This page is generated automatically.
d8 controls the Deckhouse Kubernetes Platform
Common options:
--help,-hhelp for d8--version,-vversion for d8
d8 backup
Backup various parts of Deckhouse Kubernetes Platform
Options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup cluster-config
Usage:d8 backup cluster-config <backup-tarball-path> [options]Take a snapshot of cluster configuration
Options
--compress,-cCompress result file
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup etcd
Usage:d8 backup etcd <snapshot-path> [options]Take a snapshot of ETCD state
Options
--etcd-pod,-pName of the etcd pod to snapshot from. (optional)--verboseVerbose log output.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup loki
Usage:d8 backup loki [options]Dump logs from Loki api.
Options
--daysLimit maximum number of days in range to output per queue from Loki. (Default 5 maximum number of days in range per queue.)--endSet end timestamp range to dump logs from Loki. (Default get max end timestamp from Loki, ex. "2025-01-14 15:04:05".)--limitLimit the number of lines to output per queue from Loki. (Default 5000 max limit strings per queue.)--startSet start timestamp range to dump logs from Loki. (Default get max start timestamp from Loki, ex. "2025-01-12 15:04:05".)
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 completion
Generate the autocompletion script for the specified shell
d8 completion bash
Usage:d8 completion bash [options]Generate the autocompletion script for bash
Options
--no-descriptionsdisable completion descriptions
d8 completion fish
Usage:d8 completion fish [options]Generate the autocompletion script for fish
Options
--no-descriptionsdisable completion descriptions
d8 completion powershell
Usage:d8 completion powershell [options]Generate the autocompletion script for powershell
Options
--no-descriptionsdisable completion descriptions
d8 completion zsh
Usage:d8 completion zsh [options]Generate the autocompletion script for zsh
Options
--no-descriptionsdisable completion descriptions
d8 dk
Alias: delivery-kit
A set of tools for building, distributing, and deploying containerized applications
d8 dk build
Usage:d8 dk build [IMAGE_NAME...] [options]Build images
Options
--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk bundle
Usage:d8 dk bundle [options]Work with werf bundles: publish bundles into container registry and deploy bundles into Kubernetes cluster
d8 dk bundle apply
Usage:d8 dk bundle apply [options]Apply bundle into Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicEnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback,-REnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--deploy-graph-pathSave deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--envUse specified environment (default $WERF_ENV)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespaceUse specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--rollback-graph-pathSave rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-deploy-reportSave deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tagProvide exact tag version or semver-based pattern, werf will install or upgrade to the latest version of the specified bundle ($WERF_TAG or latest by default)--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk bundle copy
Usage:d8 dk bundle copy [options]Copy published bundle into another location
Options
--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repos--fromSource address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--helm-compatible-chart,-CSet chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default true or $WERF_HELM_COMPATIBLE_CHART.--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--rename-chartForce setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--toDestination address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk bundle publish
Usage:d8 dk bundle publish [IMAGE_NAME...] [options]Publish bundle
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--helm-compatible-chart,-CSet chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default false or $WERF_HELM_COMPATIBLE_CHART.--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--rename-chartForce setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tagPublish bundle into container registry repo by the provided tag ($WERF_TAG or latest by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk bundle render
Usage:d8 dk bundle render [options]Render Kubernetes manifests from bundle
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--bundle-dir,-bGet extracted bundle from directory instead of registry (default $WERF_BUNDLE_DIR)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--envUse specified environment (default $WERF_ENV)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsInclude CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-versionSet specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespaceUse specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--outputWrite render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default $WERF_RELEASE)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tagProvide exact tag version or semver-based pattern, werf will render the latest version of the specified bundle ($WERF_TAG or latest by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--validateValidate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk ci-env
Usage:d8 dk ci-env CI_SYSTEM [options]Generate werf environment variables for specified CI system
Options
--as-env-fileCreate the .env file and print the path for sourcing (default $WERF_AS_ENV_FILE).--as-fileCreate the script and print the path for sourcing (default $WERF_AS_FILE).--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command will copy specified or default (~/.docker) config to the temporary directory and may perform additional login with new config.--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--login-to-registryLog in to CI-specific registry automatically if possible (default $WERF_LOGIN_TO_REGISTRY).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to custom file (default $WERF_OUTPUT_FILE_PATH).--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--shellSet to cmdexe, powershell or use the default behaviour that is compatible with any unix shell (default $WERF_SHELL).--tagging-strategystub--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk cleanup
Usage:d8 dk cleanup [options]Cleanup project images in the container registry
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and delete images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--keep-stages-built-within-last-n-hoursKeep stages that were built within last hours (default $WERF_KEEP_STAGES_BUILT_WITHIN_LAST_N_HOURS or 2)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextScan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--scan-context-namespace-onlyScan for used images only in namespace linked with context for each available context in kube-config (or only for the context specified with option --kube-context). When disabled will scan all namespaces in all contexts (or only for the context specified with option --kube-context). (Default $WERF_SCAN_CONTEXT_NAMESPACE_ONLY)--scan-context-onlyScan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--without-kubeDo not skip deployed Kubernetes images (default $WERF_WITHOUT_KUBE)
d8 dk completion
Usage:d8 dk completion [options]Generate bash completion scripts
Options
--shellSet to bash, zsh, fish or powershell (default $WERF_SHELL or bash)
d8 dk compose
Usage:d8 dk compose [options]Work with docker-compose
d8 dk compose config
Usage:d8 dk compose config [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]Run docker-compose config command with forwarded image names.
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose down
Usage:d8 dk compose down [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]Run docker-compose down command with forwarded image names.
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose run
Usage:d8 dk compose run [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] -- SERVICE [COMMAND] [ARGS...]Run docker-compose run command with forwarded image names.
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk compose up
Usage:d8 dk compose up [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] [--] [SERVICE...]Run docker-compose up command with forwarded image names.
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk config
Usage:d8 dk config [options]Work with werf.yaml
d8 dk config graph
Usage:d8 dk config graph [IMAGE_NAME...] [options]Print dependency graph for images in werf.yaml.
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk config list
Usage:d8 dk config list [options]List image and artifact names defined in werf.yaml.
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--final-images-onlyShow only final images--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--images-onlyShow only final images--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk config render
Usage:d8 dk config render [IMAGE_NAME...] [options]Render werf.yaml.
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk converge
Usage:d8 dk converge [options]Build and push images, then deploy application into Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--atomicEnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback,-REnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--deploy-graph-pathSave deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rollback-graph-pathSave rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--save-deploy-reportSave deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk cr
Usage:d8 dk cr [options]Work with container registry: authenticate, list and remove images, etc.
d8 dk cr login
Usage:d8 dk cr login registry [options]Login into remote registry.
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--password,-pUse specified password for login (default $WERF_PASSWORD)--password-stdinRead password from stdin for login (default $WERF_PASSWORD_STDIN)--quietDisable explanatory output (default $WERF_QUIET).--username,-uUse specified username for login (default $WERF_USERNAME)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk cr logout
Usage:d8 dk cr logout registry [options]Logout from a remote registry.
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk dismiss
Usage:d8 dk dismiss [options]Delete werf release from Kubernetes
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-deploy-reportUse deploy report, previously saved with --save-deploy-report (by default $WERF_USE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--verboseEnable verbose output (default $WERF_VERBOSE).--with-hooksDelete Helm Release hooks getting from existing revisions (default $WERF_WITH_HOOKS or true)--with-namespaceDelete Kubernetes Namespace after purging Helm Release (default $WERF_WITH_NAMESPACE)
d8 dk export
Usage:d8 dk export [IMAGE_NAME...] [options]Export images
Options
--add-labelAdd label to exported images (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_EXPORT_ADD_LABEL_* (e.g. $WERF_EXPORT_ADD_LABEL_1=labelName1=labelValue1, $WERF_EXPORT_ADD_LABEL_2=labelName2=labelValue2)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tagSet a tag template (can specify multiple). It is necessary to use image name shortcut %image% or %image_slug% if multiple images are exported (e.g. REPO:TAG-%image% or REPO-%image%:TAG)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk helm
Usage:d8 dk helm [options]Manage application deployment with helm
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm create
Usage:d8 dk helm create NAME [options]create a new chart with the given name
Options
--starter,-pthe name or absolute path to Helm starter scaffold
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency
Aliases: dep, dependencies
d8 dk helm dependency update|build|list [options]manage a chart's dependencies
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency build
Usage:d8 dk helm dependency update|build|list build CHART [options]rebuild the charts/ directory based on the Chart.lock file
Options
--keyringkeyring containing public keys--skip-refreshdo not refresh the local repository cache--verifyverify the packages against signatures
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency list
Alias: ls
d8 dk helm dependency update|build|list list CHART [options]list the dependencies for the given chart
Options
--max-col-widthmaximum column width for output table
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm dependency update
Alias: up
d8 dk helm dependency update|build|list update CHART [options]update charts/ based on the contents of Chart.yaml
Options
--keyringkeyring containing public keys--skip-refreshdo not refresh the local repository cache--verifyverify the packages against signatures
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm env
Usage:d8 dk helm env [options]helm client environment information
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get
Usage:d8 dk helm get [options]download extended information of a named release
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get all
Usage:d8 dk helm get all RELEASE_NAME [options]download all information for a named release
Options
--revisionget the named release with revision--templatego template for formatting the output, eg: {{.Release.Name}}
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get hooks
Usage:d8 dk helm get hooks RELEASE_NAME [options]download all hooks for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get manifest
Usage:d8 dk helm get manifest RELEASE_NAME [options]download the manifest for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get metadata
Usage:d8 dk helm get metadata RELEASE_NAME [options]This command fetches metadata for a given release
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionspecify release revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get notes
Usage:d8 dk helm get notes RELEASE_NAME [options]download the notes for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get values
Usage:d8 dk helm get values RELEASE_NAME [options]download the values file for a named release
Options
--all,-adump all (computed) values--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm get-autogenerated-values
Usage:d8 dk helm get-autogenerated-values [IMAGE_NAME...] [options]Get service values yaml generated by werf for helm chart during deploy
Options
--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm get-namespace
Usage:d8 dk helm get-namespace [options]Print Kubernetes Namespace that will be used in current configuration with specified params.
