configuration

d8 stronghold kv

Usage:
d8 stronghold kv [options]

Interact with Stronghold's Key-Value storage

d8 stronghold lease

Usage:
d8 stronghold lease [options]

Interact with leases

d8 stronghold list

Usage:
d8 stronghold list [options]

List data or secrets

d8 stronghold login

Usage:
d8 stronghold login [options]

Authenticate locally

d8 stronghold operator

Usage:
d8 stronghold operator [options]

Perform operator-specific tasks

d8 stronghold patch

Usage:
d8 stronghold patch [options]

Patch data, configuration, and secrets

d8 stronghold path-help

Usage:
d8 stronghold path-help [options]

Retrieve API help for paths

d8 stronghold pki

Usage:
d8 stronghold pki [options]

Interact with Stronghold's PKI Secrets Engine

d8 stronghold policy

Usage:
d8 stronghold policy [options]

Interact with policies

d8 stronghold print

Usage:
d8 stronghold print [options]

Prints runtime configurations

d8 stronghold read

Usage:
d8 stronghold read [options]

Read data and retrieves secrets

d8 stronghold secrets

Usage:
d8 stronghold secrets [options]

Interact with secrets engines

d8 stronghold status

Usage:
d8 stronghold status [options]

Print seal and HA status

d8 stronghold token

Usage:
d8 stronghold token [options]

Interact with tokens

d8 stronghold transit

Usage:
d8 stronghold transit [options]

Interact with Stronghold's Transit Secrets Engine

d8 stronghold unwrap

Usage:
d8 stronghold unwrap [options]

Unwrap a wrapped secret

d8 stronghold version

Usage:
d8 stronghold version [options]

Print version

d8 stronghold write

Usage:
d8 stronghold write [options]

Write data, configuration, and secrets

d8 system

Operate system options.

Options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system collect-debug-info

Usage:
d8 system collect-debug-info [options]

Collect debug info.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system edit

Usage:
d8 system edit [options]

Edit configuration files

Options

  • --editor, -e
    Your favourite editor.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system edit cluster-configuration

Usage:
d8 system edit cluster-configuration [options]

Edit cluster-configuration.

Options

  • --editor, -e
    Your favourite editor.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system edit provider-cluster-configuration

Usage:
d8 system edit provider-cluster-configuration [options]

Edit provider-cluster-configuration.

Options

  • --editor, -e
    Your favourite editor.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system edit static-cluster-configuration

Usage:
d8 system edit static-cluster-configuration [options]

Edit static-cluster-configuration.

Options

  • --editor, -e
    Your favourite editor.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system logs

Usage:
d8 system logs [options]

Inspect deckhouse-controller logs.

Options

  • --follow, -f
    Specify if the logs should be streamed.
  • --since
    Show logs newer than a relative duration like 5s, 2m, or 1h. Only one of since-time / since may be used.
  • --since-time
    Show logs after a specific timestamp, e.g. --since-time='2025-05-19 12:00:00'. Only one of since-time / since may be used.
  • --tail
    Limit the number of lines in the output to the last N lines. Defaults to -1 with no limit.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module

Usage:
d8 system module [options]

Operate the Deckhouse Kubernetes Platform modules

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module disable

Usage:
d8 system module disable [options]

Disable module.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module enable

Usage:
d8 system module enable [options]

Enable module.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module list

Usage:
d8 system module list [options]

List enabled modules.

Options

  • --editor, -e
    Your favourite editor.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module snapshots

Usage:
d8 system module snapshots [options]

Dump shapshots.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system module values

Usage:
d8 system module values [options]

Dump values.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system queue

Usage:
d8 system queue [options]

Dump queues.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system queue list

Usage:
d8 system queue list [options]

Dump all queues.

Options

  • --output, -o
    Output format: json|yaml|text.
  • --show-empty, -e
    Show empty queues.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 system queue main

Usage:
d8 system queue main [options]

Dump main queue.

Options

  • --output, -o
    Output format: json|yaml|text.

Global options

  • --context
    The name of the kubeconfig context to use
  • --kubeconfig, -k
    KubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)

d8 v

d8 v controls virtual machine related operations on your kubernetes cluster.

Options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v console

Usage:
d8 v console (VirtualMachine) [options]

Connect to a console of a virtual machine.

Options

  • --timeout
    The number of minutes to wait for the virtual machine to be ready.

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v evict

Usage:
d8 v evict (VirtualMachine) [options]

Evict a virtual machine.

