This page is generated automatically.
d8 controls the Deckhouse Kubernetes Platform
Common options:
--help,-hhelp for d8--version,-vversion for d8
d8 backup
Backup various parts of Deckhouse Kubernetes Platform
Options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup cluster-config
Usage:d8 backup cluster-config <backup-tarball-path> [options]Take a snapshot of cluster configuration
Options
--compress,-cCompress result file
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup etcd
Usage:d8 backup etcd <snapshot-path> [options]Take a snapshot of ETCD state
Options
--etcd-pod,-pName of the etcd pod to snapshot from. (optional)--verboseVerbose log output.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 backup loki
Usage:d8 backup loki [options]Dump logs from Loki api.
Options
--daysLimit maximum number of days in range to output per queue from Loki. (Default 5 maximum number of days in range per queue.)--endSet end timestamp range to dump logs from Loki. (Default get max end timestamp from Loki, ex. "2025-01-14 15:04:05".)--limitLimit the number of lines to output per queue from Loki. (Default 5000 max limit strings per queue.)--startSet start timestamp range to dump logs from Loki. (Default get max start timestamp from Loki, ex. "2025-01-12 15:04:05".)
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 completion
Generate the autocompletion script for the specified shell
d8 completion bash
Usage:d8 completion bash [options]Generate the autocompletion script for bash
Options
--no-descriptionsdisable completion descriptions
d8 completion fish
Usage:d8 completion fish [options]Generate the autocompletion script for fish
Options
--no-descriptionsdisable completion descriptions
d8 completion powershell
Usage:d8 completion powershell [options]Generate the autocompletion script for powershell
Options
--no-descriptionsdisable completion descriptions
d8 completion zsh
Usage:d8 completion zsh [options]Generate the autocompletion script for zsh
Options
--no-descriptionsdisable completion descriptions
d8 data
Data operations (export/import)
d8 data create
Usage:d8 data create [flags] data_export_name volume_type/volume_name [options]Deprecated: use 'd8 data export create'
Options
--namespace,-ndata volume namespace--publishProvide access outside of cluster--ttlTime to live
d8 data delete
Usage:d8 data delete [flags] data_export_name [options]Deprecated: use 'd8 data export delete'
Options
--namespace,-ndata volume namespace
d8 data download
Usage:d8 data download [flags] [KIND/]data_export_name [path/file.ext] [options]Deprecated: use 'd8 data export download'
Options
--namespace,-ndata volume namespace--output,-ofile to save data (default: same as resource)--publishProvide access outside of cluster--ttlTime to live for auto-created DataExport
d8 data export
Usage:d8 data export [options]Export data (DataExport)
d8 data export create
Usage:d8 data export create [flags] data_export_name volume_type/volume_name [options]Create dataexport kubernetes resource
Options
--namespace,-ndata volume namespace--publishProvide access outside of cluster--ttlTime to live
d8 data export delete
Usage:d8 data export delete [flags] data_export_name [options]Delete dataexport kubernetes resource
Options
--namespace,-ndata volume namespace
d8 data export download
Usage:d8 data export download [flags] [KIND/]data_export_name [path/file.ext] [options]Download exported data
Options
--namespace,-ndata volume namespace--output,-ofile to save data (default: same as resource)--publishProvide access outside of cluster--ttlTime to live for auto-created DataExport
d8 data export list
Alias: ls
d8 data export list [flags] data_export_name [/path/] [options]List DataExported content information
Options
--namespace,-ndata volume namespace--publishProvide access outside of cluster--ttlTime to live for auto-created DataExport
d8 data import
Usage:d8 data import [options]Import data (DataImport)
d8 data import create
Usage:d8 data import create [flags] data_import_name [options]Create DataImport
Options
--file,-fPVC manifest file path--namespace,-ndata volume namespace--publishProvide access outside of cluster--ttlTime to live--wffcWait for first consumer
d8 data import delete
Usage:d8 data import delete [flags] data_import_name [options]Delete dataimport kubernetes resource
Options
--namespace,-ndata volume namespace
d8 data import upload
Usage:d8 data import upload [flags] data_import_name path/file.ext [options]Upload a file to the provided url
Options
--chunks,-cnumber of chunks to upload--dstPath,-ddestination path of the uploaded file--file,-ffile to upload--namespace,-ndata volume namespace--publish,-Ppublish the uploaded file--resumeresume upload if process was interrupted
d8 data list
Usage:d8 data list [flags] data_export_name [/path/] [options]Deprecated: use 'd8 data export list'
Options
--namespace,-ndata volume namespace--publishProvide access outside of cluster--ttlTime to live for auto-created DataExport
d8 delivery-kit
Alias: dk
A set of tools for building, distributing, and deploying containerized applications
d8 delivery-kit build
Usage:d8 delivery-kit build [IMAGE_NAME...] [options]Build images
Options
--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 delivery-kit bundle
Usage:d8 delivery-kit bundle [options]Work with werf bundles: publish bundles into container registry and deploy bundles into Kubernetes cluster
d8 delivery-kit bundle apply
Usage:d8 delivery-kit bundle apply [options]Apply bundle into Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicEnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback,-REnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--deploy-graph-pathSave deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--envUse specified environment (default $WERF_ENV)--force-adoptionAlways adopt resources, even if they belong to a different Helm release (default $WERF_FORCE_ADOPTION or false)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--no-install-crdsDo not install CRDs from "crds/" directories of installed charts (default $WERF_NO_INSTALL_CRDS)--no-pod-logsDisable Pod logs collection and printing (default $WERF_NO_POD_LOGS or false)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default $WERF_RELEASE)--release-labelAdd Helm release labels (can specify multiple). Kind of labels depends or release storage driver. Format: labelName=labelValue. Also, can be specified with $WERF_RELEASE_LABEL_* (e.g. $WERF_RELEASE_LABEL_1=labelName1=labelValue1, $WERF_RELEASE_LABEL_2=labelName2=labelValue2)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--render-subchart-notesIf set, render subchart notes along with the parent (by default $WERF_RENDER_SUBCHART_NOTES or false)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--rollback-graph-pathSave rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-deploy-reportSave deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-helm-dependenciesSkip TLS certificate validation when accessing a Helm charts repository (default $WERF_SKIP_TLS_VERIFY_HELM_DEPENDENCIES)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tagProvide exact tag version or semver-based pattern, werf will install or upgrade to the latest version of the specified bundle ($WERF_TAG or latest by default)--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit bundle copy