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm get-release
Usage:d8 dk helm get-release [options]Print Helm Release name that will be used in current configuration with specified params.
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm history
Alias: hist
d8 dk helm history RELEASE_NAME [options]fetch release history
Options
--maxmaximum number of revision to include in history--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm install
Usage:d8 dk helm install [NAME] [CHART] [options]install a chart
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicif set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this installation when install fails--create-namespacecreate the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--generate-name,-ggenerate the name (and omit the NAME parameter)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--labels,-lLabels that would be added to release metadata. Should be divided by comma.--name-templatespecify template used to name the release--no-hooksprevent hooks from running during install--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--render-subchart-notesif set, render subchart notes along with the parent--replacere-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repochart repository url where to locate the requested chart--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crdsif set, no CRDs will be installed. By default, CRDs are installed if not already present--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm lint
Usage:d8 dk helm lint PATH [options]examine a chart for possible issues
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--envUse specified environment (default $WERF_ENV)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--kube-versionKubernetes version used for capabilities and deprecation checks--quietprint only warnings and errors--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--strictfail on lint warnings--values,-fspecify values in a YAML file or a URL (can specify multiple)--with-subchartslint dependent charts
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm list
Alias: ls
d8 dk helm list [options]list releases
Options
--all,-ashow all releases without any filter applied--all-namespaces,-Alist releases across all namespaces--date,-dsort by release date--deployedshow deployed releases. If no other is specified, this will be automatically enabled--failedshow failed releases--filter,-fa regular expression (Perl compatible). Any releases that match the expression will be included in the results--max,-mmaximum number of releases to fetch--no-headersdon't print headers when using the default output format--offsetnext release index in the list, used to offset from start value--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pendingshow pending releases--reverse,-rreverse the sort order--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Works only for secret(default) and configmap storage backends.--short,-qoutput short (quiet) listing format--supersededshow superseded releases--time-formatformat time using golang time formatter. Example: --time-format "2006-01-02 15:04:05Z0700"--uninstalledshow uninstalled releases (if 'helm uninstall --keep-history' was used)--uninstallingshow releases that are currently being uninstalled
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm package
Usage:d8 dk helm package [CHART_PATH] [...] [options]package a chart directory into a chart archive
Options
--app-versionset the appVersion on the chart to this version--dependency-update,-uupdate dependencies from "Chart.yaml" to dir "charts/" before packaging--destination,-dlocation to write the chart.--keyname of the key to use when signing. Used if --sign is true--keyringlocation of a public keyring--passphrase-filelocation of a file which contains the passphrase for the signing key. Use "-" in order to read from stdin.--signuse a PGP private key to sign this package--versionset the version on the chart to this semver version
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin
Usage:d8 dk helm plugin [options]install, list, or uninstall Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin install
Alias: add
d8 dk helm plugin install [options] <path|url>...install one or more Helm plugins
Options
--versionspecify a version constraint. If this is not specified, the latest version is installed
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin list
Alias: ls
d8 dk helm plugin list [options]list installed Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin uninstall
Aliases: rm, remove
d8 dk helm plugin uninstall <plugin>... [options]uninstall one or more Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm plugin update
Alias: up
d8 dk helm plugin update <plugin>... [options]update one or more Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm pull
Alias: fetch
d8 dk helm pull [chart URL | repo/chartname] [...] [options]download a chart from a repository and (optionally) unpack it in local directory
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--destination,-dlocation to write the chart. If this and untardir are specified, untardir is appended to this--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored.--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--provfetch the provenance file, but don't perform verification--repochart repository url where to locate the requested chart--untarif set to true, will untar the chart after downloading it--untardirif untar is specified, this flag specifies the name of the directory into which the chart is expanded--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm registry
Usage:d8 dk helm registry [options]login to or logout from a registry
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm registry login
Usage:d8 dk helm registry login [host] [options]login to a registry
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify registry client using this SSL certificate file--insecureallow connections to TLS registry without certs--key-fileidentify registry client using this SSL key file--password,-pregistry password or identity token--password-stdinread password or identity token from stdin--username,-uregistry username
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm registry logout
Usage:d8 dk helm registry logout [host] [options]logout from a registry
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] [options]add, list, remove, update, and index chart repositories
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo add
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] add [NAME] [URL] [options]add a chart repository
Options
--allow-deprecated-reposby default, this command will not allow adding official repos that have been permanently deleted. This disables that behavior--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--force-updatereplace (overwrite) the repo if it already exists--insecure-skip-tls-verifyskip tls certificate checks for the repository--key-fileidentify HTTPS client using this SSL key file--no-updateIgnored. Formerly, it would disabled forced updates. It is deprecated by force-update.--pass-credentialspass credentials to all domains--passwordchart repository password--password-stdinread chart repository password from stdin--usernamechart repository username
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo index
Usage:d8 dk helm repo add|remove|list|index|update [ARGS] index [DIR] [options]generate an index file given a directory containing packaged charts
Options
--jsonoutput in JSON format--mergemerge the generated index into the given index--urlurl of chart repository
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo list
Alias: ls
d8 dk helm repo add|remove|list|index|update [ARGS] list [options]list chart repositories
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo remove
Alias: rm
d8 dk helm repo add|remove|list|index|update [ARGS] remove [REPO1 [REPO2 ...]] [options]remove one or more chart repositories
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm repo update
Alias: up
d8 dk helm repo add|remove|list|index|update [ARGS] update [REPO1 [REPO2 ...]] [options]update information of available charts locally from chart repositories
Options
--fail-on-repo-update-failupdate fails if any of the repository updates fail
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm rollback
Usage:d8 dk helm rollback <RELEASE> [REVISION] [options]roll back a release to a previous revision
Options
--cleanup-on-failallow deletion of new resources created in this rollback when rollback fails--deploy-report-pathsave deploy report in JSON to the specified path--dry-runsimulate a rollback--forceforce resource update through delete/recreate if needed--history-maxlimit the maximum number of revisions saved per release. Use 0 for no limit--no-hooksprevent hooks from running during rollback--recreate-podsperforms pods restart for the resource if applicable--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm search
Usage:d8 dk helm search [keyword] [options]search for a keyword in charts
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm search hub
Usage:d8 dk helm search [keyword] hub [KEYWORD] [options]search for charts in the Artifact Hub or your own hub instance
Options
--endpointHub instance to query for charts--fail-on-no-resultsearch fails if no results are found--list-repo-urlprint charts repository URL--max-col-widthmaximum column width for output table--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm search repo
Usage:d8 dk helm search [keyword] repo [keyword] [options]search repositories for a keyword in charts
Options
--develuse development versions (alpha, beta, and release candidate releases), too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--fail-on-no-resultsearch fails if no results are found--max-col-widthmaximum column width for output table--output,-oprints the output in the specified format. Allowed values: table, json, yaml--regexp,-ruse regular expressions for searching repositories you have added--versionsearch using semantic versioning constraints on repositories you have added--versions,-lshow the long listing, with each version of each chart on its own line, for repositories you have added
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm secret
Usage:d8 dk helm secret [options]Work with secrets
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm secret decrypt
Usage:d8 dk helm secret decrypt [options]Decrypt data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret encrypt
Usage:d8 dk helm secret encrypt [options]Encrypt data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file
Usage:d8 dk helm secret file [options]Work with secret files
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm secret file decrypt
Usage:d8 dk helm secret file decrypt [FILE_PATH] [options]Decrypt secret file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file edit
Usage:d8 dk helm secret file edit FILE_PATH [options]Edit or create new secret file
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret file encrypt
Usage:d8 dk helm secret file encrypt [FILE_PATH] [options]Encrypt file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret generate-secret-key
Usage:d8 dk helm secret generate-secret-key [options]Generate hex encryption key
Options
--debugEnable debug (default $WERF_DEBUG).--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret rotate-secret-key
Usage:d8 dk helm secret rotate-secret-key [EXTRA_SECRET_VALUES_FILE_PATH...] [options]Regenerate secret files with new secret key
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values
Usage:d8 dk helm secret values [options]Work with secret values files
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm secret values decrypt
Usage:d8 dk helm secret values decrypt [FILE_PATH] [options]Decrypt secret values file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values edit
Usage:d8 dk helm secret values edit FILE_PATH [options]Edit or create new secret values file
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm secret values encrypt
Usage:d8 dk helm secret values encrypt [FILE_PATH] [options]Encrypt values file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 dk helm show
Alias: inspect
d8 dk helm show [options]show information of a chart
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm show all
Usage:d8 dk helm show all [CHART] [options]show all information of the chart
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm show chart