Options

  • --create-only, -c
    --create-only, -c: Set this flag for create operation only.
  • --force, -f
    --force, -f: Set this flag to force the operation.
  • --timeout, -t
    --timeout, -t: Set this flag to change the timeout.
  • --wait, -w
    --wait, -w: Set this flag to wait for the operation to complete.

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v port-forward

Usage:
d8 v port-forward name[.namespace] [protocol/]localPort[:targetPort]... [options]

Forward local ports to a virtual machine

Options

  • --address
    --address=: Set this to the address the local ports should be opened on
  • --stdio
    --stdio=true: Set this to true to forward the tunnel to stdout/stdin; Only works with a single port

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v restart

Usage:
d8 v restart (VirtualMachine) [options]

Restart a virtual machine.

Options

  • --create-only, -c
    --create-only, -c: Set this flag for create operation only.
  • --force, -f
    --force, -f: Set this flag to force the operation.
  • --timeout, -t
    --timeout, -t: Set this flag to change the timeout.
  • --wait, -w
    --wait, -w: Set this flag to wait for the operation to complete.

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v scp

Usage:
d8 v scp VirtualMachine) [options]

SCP files from/to a virtual machine.

Options

  • --identity-file, -i
    --identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK
  • --known-hosts
    --d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.
  • --local-ssh
    --local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client
  • --local-ssh-opts, -t
    --local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true
  • --port, -p
    --port=22: Specify a port on the VM to send SSH traffic to
  • --preserve
    Preserves modification times, access times, and modes from the original file.
  • --recursive, -r
    Recursively copy entire directories
  • --username, -l
    --username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v ssh

Usage:
d8 v ssh VirtualMachine [options]

Open a SSH connection to a virtual machine.

Options

  • --command, -c
    --command='ls /': Specify a command to execute in the VM
  • --identity-file, -i
    --identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK
  • --known-hosts
    --d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.
  • --local-ssh
    --local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client
  • --local-ssh-opts, -t
    --local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true
  • --port, -p
    --port=22: Specify a port on the VM to send SSH traffic to
  • --username, -l
    --username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v start

Usage:
d8 v start (VirtualMachine) [options]

Start a virtual machine.

Options

  • --create-only, -c
    --create-only, -c: Set this flag for create operation only.
  • --force, -f
    --force, -f: Set this flag to force the operation.
  • --timeout, -t
    --timeout, -t: Set this flag to change the timeout.
  • --wait, -w
    --wait, -w: Set this flag to wait for the operation to complete.

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v stop

Usage:
d8 v stop (VirtualMachine) [options]

Stop a virtual machine.

Options

  • --create-only, -c
    --create-only, -c: Set this flag for create operation only.
  • --force, -f
    --force, -f: Set this flag to force the operation.
  • --timeout, -t
    --timeout, -t: Set this flag to change the timeout.
  • --wait, -w
    --wait, -w: Set this flag to wait for the operation to complete.

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)

d8 v vnc

Usage:
d8 v vnc VirtualMachine [options]

Open a vnc connection to a virtual machine.

Options

  • --address
    --address=127.0.0.1: Setting this will change the listening address of the VNC server. Example: --address=0.0.0.0 will make the server listen on all interfaces.
  • --port
    --port=0: Assigning a port value to this will try to run the proxy on the given port if the port is accessible; If unassigned, the proxy will run on a random port
  • --proxy-only
    --proxy-only=false: Setting this true will run only the vnc proxy and show the port where VNC viewers can connect

Global options

  • --as
    Username to impersonate for the operation
  • --as-group
    Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
  • --as-uid
    UID to impersonate for the operation
  • --certificate-authority
    Path to a cert file for the certificate authority
  • --client-certificate
    Path to a client certificate file for TLS
  • --client-key
    Path to a client key file for TLS
  • --cluster
    The name of the kubeconfig cluster to use
  • --context
    The name of the kubeconfig context to use
  • --disable-compression
    If true, opt-out of response compression for all requests to the server
  • --insecure-skip-tls-verify
    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
  • --kubeconfig
    Path to the kubeconfig file to use for CLI requests.
  • --log-flush-frequency
    Maximum number of seconds between log flushes
  • --namespace, -n
    If present, the namespace scope for this CLI request
  • --password
    Password for basic authentication to the API server
  • --proxy-url
    If provided, this URL will be used to connect via proxy
  • --request-timeout
    The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
  • --server, -s
    The address and port of the Kubernetes API server
  • --tls-server-name
    If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
  • --token
    Bearer token for authentication to the API server
  • --user
    The name of the kubeconfig user to use
  • --username
    Username for basic authentication to the API server
  • --v, -v
    number for the log level verbosity
  • --vmodule
    comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)