Usage:d8 dk helm show chart [CHART] [options]show the chart's definition
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm show crds
Usage:d8 dk helm show crds [CHART] [options]show the chart's CRDs
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm show readme
Usage:d8 dk helm show readme [CHART] [options]show the chart's README
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm show values
Usage:d8 dk helm show values [CHART] [options]show the chart's values
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--jsonpathsupply a JSONPath expression to filter the output--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm status
Usage:d8 dk helm status RELEASE_NAME [options]display the status of the named release
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionif set, display the status of the named release with revision--show-descif set, display the description message of the named release--show-resourcesif set, display the resources of the named release
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm template
Usage:d8 dk helm template [NAME] [CHART] [options]locally render templates
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--api-versions,-aKubernetes api versions used for Capabilities.APIVersions--atomicif set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this installation when install fails--create-namespacecreate the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--generate-name,-ggenerate the name (and omit the NAME parameter)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsinclude CRDs in the templated output--insecure-skip-tls-verifyskip tls certificate checks for the chart download--is-upgradeset .Release.IsUpgrade instead of .Release.IsInstall--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--kube-versionKubernetes version used for Capabilities.KubeVersion--labels,-lLabels that would be added to release metadata. Should be divided by comma.--name-templatespecify template used to name the release--no-hooksprevent hooks from running during install--output-dirwrites the executed templates to files in output-dir instead of stdout--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--release-nameuse release name in the output-dir path.--render-subchart-notesif set, render subchart notes along with the parent--replacere-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repochart repository url where to locate the requested chart--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--show-only,-sonly show manifests rendered from the given templates--skip-crdsif set, no CRDs will be installed. By default, CRDs are installed if not already present--skip-testsskip tests from templated output--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--validatevalidate your manifests against the Kubernetes cluster you are currently pointing at. This is the same validation performed on an install--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm test
Usage:d8 dk helm test [RELEASE] [options]run tests for a release
Options
--filterspecify tests by attribute (currently "name") using attribute=value syntax or '!attribute=value' to exclude a test (can specify multiple or separate values with commas: name=test1,name=test2)--logsdump the logs from test pods (this runs after all tests are complete, but before any cleanup)--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm uninstall
Aliases: del, delete, un
d8 dk helm uninstall RELEASE_NAME [...] [options]uninstall a release
Options
--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents. Defaults to background.--descriptionadd a custom description--dry-runsimulate a uninstall--ignore-not-foundTreat "release not found" as a successful uninstall--keep-historyremove all associated resources and mark the release as deleted, but retain the release history--no-hooksprevent hooks from running during uninstallation--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--waitif set, will wait until all the resources are deleted before returning. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm upgrade
Usage:d8 dk helm upgrade [RELEASE] [CHART] [options]upgrade a release
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicif set, upgrade process rolls back changes made in case of failed upgrade. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this upgrade when upgrade fails--create-namespaceif --install is set, create the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the upgrade process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--history-maxlimit the maximum number of revisions saved per release. Use 0 for no limit--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verifyskip tls certificate checks for the chart download--install,-iif a release by this name doesn't already exist, run an install--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--labels,-lLabels that would be added to release metadata. Should be separated by comma. Original release labels will be merged with upgrade labels. You can unset label using null.--no-hooksdisable pre/post upgrade hooks--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--recreate-podsperforms pods restart for the resource if applicable--render-subchart-notesif set, render subchart notes along with the parent--repochart repository url where to locate the requested chart--reset-then-reuse-valueswhen upgrading, reset the values to the ones built into the chart, apply the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' or '--reuse-values' is specified, this is ignored--reset-valueswhen upgrading, reset the values to the ones built into the chart--reuse-valueswhen upgrading, reuse the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' is specified, this is ignored--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crdsif set, no CRDs will be installed when an upgrade is performed with install flag enabled. By default, CRDs are installed if not already present, when an upgrade is performed with install flag enabled--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm verify
Usage:d8 dk helm verify PATH [options]verify that a chart at the given path has been signed and is valid
Options
--keyringkeyring containing public keys
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk helm version
Usage:d8 dk helm version [options]print the client version information
Options
--client,-cdisplay client version information--shortprint the version number--templatetemplate for version string format
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk host
Usage:d8 dk host [options]Work with werf cache and data of all projects on the host machine
d8 dk host cleanup
Usage:d8 dk host cleanup [options]Cleanup old unused werf cache and data of all projects on host machine.
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--forceForce deletion of images which are being used by some containers (default $WERF_FORCE)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk host purge
Usage:d8 dk host purge [options]Purge werf images, cache and other data for all projects on host machine
Options
--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--forceFirst remove containers that use werf docker images which are going to be deleted--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk kube-run
Usage:d8 dk kube-run [options] [IMAGE_NAME] [-- COMMAND ARG...]Run container for project image in Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--auto-pull-secretAutomatically create docker config secret in the namespace and plug it via pod's imagePullSecrets for private registry access (default $WERF_AUTO_PULL_SECRET or true if not specified)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--copy-fromCopy file/dir from container to local machine after user command execution. Example: "/from/file:to". Can be specified multiple times. Can also be defined with "$WERF_COPY_FROM_*", e.g. "WERF_COPY_FROM_1=from:to".--copy-toCopy file/dir from local machine to container before user command execution. Example: "from:/to/file". Can be specified multiple times. Can also be defined with "$WERF_COPY_TO_*", e.g. "WERF_COPY_TO_1=from:to".--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--extra-optionsPass extra options to "kubectl run" command, which will create a Pod (default $WERF_EXTRA_OPTIONS)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--interactive,-iEnable interactive mode (default $WERF_INTERACTIVE or false if not specified)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--overridesInline JSON to override/extend any fields in created Pod, e.g. to add imagePullSecrets field (default $WERF_OVERRIDES). %pod_name% and %container_name% will be replaced with names of a created pod and a container.--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--podSet created pod name (default $WERF_POD or autogenerated if not specified)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rmRemove pod and other created resources after command completion (default $WERF_RM or true if not specified)--rm-with-namespaceRemove also a namespace after command completion (default $WERF_RM_WITH_NAMESPACE or false if not specified)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--tty,-tAllocate a TTY (default $WERF_TTY or false if not specified)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk managed-images
Usage:d8 dk managed-images [options]Work with managed images which will be preserved during cleanup procedure
d8 dk managed-images add
Usage:d8 dk managed-images add [options]Add image record to the list of managed images which will be preserved during cleanup procedure.
Options
--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk managed-images ls
Usage:d8 dk managed-images ls [options]List managed images which will be preserved during cleanup procedure.
Options
--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read images from the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk managed-images rm
Usage:d8 dk managed-images rm [options]Remove image record from the list of managed images which will be preserved during cleanup procedure.
Options
--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk plan
Usage:d8 dk plan [options]Prepare deploy plan and show how resources in a Kubernetes cluster would change on next deploy
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--exit-codeIf true, returns exit code 0 if no changes, exit code 2 if any changes planned or exit code 1 in case of an error (default $WERF_EXIT_CODE or false)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk purge
Usage:d8 dk purge [options]Purge all project images in the container registry
Options
--allowed-docker-storage-volume-usageSet allowed percentage of docker storage volume usage which will cause cleanup of least recently used local docker images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of least recently used local docker images werf would delete images until volume usage becomes below "allowed-docker-storage-volume-usage - allowed-docker-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to delete images from the specified repo--docker-server-storage-pathUse specified path to the local docker server storage to check docker storage volume usage while performing garbage collection of local docker images (detect local docker server storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk render
Usage:d8 dk render [IMAGE_NAME...] [options]Render Kubernetes templates
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsInclude CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-versionSet specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--outputWrite render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--show-only,-sonly show manifests rendered from the given templates--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--validateValidate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 dk run
Usage:d8 dk run [options] [IMAGE_NAME] [-- COMMAND ARG...]Run container for project image
Options
--bashUse predefined docker options and command for debug--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in working directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-optionsDefine docker run options (default $WERF_DOCKER_OPTIONS)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--shellUse predefined docker options and command for debug--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 dk slugify
Usage:d8 dk slugify STRING [options]Print slugged string by specified format.
Options
--debugEnable debug (default $WERF_DEBUG).--format,-fr|helm-release: suitable for Helm Release ns|kubernetes-namespace: suitable for Kubernetes Namespace tag|docker-tag: suitable for Docker Tag--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk synchronization
Usage:d8 dk synchronization [options]Run synchronization server
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hostBind synchronization server to the specified host (default localhost or $WERF_HOST)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kubernetesUse kubernetes lock-manager stages-storage-cache (default $WERF_KUBERNETES)--kubernetes-namespace-prefixUse specified prefix for namespaces created for lock-manager and stages-storage-cache (defaults to 'werf-synchronization-' when --kubernetes option is used or $WERF_KUBERNETES_NAMESPACE_PREFIX)--localUse file lock-manager and file stages-storage-cache (true by default or $WERF_LOCAL)--local-lock-manager-base-dirUse specified directory as base for file lock-manager (~/.werf/synchronization_server/lock_manager by default or $WERF_LOCAL_LOCK_MANAGER_BASE_DIR)--local-stages-storage-cache-base-dirUse specified directory as base for file stages-storage-cache (~/.werf/synchronization_server/stages_storage_cache by default or $WERF_LOCAL_STAGES_STORAGE_CACHE_BASE_DIR)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--portBind synchronization server to the specified port (default 55581 or $WERF_PORT)--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--ttlTime to live for lock-manager locks and stages-storage-cache records (default $WERF_TTL)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 dk version
Usage:d8 dk version [options]Print version
d8 help
Help about any command
d8 k
Alias: kubectl
kubectl controls the Kubernetes cluster manager
Options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k alpha
Usage:d8 k alpha [options]Commands for features in alpha
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k annotate
Usage:d8 k annotate [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]Update the annotations on a resource
Options
--allSelect all resources, in the namespace of the specified resource types.--all-namespaces,-AIf true, check the specified action in all namespaces.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to update the annotation--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the annotations for a given resource.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the annotation update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-resources
Usage:d8 k api-resources [options]Print the supported API resources on the server
Options
--api-groupLimit to resources in the specified API group.--cachedUse the cached list of resources if available.--categoriesLimit to resources that belong to the specified categories.--namespacedIf false, non-namespaced resources will be returned, otherwise returning namespaced resources by default.--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (wide, name).--sort-byIf non-empty, sort list of resources using specified field. The field can be either 'name' or 'kind'.--verbsLimit to resources that support the specified verbs.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-versions
Usage:d8 k api-versions [options]Print the supported API versions on the server, in the form of "group/version"
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) [options]Apply a configuration to a resource by file name or stdin
Options
--allSelect all resources in the namespace of the specified resource types.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fThe files that contain the configurations to apply.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--force-conflictsIf true, server-side apply will force the changes against conflicts.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--openapi-patchIf true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked-in types.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteAutomatically resolve conflicts between the modified and live configuration by using values from the modified configuration--pruneAutomatically delete resource objects, that do not appear in the configs and are created by either apply or create --save-config. Should be used with either -l or --all.--prune-allowlistOverwrite the default allowlist withfor --prune --prune-whitelistOverwrite the default whitelist withfor --prune --recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-sideIf true, apply runs in the server instead of the client.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply edit-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) edit-last-applied (RESOURCE/NAME | -f FILENAME) [options]Edit latest last-applied-configuration annotations of a resource/object
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to edit the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsDefaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply set-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) set-last-applied -f FILENAME [options]Set the last-applied-configuration annotation on a live object to match the contents of a file
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--create-annotationWill create 'last-applied-configuration' annotations if current objects doesn't have one--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files that contains the last-applied-configuration annotations--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply view-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) view-last-applied (TYPE [NAME | -l label] | TYPE/NAME | -f FILENAME) [options]View the latest last-applied-configuration annotations of a resource/object
Options
--allSelect all resources in the namespace of the specified resource types--filename,-fFilename, directory, or URL to files that contains the last-applied-configuration annotations--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. Must be one of (yaml, json)--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k attach
Usage:d8 k attach (POD | TYPE/NAME) -c CONTAINER [options]Attach to a running container
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet,-qOnly print output from the remote session--stdin,-iPass stdin to the container--tty,-tStdin is a TTY
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth
Usage:d8 k auth [options]Inspect authorization
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth can-i
Usage:d8 k auth can-i VERB [TYPE | TYPE/NAME | NONRESOURCEURL] [options]Check whether an action is allowed
Options
--all-namespaces,-AIf true, check the specified action in all namespaces.--listIf true, prints all allowed actions.--no-headersIf true, prints allowed actions without headers--quiet,-qIf true, suppress output and just return the exit code.--subresourceSubResource such as pod/log or deployment/scale
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth reconcile
Usage:d8 k auth reconcile -f FILENAME [options]Reconciles rules for RBAC role, role binding, cluster role, and cluster role binding objects
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to reconcile.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--remove-extra-permissionsIf true, removes extra permissions added to roles--remove-extra-subjectsIf true, removes extra subjects added to rolebindings--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth whoami
Usage:d8 k auth whoami [options]Experimental: Check self subject attributes
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k autoscale
Usage:d8 k autoscale (-f FILENAME | TYPE NAME | TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [options]Auto-scale a deployment, replica set, stateful set, or replication controller
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cpu-percentThe target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to autoscale.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--maxThe upper limit for the number of pods that can be set by the autoscaler. Required.--minThe lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value.--nameThe name for the newly created object. If not specified, the name of the input resource will be used.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate
Usage:d8 k certificate SUBCOMMAND [options]Modify certificate resources
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate approve
Usage:d8 k certificate SUBCOMMAND approve (-f FILENAME | NAME) [options]Approve a certificate signing request
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to update--forceUpdate the CSR even if it is already approved.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate deny
Usage:d8 k certificate SUBCOMMAND deny (-f FILENAME | NAME) [options]Deny a certificate signing request
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to update--forceUpdate the CSR even if it is already denied.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info
Usage:d8 k cluster-info [options]Display cluster information
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info dump
Usage:d8 k cluster-info dump [options]Dump relevant information for debugging and diagnosis
Options
--all-namespaces,-AIf true, dump all namespaces. If true, --namespaces is ignored.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--namespacesA comma separated list of namespaces to dump.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-directoryWhere to output the files. If empty or '-' uses stdout, otherwise creates a directory hierarchy in that directory--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k completion
Usage:d8 k completion SHELL [options]Output shell completion code for the specified shell (bash, zsh, fish, or powershell)
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config
Usage:d8 k config SUBCOMMAND [options]Modify kubeconfig files
Options
--kubeconfiguse a particular kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config current-context
Usage:d8 k config SUBCOMMAND current-context [options]Display the current-context
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-cluster
Usage:d8 k config SUBCOMMAND delete-cluster NAME [options]Delete the specified cluster from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-context
Usage:d8 k config SUBCOMMAND delete-context NAME [options]Delete the specified context from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-user
Usage:d8 k config SUBCOMMAND delete-user NAME [options]Delete the specified user from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-clusters
Usage:d8 k config SUBCOMMAND get-clusters [options]Display clusters defined in the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-contexts
Usage:d8 k config SUBCOMMAND get-contexts [(-o|--output=)name)] [options]Describe one or many contexts
Options
--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (name).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-users
Usage:d8 k config SUBCOMMAND get-users [options]Display users defined in the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config rename-context
Usage:d8 k config SUBCOMMAND rename-context CONTEXT_NAME NEW_NAME [options]Rename a context from the kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set
Usage:d8 k config SUBCOMMAND set PROPERTY_NAME PROPERTY_VALUE [options]Set an individual value in a kubeconfig file
Options
--set-raw-bytesWhen writing a []byte PROPERTY_VALUE, write the given string directly without base64 decoding.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-cluster
Usage:d8 k config SUBCOMMAND set-cluster NAME [--server=server] [--certificate-authority=path/to/certificate/authority] [--insecure-skip-tls-verify=true] [--tls-server-name=example.com] [options]Set a cluster entry in kubeconfig
Options
--certificate-authorityPath to certificate-authority file for the cluster entry in kubeconfig--embed-certsembed-certs for the cluster entry in kubeconfig--insecure-skip-tls-verifyinsecure-skip-tls-verify for the cluster entry in kubeconfig--proxy-urlproxy-url for the cluster entry in kubeconfig--serverserver for the cluster entry in kubeconfig--tls-server-nametls-server-name for the cluster entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-context
Usage:d8 k config SUBCOMMAND set-context [NAME | --current] [--cluster=cluster_nickname] [--user=user_nickname] [--namespace=namespace] [options]Set a context entry in kubeconfig
Options
--clustercluster for the context entry in kubeconfig--currentModify the current context--namespacenamespace for the context entry in kubeconfig--useruser for the context entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-credentials
Usage:d8 k config SUBCOMMAND set-credentials NAME [--client-certificate=path/to/certfile] [--client-key=path/to/keyfile] [--token=bearer_token] [--username=basic_user] [--password=basic_password] [--auth-provider=provider_name] [--auth-provider-arg=key=value] [--exec-command=exec_command] [--exec-api-version=exec_api_version] [--exec-arg=arg] [--exec-env=key=value] [options]Set a user entry in kubeconfig
Options
--auth-providerAuth provider for the user entry in kubeconfig--auth-provider-arg'key=value' arguments for the auth provider--client-certificatePath to client-certificate file for the user entry in kubeconfig--client-keyPath to client-key file for the user entry in kubeconfig--embed-certsEmbed client cert/key for the user entry in kubeconfig--exec-api-versionAPI version of the exec credential plugin for the user entry in kubeconfig--exec-argNew arguments for the exec credential plugin command for the user entry in kubeconfig--exec-commandCommand for the exec credential plugin for the user entry in kubeconfig--exec-env'key=value' environment values for the exec credential plugin--passwordpassword for the user entry in kubeconfig--tokentoken for the user entry in kubeconfig--usernameusername for the user entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config unset
Usage:d8 k config SUBCOMMAND unset PROPERTY_NAME [options]Unset an individual value in a kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config use-context
Alias: use
d8 k config SUBCOMMAND use-context CONTEXT_NAME [options]Set the current-context in a kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config view
Usage:d8 k config SUBCOMMAND view [options]Display merged kubeconfig settings or a specified kubeconfig file
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--flattenFlatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files)--mergeMerge the full hierarchy of kubeconfig files--minifyRemove all information not used by current-context from the output--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawDisplay raw byte data and sensitive data--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cordon
Usage:d8 k cordon NODE [options]Mark node as unschedulable
Options
--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cp
Usage:d8 k cp <file-spec-src> <file-spec-dest> [options]Copy files and directories to and from containers
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--no-preserveThe copied file/directory's ownership and permissions will not be preserved in the container--retriesSet number of retries to complete a copy operation from a container. Specify 0 to disable or any negative value for infinite retrying. The default is 0 (no retry).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create
Usage:d8 k create -f FILENAME [options]Create a resource from a file or from stdin
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--editEdit the API resource before creating--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to create the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawRaw URI to POST to the server. Uses the transport specified by the kubeconfig file.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsOnly relevant if --edit=true. Defaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrole
Usage:d8 k create -f FILENAME clusterrole NAME --verb=verb --resource=resource.group [--resource-name=resourcename] [--dry-run=server|client|none] [options]Create a cluster role
Options
--aggregation-ruleAn aggregation label selector for combining ClusterRoles.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--non-resource-urlA partial url that user should have access to.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resourceResource that the rule applies to--resource-nameResource in the white list that the rule applies to, repeat this flag for multiple items--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verbVerb that applies to the resources contained in the rule
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrolebinding
Usage:d8 k create -f FILENAME clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Create a cluster role binding for a particular cluster role
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterroleClusterRole this ClusterRoleBinding should reference--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--groupGroups to bind to the clusterrole. The flag can be repeated to add multiple groups.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccountService accounts to bind to the clusterrole, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the clusterrole. The flag can be repeated to add multiple users.--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create configmap
Alias: cm
d8 k create -f FILENAME configmap NAME [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]Create a config map from a local file, directory or literal value
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the configmap to its name.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-env-fileSpecify the path to a file to read lines of key=val pairs to create a configmap.--from-fileKey file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.--from-literalSpecify a key and literal value to insert in configmap (i.e. mykey=somevalue)--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create cronjob
Alias: cj
d8 k create -f FILENAME cronjob NAME --image=image --schedule='0/5 * * * ?' -- [COMMAND] [args...] [options]Create a cron job with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--imageImage name to run.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--restartjob's restart policy. supported values: OnFailure, Never--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--scheduleA schedule in the Cron format the job should be run with.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create deployment
Alias: deploy
d8 k create -f FILENAME deployment NAME --image=image -- [COMMAND] [args...] [options]Create a deployment with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--imageImage names to run.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--portThe port that this container exposes.--replicas,-rNumber of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create ingress
Alias: ing
d8 k create -f FILENAME ingress NAME --rule=host/path=service:port[,tls[=secret]] [options]Create an ingress with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotationAnnotation to insert in the ingress object, in the format annotation=value--classIngress Class to be used--default-backendDefault service for backend, in format of svcname:port--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--ruleRule in format host/path=service:port[,tls=secretname]. Paths containing the leading character '*' are considered pathType=Prefix. tls argument is optional.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create job
Usage:d8 k create -f FILENAME job NAME --image=image [--from=cronjob/name] -- [COMMAND] [args...] [options]Create a job with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--fromThe name of the resource to create a Job from (only cronjob is supported).--imageImage name to run.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create namespace
Alias: ns
d8 k create -f FILENAME namespace NAME [--dry-run=server|client|none] [options]Create a namespace with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create poddisruptionbudget
Alias: pdb
d8 k create -f FILENAME poddisruptionbudget NAME --selector=SELECTOR --min-available=N [--dry-run=server|client|none] [options]Create a pod disruption budget with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--max-unavailableThe maximum number or percentage of unavailable pods this budget requires.--min-availableThe minimum number or percentage of available pods this budget requires.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selectorA label selector to use for this budget. Only equality-based selector requirements are supported.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create priorityclass
Alias: pc
d8 k create -f FILENAME priorityclass NAME --value=VALUE --global-default=BOOL [--dry-run=server|client|none] [options]Create a priority class with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--descriptiondescription is an arbitrary string that usually provides guidelines on when this priority class should be used.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--global-defaultglobal-default specifies whether this PriorityClass should be considered as the default priority.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--preemption-policypreemption-policy is the policy for preempting pods with lower priority.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--valuethe value of this priority class.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create quota
Alias: resourcequota
d8 k create -f FILENAME quota NAME [--hard=key1=value1,key2=value2] [--scopes=Scope1,Scope2] [--dry-run=server|client|none] [options]Create a quota with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--hardA comma-delimited set of resource=quantity pairs that define a hard limit.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--scopesA comma-delimited set of quota scopes that must all match each object tracked by the quota.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create role
Usage:d8 k create -f FILENAME role NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename] [--dry-run=server|client|none] [options]Create a role with single rule
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resourceResource that the rule applies to--resource-nameResource in the white list that the rule applies to, repeat this flag for multiple items--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verbVerb that applies to the resources contained in the rule
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create rolebinding
Usage:d8 k create -f FILENAME rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Create a role binding for a particular role or cluster role
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterroleClusterRole this RoleBinding should reference--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--groupGroups to bind to the role. The flag can be repeated to add multiple groups.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--roleRole this RoleBinding should reference--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccountService accounts to bind to the role, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the role. The flag can be repeated to add multiple users.--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) [options]Create a secret using a specified subcommand
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret docker-registry
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-file=[key=]source] [--dry-run=server|client|none] [options]Create a secret for use with a Docker registry
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--docker-emailEmail for Docker registry--docker-passwordPassword for Docker registry authentication--docker-serverServer location for Docker registry--docker-usernameUsername for Docker registry authentication--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-fileKey files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret generic
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) generic NAME [--type=string] [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]Create a secret from a local file, directory, or literal value
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-env-fileSpecify the path to a file to read lines of key=val pairs to create a secret.--from-fileKey files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.--from-literalSpecify a key and literal value to insert in secret (i.e. mykey=somevalue)--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeThe type of secret to create--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret tls
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) tls NAME --cert=path/to/cert/file --key=path/to/key/file [--dry-run=server|client|none] [options]Create a TLS secret
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--certPath to PEM encoded public key certificate.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--keyPath to private key associated with given certificate.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service
Alias: svc
d8 k create -f FILENAME service [options]Create a service using a specified subcommand
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service clusterip
Usage:d8 k create -f FILENAME service clusterip NAME [--tcp=<port>:<targetPort>] [--dry-run=server|client|none] [options]Create a ClusterIP service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusteripAssign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service externalname
Usage:d8 k create -f FILENAME service externalname NAME --external-name external.name [--dry-run=server|client|none] [options]Create an ExternalName service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-nameExternal name of service--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service loadbalancer
Usage:d8 k create -f FILENAME service loadbalancer NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]Create a LoadBalancer service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service nodeport
Usage:d8 k create -f FILENAME service nodeport NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]Create a NodePort service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--node-portPort used to expose the service on each node in a cluster.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create serviceaccount
Alias: sa
d8 k create -f FILENAME serviceaccount NAME [--dry-run=server|client|none] [options]Create a service account with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create token
Usage:d8 k create -f FILENAME token SERVICE_ACCOUNT_NAME [options]Request a service account token
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--audienceAudience of the requested token. If unset, defaults to requesting a token for use with the Kubernetes API server. May be repeated to request a token valid for multiple audiences.--bound-object-kindKind of an object to bind the token to. Supported kinds are Pod, Secret. If set, --bound-object-name must be provided.--bound-object-nameName of an object to bind the token to. The token will expire when the object is deleted. Requires --bound-object-kind.--bound-object-uidUID of an object to bind the token to. Requires --bound-object-kind and --bound-object-name. If unset, the UID of the existing object is used.--durationRequested lifetime of the issued token. If not set, the lifetime will be determined by the server automatically. The server may return a token with a longer or shorter lifetime.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k debug
Usage:d8 k debug (POD | TYPE[[.VERSION].GROUP]/NAME) [ -- COMMAND [args...] ] [options]Create debugging sessions for troubleshooting workloads and nodes
Options
--arguments-onlyIf specified, everything after -- will be passed to the new container as Args instead of Command.--attachIf true, wait for the container to start running, and then attach as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true.--container,-cContainer name to use for debug container.--copy-toCreate a copy of the target Pod with this name.--envEnvironment variables to set in the container.--filename,-fidentifying the resource to debug--imageContainer image to use for debug container.--image-pull-policyThe image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--profileDebugging profile. Options are "legacy", "general", "baseline", "netadmin", or "restricted".--quiet,-qIf true, suppress informational messages.--replaceWhen used with '--copy-to', delete the original Pod.--same-nodeWhen used with '--copy-to', schedule the copy of target Pod on the same node.--set-imageWhen used with '--copy-to', a list of name=image pairs for changing container images, similar to how 'kubectl set image' works.--share-processesWhen used with '--copy-to', enable process namespace sharing in the copy.--stdin,-iKeep stdin open on the container(s) in the pod, even if nothing is attached.--targetWhen using an ephemeral container, target processes in this container name.--tty,-tAllocate a TTY for the debugging container.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k delete
Usage:d8 k delete ([-f FILENAME] | [-k DIRECTORY] | TYPE [(NAME | -l label | --all)]) [options]Delete resources by file names, stdin, resources and names, or by resources and label selector
Options
--allDelete all resources, in the namespace of the specified resource types.--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fcontaining the resource to delete.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--ignore-not-foundTreat "resource not found" as a successful delete. Defaults to "true" when --all is specified.--interactive,-iIf true, delete resource only when user confirms. This flag is in Alpha.--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--nowIf true, resources are signaled for immediate shutdown (same as --grace-period=1).--output,-oOutput mode. Use "-o name" for shorter output (resource/name).--rawRaw URI to DELETE to the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k describe
Usage:d8 k describe (-f FILENAME | TYPE [NAME_PREFIX | -l label] | TYPE/NAME) [options]Show details of a specific resource or group of resources
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--filename,-fFilename, directory, or URL to files containing the resource to describe--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-eventsIf true, display events related to the described object.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k diff
Usage:d8 k diff -f FILENAME [options]Diff the live version against a would-be applied version
Options
--concurrencyNumber of objects to process in parallel when diffing against the live version. Larger number = faster, but more memory, I/O and CPU over that shorter period of time.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files contains the configuration to diff--force-conflictsIf true, server-side apply will force the changes against conflicts.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--pruneInclude resources that would be deleted by pruning. Can be used with -l and default shows all resources would be pruned--prune-allowlistOverwrite the default whitelist withfor --prune --recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-sideIf true, apply runs in the server instead of the client.--show-managed-fieldsIf true, include managed fields in the diff.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k drain
Usage:d8 k drain NODE [options]Drain node in preparation for maintenance
Options
--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--delete-emptydir-dataContinue even if there are pods using emptyDir (local data that will be deleted when the node is drained).--delete-local-dataContinue even if there are pods using emptyDir (local data that will be deleted when the node is drained).--disable-evictionForce drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, use with caution.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--forceContinue even if there are pods that do not declare a controller.--grace-periodPeriod of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used.--ignore-daemonsetsIgnore DaemonSet-managed pods.--pod-selectorLabel selector to filter pods on the node--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--skip-wait-for-delete-timeoutIf pod DeletionTimestamp older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip.--timeoutThe length of time to wait before giving up, zero means infinite
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k edit
Usage:d8 k edit (RESOURCE/NAME | -f FILENAME) [options]Edit a resource on the server
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to edit the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-patchOutput the patch if the resource is edited.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, edit will operate on the subresource of the requested object. Must be one of [status]. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsDefaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k events
Usage:d8 k events [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file] [--for TYPE/NAME] [--watch] [--types=Normal,Warning] [options]List events
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--forFilter events to only those pertaining to the specified resource.--no-headersWhen using the default output format, don't print headers.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typesOutput only events of given types.--watch,-wAfter listing the requested events, watch for more events.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k exec
Usage:d8 k exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] [options]Execute a command in a container
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--filename,-fto use to exec into the resource--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet,-qOnly print output from the remote session--stdin,-iPass stdin to the container--tty,-tStdin is a TTY
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k explain
Usage:d8 k explain TYPE [--recursive=FALSE|TRUE] [--api-version=api-version-group] [--output=plaintext|plaintext-openapiv2] [options]Get documentation for a resource
Options
--api-versionUse given api-version (group/version) of the resource.--outputFormat in which to render the schema. Valid values are: (plaintext, plaintext-openapiv2).--recursiveWhen true, print the name of all the fields recursively. Otherwise, print the available fields with their description.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k expose
Usage:d8 k expose (-f FILENAME | TYPE NAME) [--port=port] [--protocol=TCP|UDP|SCTP] [--target-port=number-or-name] [--name=name] [--external-ip=external-ip-of-service] [--type=type] [options]Take a replication controller, service, deployment or pod and expose it as a new Kubernetes service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cluster-ipClusterIP to be assigned to the service. Leave empty to auto-allocate, or set to 'None' to create a headless service.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-ipAdditional external IP address (not managed by Kubernetes) to accept for the service. If this IP is routed to a node, the service can be accessed by this IP in addition to its generated service IP.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to expose a service--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--labels,-lLabels to apply to the service created by this call.--load-balancer-ipIP to assign to the LoadBalancer. If empty, an ephemeral IP will be created and used (cloud-provider specific).--nameThe name for the newly created object.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-typeThe method used to override the generated object: json, merge, or strategic.--overridesAn inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--portThe port that the service should serve on. Copied from the resource being exposed, if unspecified--protocolThe network protocol for the service to be created. Default is 'TCP'.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selectorA label selector to use for this service. Only equality-based selector requirements are supported. If empty (the default) infer the selector from the replication controller or replica set.)--session-affinityIf non-empty, set the session affinity for the service to this; legal values: 'None', 'ClientIP'--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--target-portName or number for the port on the container that the service should direct traffic to. Optional.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeType for this service: ClusterIP, NodePort, LoadBalancer, or ExternalName. Default is 'ClusterIP'.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k get
Usage:d8 k get [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file|custom-columns|custom-columns-file|wide] (TYPE[.VERSION][.GROUP] [NAME | -l label] | TYPE[.VERSION][.GROUP]/NAME ...) [flags] [options]Display one or many resources
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--ignore-not-foundIf the requested object does not exist the command will return exit code 0.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--label-columns,-LAccepts a comma separated list of labels that are going to be presented as columns. Names are case-sensitive. You can also use multiple flag options like -L label1 -L label2...--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file, custom-columns, custom-columns-file, wide). See custom columns [https://kubernetes.io/docs/reference/kubectl/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [https://kubernetes.io/docs/reference/kubectl/jsonpath/].--output-watch-eventsOutput watch event objects when --watch or --watch-only is used. Existing objects are output as initial ADDED events.--rawRaw URI to request from the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-printIf true, have the server return the appropriate table output. Supports extension APIs and CRDs.--show-kindIf present, list the resource type for the requested object(s).--show-labelsWhen printing, show all labels as the last column (default hide labels column)--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--sort-byIf non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.--subresourceIf specified, gets the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--watch,-wAfter listing/getting the requested object, watch for changes.--watch-onlyWatch for changes to the requested object(s), without listing/getting first.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k kustomize
Usage:d8 k kustomize DIR [options]Build a kustomization target from a directory or URL
Options
--as-current-useruse the uid and gid of the command executor to run the function in the container--enable-alpha-pluginsenable kustomize plugins--enable-helmEnable use of the Helm chart inflator generator.--enable-managedby-labelenable adding app.kubernetes.io/managed-by--env,-ea list of environment variables to be used by functions--helm-api-versionsKubernetes api versions used by Helm for Capabilities.APIVersions--helm-commandhelm command (path to executable)--helm-kube-versionKubernetes version used by Helm for Capabilities.KubeVersion--load-restrictorif set to 'LoadRestrictionsNone', local kustomizations may load files from outside their root. This does, however, break the relocatability of the kustomization.--mounta list of storage options read from the filesystem--networkenable network access for functions that declare it--network-namethe docker network to run the container in--output,-oIf specified, write output to this path.--reorderReorder the resources just before output. Use 'legacy' to apply a legacy reordering (Namespaces first, Webhooks last, etc). Use 'none' to suppress a final reordering.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k label
Usage:d8 k label [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]Update the labels on a resource
Options
--allSelect all resources, in the namespace of the specified resource types--all-namespaces,-AIf true, check the specified action in all namespaces.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to update the labels--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the labels for a given resource.--localIf true, label will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow labels to be overwritten, otherwise reject label updates that overwrite existing labels.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the labels update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k logs
Usage:d8 k logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER] [options]Print the logs for a container in a pod
Options
--all-containersGet all containers' logs in the pod(s).--container,-cPrint the logs of this container--follow,-fSpecify if the logs should be streamed.--ignore-errorsIf watching / following pod logs, allow for any errors that occur to be non-fatal--insecure-skip-tls-verify-backendSkip verifying the identity of the kubelet that logs are requested from. In theory, an attacker could provide invalid log content back. You might want to use this if your kubelet serving certificates have expired.--limit-bytesMaximum bytes of logs to return. Defaults to no limit.--max-log-requestsSpecify maximum number of concurrent logs to follow when using by a selector. Defaults to 5.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--prefixPrefix each log line with the log source (pod name and container name)--previous,-pIf true, print the logs for the previous instance of the container in a pod if it exists.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--sinceOnly return logs newer than a relative duration like 5s, 2m, or 3h. Defaults to all logs. Only one of since-time / since may be used.--since-timeOnly return logs after a specific date (RFC3339). Defaults to all logs. Only one of since-time / since may be used.--tailLines of recent log file to display. Defaults to -1 with no selector, showing all log lines otherwise 10, if a selector is provided.--timestampsInclude timestamps on each line in the log output
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k options
Usage:d8 k options [options]Print the list of flags inherited by all commands
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k patch
Usage:d8 k patch (-f FILENAME | TYPE NAME) [-p PATCH|--patch-file FILE] [options]Update fields of a resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to update--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, patch will operate on the content of the file, not the server-side resource.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--patch,-pThe patch to be applied to the resource JSON file.--patch-fileA file containing a patch to be applied to the resource.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, patch will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeThe type of patch being provided; one of [json merge strategic]
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin
Usage:d8 k plugin [flags] [options]Provides utilities for interacting with plugins
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin list
Usage:d8 k plugin [flags] list [options]List all visible plugin executables on a user's PATH
Options
--name-onlyIf true, display only the binary name of each plugin, rather than its full path
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k port-forward
Usage:d8 k port-forward TYPE/NAME [options] [LOCAL_PORT:]REMOTE_PORT [...[LOCAL_PORT_N:]REMOTE_PORT_N]Forward one or more local ports to a pod
Options
--addressAddresses to listen on (comma separated). Only accepts IP addresses or localhost as a value. When localhost is supplied, kubectl will try to bind on both 127.0.0.1 and ::1 and will fail if neither of these addresses are available to bind.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k proxy
Usage:d8 k proxy [--port=PORT] [--www=static-dir] [--www-prefix=prefix] [--api-prefix=prefix] [options]Run a proxy to the Kubernetes API server
Options
--accept-hostsRegular expression for hosts that the proxy should accept.--accept-pathsRegular expression for paths that the proxy should accept.--addressThe IP address on which to serve on.--api-prefixPrefix to serve the proxied API under.--append-server-pathIf true, enables automatic path appending of the kube context server path to each request.--disable-filterIf true, disable request filtering in the proxy. This is dangerous, and can leave you vulnerable to XSRF attacks, when used with an accessible port.--keepalivekeepalive specifies the keep-alive period for an active network connection. Set to 0 to disable keepalive.--port,-pThe port on which to run the proxy. Set to 0 to pick a random port.--reject-methodsRegular expression for HTTP methods that the proxy should reject (example --reject-methods='POST,PUT,PATCH').--reject-pathsRegular expression for paths that the proxy should reject. Paths specified here will be rejected even accepted by --accept-paths.--unix-socket,-uUnix socket on which to run the proxy.--www,-wAlso serve static files from the given directory under the specified prefix.--www-prefix,-PPrefix to serve static files under, if static file directory is specified.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k replace
Usage:d8 k replace -f FILENAME [options]Replace a resource by file name or stdin
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fThe files that contain the configurations to replace.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawRaw URI to PUT to the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, replace will operate on the subresource of the requested object. Must be one of [status scale]. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout
Usage:d8 k rollout SUBCOMMAND [options]Manage the rollout of a resource
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout history
Usage:d8 k rollout SUBCOMMAND history (TYPE NAME | TYPE/NAME) [flags] [options]View rollout history
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revisionSee the details, including podTemplate of the revision specified--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout pause
Usage:d8 k rollout SUBCOMMAND pause RESOURCE [options]Mark the provided resource as paused
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout restart
Usage:d8 k rollout SUBCOMMAND restart RESOURCE [options]Restart a resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout resume
Usage:d8 k rollout SUBCOMMAND resume RESOURCE [options]Resume a paused resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout status
Usage:d8 k rollout SUBCOMMAND status (TYPE NAME | TYPE/NAME) [flags] [options]Show the status of the rollout
Options
--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revisionPin to a specific revision for showing its status. Defaults to 0 (last revision).--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeoutThe length of time to wait before ending watch, zero means never. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).--watch,-wWatch the status of the rollout until it's done.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout undo
Usage:d8 k rollout SUBCOMMAND undo (TYPE NAME | TYPE/NAME) [flags] [options]Undo a previous rollout
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--to-revisionThe revision to rollback to. Default to 0 (last revision).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k run
Usage:d8 k run NAME --image=image [--env="key=value"] [--port=port] [--dry-run=server|client] [--overrides=inline-json] [--command] -- [COMMAND] [args...] [options]Run a particular image on the cluster
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotationsAnnotations to apply to the pod.--attachIf true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true. With '--restart=Never' the exit code of the container process is returned.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--commandIf true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--envEnvironment variables to set in the container.--exposeIf true, create a ClusterIP service associated with the pod. Requires `--port`.--field-managerName of the manager used to track field ownership.--filename,-fto use to replace the resource.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--imageThe image for the container to run.--image-pull-policyThe image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--labels,-lComma separated labels to apply to the pod. Will override previous values.--leave-stdin-openIf the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-typeThe method used to override the generated object: json, merge, or strategic.--overridesAn inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--portThe port that this container exposes.--privilegedIf true, run the container in privileged mode.--quiet,-qIf true, suppress prompt messages.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--restartThe restart policy for this Pod. Legal values [Always, OnFailure, Never].--rmIf true, delete the pod after it exits. Only valid when attaching to the container, e.g. with '--attach' or with '-i/--stdin'.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--stdin,-iKeep stdin open on the container in the pod, even if nothing is attached.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--tty,-tAllocate a TTY for the container in the pod.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k scale
Usage:d8 k scale [--resource-version=version] [--current-replicas=count] --replicas=COUNT (-f FILENAME | TYPE NAME) [options]Set a new size for a deployment, replica set, or replication controller
Options
--allSelect all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--current-replicasPrecondition for current size. Requires that the current size of the resource match this value in order to scale. -1 (default) for no condition.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to set a new size--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--replicasThe new desired number of replicas. Required.--resource-versionPrecondition for resource version. Requires that the current resource version match this value in order to scale.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a scale operation, zero means don't wait. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set
Usage:d8 k set SUBCOMMAND [options]Set specific features on objects
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set env
Usage:d8 k set SUBCOMMAND env RESOURCE/NAME KEY_1=VAL_1 ... KEY_N=VAL_N [options]Update environment variables on a pod template
Options
--allIf true, select all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers,-cThe names of containers in the selected pod templates to change - may use wildcards--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--env,-eSpecify a key-value pair for an environment variable to set into each container.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files the resource to update the env--fromThe name of a resource from which to inject environment variables--keysComma-separated list of keys to import from specified resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the environment and any changes in the standard format. this flag will removed when we have kubectl view env.--localIf true, set env will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow environment to be overwritten, otherwise reject updates that overwrite existing environment.--prefixPrefix to append to variable names--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resolveIf true, show secret or configmap references when listing variables--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set image
Usage:d8 k set SUBCOMMAND image (-f FILENAME | TYPE NAME) CONTAINER_NAME_1=CONTAINER_IMAGE_1 ... CONTAINER_NAME_N=CONTAINER_IMAGE_N [options]Update the image of a pod template
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set image will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set resources
Usage:d8 k set SUBCOMMAND resources (-f FILENAME | TYPE NAME) ([--limits=LIMITS & --requests=REQUESTS] [options]Update resource requests/limits on objects with pod templates
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers,-cThe names of containers in the selected pod templates to change, all containers are selected by default - may use wildcards--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--limitsThe resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--localIf true, set resources will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--requestsThe resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set selector
Usage:d8 k set SUBCOMMAND selector (-f FILENAME | TYPE NAME) EXPRESSIONS [--resource-version=version] [options]Set the selector on a resource
Options
--allSelect all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fidentifying the resource.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the selectors update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set serviceaccount
Alias: sa
d8 k set SUBCOMMAND serviceaccount (-f FILENAME | TYPE NAME) SERVICE_ACCOUNT [options]Update the service account of a resource
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set serviceaccount will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set subject
Usage:d8 k set SUBCOMMAND subject (-f FILENAME | TYPE NAME) [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Update the user, group, or service account in a role binding or cluster role binding
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files the resource to update the subjects--groupGroups to bind to the role--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set subject will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--serviceaccountService accounts to bind to the role--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the role
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k taint
Usage:d8 k taint NODE NAME KEY_1=VAL_1:TAINT_EFFECT_1 ... KEY_N=VAL_N:TAINT_EFFECT_N [options]Update the taints on one or more nodes
Options
--allSelect all nodes in the cluster--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow taints to be overwritten, otherwise reject taint updates that overwrite existing taints.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top
Usage:d8 k top [options]Display resource (CPU/memory) usage
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top node
Aliases: nodes, no
d8 k top node [NAME | -l label] [options]Display resource (CPU/memory) usage of nodes
Options
--no-headersIf present, print output without headers--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-capacityPrint node resources based on Capacity instead of Allocatable(default) of the nodes.--sort-byIf non-empty, sort nodes list using specified field. The field can be either 'cpu' or 'memory'.--use-protocol-buffersEnables using protocol-buffers to access Metrics API.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top pod
Aliases: pods, po
d8 k top pod [NAME | -l label] [options]Display resource (CPU/memory) usage of pods
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--containersIf present, print usage of containers within a pod.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--no-headersIf present, print output without headers.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--sort-byIf non-empty, sort pods list using specified field. The field can be either 'cpu' or 'memory'.--sumPrint the sum of the resource usage--use-protocol-buffersEnables using protocol-buffers to access Metrics API.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k uncordon
Usage:d8 k uncordon NODE [options]Mark node as schedulable
Options
--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k version
Usage:d8 k version [options]Print the client and server version information
Options
--clientIf true, shows client version only (no server required).--output,-oOne of 'yaml' or 'json'.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k wait
Usage:d8 k wait ([-f FILENAME] | resource.group/resource.name | resource.group [(-l label | --all)]) [--for=delete|--for condition=available|--for=jsonpath='{}'[=value]] [options]Experimental: Wait for a specific condition on one or many resources
Options
--allSelect all resources in the namespace of the specified resource types--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fidentifying the resource.--forThe condition to wait on: [delete|condition=condition-name[=condition-value]|jsonpath='{JSONPath expression}'=[JSONPath value]]. The default condition-value is true. Condition values are compared after Unicode simple case folding, which is a more general form of case-insensitivity.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up. Zero means check once and don't wait, negative means wait for a week.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 login
Log in to the Deckhouse Kubernetes Platform
Options
--add-dir-headerIf true, adds the file directory to the header of the log messages--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-atwhen logging hits line file:N, emit a stack trace--log-dirIf non-empty, write log files in this directory (no effect when -logtostderr=true)--log-fileIf non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-sizeDefines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderrlog to standard error instead of files--one-outputIf true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headersIf true, avoid header prefixes in the log messages--skip-log-headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthresholdlogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging
d8 login get-token
Usage:d8 login get-token [flags] [options]Run as a kubectl credential plugin
Options
--authentication-timeout-sec[authcode] Timeout of authentication in seconds--browser-command[authcode] Command to open the browser--certificate-authorityPath to a cert file for the certificate authority--certificate-authority-dataBase64 encoded cert for the certificate authority--force-refreshIf set, refresh the ID token regardless of its expiration time--grant-typeAuthorization grant type to use. One of (auto|authcode|authcode-keyboard|password|device-code)--insecure-skip-tls-verifyIf set, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--listen-address[authcode] Address to bind to the local server. If multiple addresses are set, it will try binding in order--listen-port[authcode] deprecated: port to bind to the local server--local-server-cert[authcode] Certificate path for the local server--local-server-key[authcode] Certificate key path for the local server--oidc-auth-request-extra-params[authcode, authcode-keyboard] Extra query parameters to send with an authentication request--oidc-client-idClient ID of the provider (mandatory)--oidc-client-secretClient secret of the provider--oidc-extra-scopeScopes to request to the provider--oidc-issuer-urlIssuer URL of the provider (mandatory)--oidc-redirect-url-authcode-keyboard[authcode-keyboard] Redirect URL--oidc-redirect-url-hostname[authcode] Hostname of the redirect URL--oidc-use-pkceForce PKCE usage--open-url-after-authentication[authcode] If set, open the URL in the browser after authentication--password[password] Password for resource owner password credentials grant--skip-open-browser[authcode] Do not open the browser automatically--tls-renegotiation-freelyIf set, allow a remote server to repeatedly request renegotiation--tls-renegotiation-onceIf set, allow a remote server to request renegotiation once per connection--token-cache-dirPath to a directory for token cache--username[password] Username for resource owner password credentials grant
Global options
--add-dir-headerIf true, adds the file directory to the header of the log messages--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-atwhen logging hits line file:N, emit a stack trace--log-dirIf non-empty, write log files in this directory (no effect when -logtostderr=true)--log-fileIf non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-sizeDefines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderrlog to standard error instead of files--one-outputIf true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headersIf true, avoid header prefixes in the log messages--skip-log-headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthresholdlogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging
d8 mirror
Copy Deckhouse Kubernetes Platform distribution to the local filesystem or third-party registry
d8 mirror pull
Usage:d8 mirror pull <images-bundle-path> [options]Copy Deckhouse Kubernetes Platform distribution to the local filesystem
Options
--deckhouse-tagSpecific Deckhouse build tag to pull. Conflicts with --since-version. If registry contains release channel image for specified tag, all release channels in the bundle will be pointed to it.--exclude-module,-eBlacklist specific modules from downloading. Format is "module-name[@version]". Use one flag per each module. Overridden by use of --include-module."--forceOverwrite existing bundle packages if they are conflicting with current pull operation.--gost-digestCalculate GOST R 34.11-2012 STREEBOG digest for downloaded bundle--images-bundle-chunk-size,-cSplit resulting bundle file into chunks of at most N gigabytes--include-module,-iWhitelist specific modules for downloading. Format is "module-name[@version]". Use one flag per each module. Disables blacklisting by --exclude-module."--insecureInteract with registries over HTTP.--license,-lDeckhouse license key. Shortcut for --source-login=license-token --source-password=<>.--modules-path-suffixSuffix to append to source repo path to locate modules.--no-modulesDo not pull Deckhouse modules into bundle.--no-platformDo not pull Deckhouse Kubernetes Platform into bundle.--no-pull-resumeDo not continue last unfinished pull operation and start from scratch.--no-security-dbDo not pull security databases into bundle.--since-versionMinimal Deckhouse release to pull. Ignored if above current Rock Solid release. Conflicts with --deckhouse-tag.--sourceSource registry to pull Deckhouse images from.--source-loginSource registry login.--source-passwordSource registry password.--tls-skip-verifyDisable TLS certificate validation.--tmp-dirPath to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 mirror push
Usage:d8 mirror push <images-bundle-path> <registry> [options]Copy Deckhouse Kubernetes Platform distribution to the third-party registry
Options
--insecureInteract with registries over HTTP.--modules-path-suffixSuffix to append to source repo path to locate modules.--registry-login,-uUsername to log into the target registry.--registry-password,-pPassword to log into the target registry.--tls-skip-verifyDisable TLS certificate validation.--tmp-dirPath to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 stronghold
Deckhouse Stronghold commands
d8 stronghold auth
Usage:d8 stronghold auth [options]Interact with auth methods
d8 stronghold delete
Usage:d8 stronghold delete [options]Delete secrets and configuration
d8 stronghold kv
Usage:d8 stronghold kv [options]Interact with Stronghold's Key-Value storage
d8 stronghold lease
Usage:d8 stronghold lease [options]Interact with leases
d8 stronghold list
Usage:d8 stronghold list [options]List data or secrets
d8 stronghold login
Usage:d8 stronghold login [options]Authenticate locally
d8 stronghold operator
Usage:d8 stronghold operator [options]Perform operator-specific tasks
d8 stronghold patch
Usage:d8 stronghold patch [options]Patch data, configuration, and secrets
d8 stronghold path-help
Usage:d8 stronghold path-help [options]Retrieve API help for paths
d8 stronghold pki
Usage:d8 stronghold pki [options]Interact with Stronghold's PKI Secrets Engine
d8 stronghold policy
Usage:d8 stronghold policy [options]Interact with policies
d8 stronghold print
Usage:d8 stronghold print [options]Prints runtime configurations
d8 stronghold read
Usage:d8 stronghold read [options]Read data and retrieves secrets
d8 stronghold secrets
Usage:d8 stronghold secrets [options]Interact with secrets engines
d8 stronghold status
Usage:d8 stronghold status [options]Print seal and HA status
d8 stronghold token
Usage:d8 stronghold token [options]Interact with tokens
d8 stronghold transit
Usage:d8 stronghold transit [options]Interact with Stronghold's Transit Secrets Engine
d8 stronghold unwrap
Usage:d8 stronghold unwrap [options]Unwrap a wrapped secret
d8 stronghold version
Usage:d8 stronghold version [options]Print version
d8 stronghold write
Usage:d8 stronghold write [options]Write data, configuration, and secrets
d8 system
Aliases: s, p, platform
Operate system options.
Options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system collect-debug-info
Usage:d8 system collect-debug-info [options]Collect debug info.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit
Usage:d8 system edit [options]Edit configuration files
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit cluster-configuration
Usage:d8 system edit cluster-configuration [options]Edit cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit provider-cluster-configuration
Usage:d8 system edit provider-cluster-configuration [options]Edit provider-cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit static-cluster-configuration
Usage:d8 system edit static-cluster-configuration [options]Edit static-cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system logs
Usage:d8 system logs [options]Inspect deckhouse-controller logs.
Options
--follow,-fSpecify if the logs should be streamed.--sinceShow logs newer than a relative duration like 5s, 2m, or 1h. Only one of since-time / since may be used.--since-timeShow logs after a specific timestamp, e.g. --since-time='2025-05-19 12:00:00'. Only one of since-time / since may be used.--tailLimit the number of lines in the output to the last N lines. Defaults to -1 with no limit.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module
Usage:d8 system module [options]Operate the Deckhouse Kubernetes Platform modules
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module disable
Usage:d8 system module disable [options]Disable module.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module enable
Usage:d8 system module enable [options]Enable module.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module list
Usage:d8 system module list [options]List enabled modules.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module snapshots
Usage:d8 system module snapshots [options]Dump shapshots.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module values
Usage:d8 system module values [options]Dump values.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue
Usage:d8 system queue [options]Dump queues.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue list
Usage:d8 system queue list [options]Dump all queues.
Options
--output,-oOutput format: json|yaml|text.--show-empty,-eShow empty queues.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue main
Usage:d8 system queue main [options]Dump main queue.
Options
--output,-oOutput format: json|yaml|text.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 v
Alias: virtualization
d8 v controls virtual machine related operations on your kubernetes cluster.
Options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v console
Usage:d8 v console (VirtualMachine) [options]Connect to a console of a virtual machine.
Options
--timeoutThe number of minutes to wait for the virtual machine to be ready.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v evict
Usage:d8 v evict (VirtualMachine) [options]Evict a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v port-forward
Usage:d8 v port-forward name[.namespace] [protocol/]localPort[:targetPort]... [options]Forward local ports to a virtual machine
Options
--address--address=: Set this to the address the local ports should be opened on--stdio--stdio=true: Set this to true to forward the tunnel to stdout/stdin; Only works with a single port
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v restart
Usage:d8 v restart (VirtualMachine) [options]Restart a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v scp
Usage:d8 v scp VirtualMachine) [options]SCP files from/to a virtual machine.
Options
--identity-file,-i--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts,-t--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port,-p--port=22: Specify a port on the VM to send SSH traffic to--preservePreserves modification times, access times, and modes from the original file.--recursive,-rRecursively copy entire directories--username,-l--username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v ssh
Usage:d8 v ssh VirtualMachine [options]Open a SSH connection to a virtual machine.
Options
--command,-c--command='ls /': Specify a command to execute in the VM--identity-file,-i--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts,-t--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port,-p--port=22: Specify a port on the VM to send SSH traffic to--username,-l--username=kar: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v start
Usage:d8 v start (VirtualMachine) [options]Start a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v stop
Usage:d8 v stop (VirtualMachine) [options]Stop a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v vnc
Usage:d8 v vnc VirtualMachine [options]Open a vnc connection to a virtual machine.
Options
--address--address=127.0.0.1: Setting this will change the listening address of the VNC server. Example: --address=0.0.0.0 will make the server listen on all interfaces.--port--port=0: Assigning a port value to this will try to run the proxy on the given port if the port is accessible; If unassigned, the proxy will run on a random port--proxy-only--proxy-only=false: Setting this true will run only the vnc proxy and show the port where VNC viewers can connect
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)