Usage:d8 delivery-kit bundle copy [options]Copy published bundle into another location
Options
--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repos--fromSource address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--helm-compatible-chart,-CSet chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default true or $WERF_HELM_COMPATIBLE_CHART.--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--rename-chartForce setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--toDestination address of the bundle to copy, specify bundle archive using schema `archive:PATH_TO_ARCHIVE.tar.gz`, specify remote bundle with schema `[docker://]REPO:TAG` or without schema.--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit bundle publish
Usage:d8 delivery-kit bundle publish [IMAGE_NAME...] [options]Publish bundle
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--helm-compatible-chart,-CSet chart name in the Chart.yaml of the published chart to the last path component of container registry repo (for REGISTRY/PATH/TO/REPO address chart name will be REPO, more info https://helm.sh/docs/topics/registries/#oci-feature-deprecation-and-behavior-changes-with-v370). In helm compatibility mode chart is fully conforming with the helm OCI registry requirements. Default false or $WERF_HELM_COMPATIBLE_CHART.--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--rename-chartForce setting of chart name in the Chart.yaml of the published chart to the specified value (can be set by the $WERF_RENAME_CHART, no rename by default, could not be used together with the '--helm-compatible-chart' option).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tagPublish bundle into container registry repo by the provided tag ($WERF_TAG or latest by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit bundle render
Usage:d8 delivery-kit bundle render [options]Render Kubernetes manifests from bundle
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--bundle-dir,-bGet extracted bundle from directory instead of registry (default $WERF_BUNDLE_DIR)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--envUse specified environment (default $WERF_ENV)--force-adoptionAlways adopt resources, even if they belong to a different Helm release (default $WERF_FORCE_ADOPTION or false)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsInclude CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--kube-versionSet specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--outputWrite render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default $WERF_RELEASE)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=secret_values_test.yaml, $WERF_SECRET_VALUES_DB=secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--show-only,-sonly show manifests rendered from the given templates--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-tls-verify-helm-dependenciesSkip TLS certificate validation when accessing a Helm charts repository (default $WERF_SKIP_TLS_VERIFY_HELM_DEPENDENCIES)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tagProvide exact tag version or semver-based pattern, werf will render the latest version of the specified bundle ($WERF_TAG or latest by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--validateValidate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=values_1.yaml, $WERF_VALUES_2=values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit ci-env
Usage:d8 delivery-kit ci-env CI_SYSTEM [options]Generate werf environment variables for specified CI system
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--as-env-fileCreate the .env file and print the path for sourcing (default $WERF_AS_ENV_FILE).--as-fileCreate the script and print the path for sourcing (default $WERF_AS_FILE).--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command will copy specified or default (~/.docker) config to the temporary directory and may perform additional login with new config.--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--login-to-registryLog in to CI-specific registry automatically if possible (default $WERF_LOGIN_TO_REGISTRY).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to custom file (default $WERF_OUTPUT_FILE_PATH).--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--shellSet to cmdexe, powershell or use the default behavior that is compatible with any unix shell (default $WERF_SHELL).--tagging-strategystub--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit cleanup
Usage:d8 delivery-kit cleanup [options]Cleanup project images in the container registry
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and delete images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--keep-listSet path to keep list file (default $WERF_KEEP_LIST)--keep-stages-built-within-last-n-hoursKeep stages that were built within last hours (default $WERF_KEEP_STAGES_BUILT_WITHIN_LAST_N_HOURS or 2)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextScan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--scan-context-namespace-onlyScan for used images only in namespace linked with context for each available context in kube-config (or only for the context specified with option --kube-context). When disabled will scan all namespaces in all contexts (or only for the context specified with option --kube-context). (Default $WERF_SCAN_CONTEXT_NAMESPACE_ONLY)--scan-context-onlyScan for used images only in the specified kube context, scan all contexts from kube config otherwise (default false or $WERF_SCAN_CONTEXT_ONLY)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--without-kubeDo not skip deployed Kubernetes images (default $WERF_WITHOUT_KUBE)
d8 delivery-kit completion
Usage:d8 delivery-kit completion [options]Generate bash completion scripts
Options
--shellSet to bash, zsh, fish or powershell (default $WERF_SHELL or bash)
d8 delivery-kit compose
Usage:d8 delivery-kit compose [options]Work with docker-compose
d8 delivery-kit compose config
Usage:d8 delivery-kit compose config [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]Run docker-compose config command with forwarded image names.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit compose down
Usage:d8 delivery-kit compose down [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"]Run docker-compose down command with forwarded image names.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit compose run
Usage:d8 delivery-kit compose run [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] -- SERVICE [COMMAND] [ARGS...]Run docker-compose run command with forwarded image names.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit compose up
Usage:d8 delivery-kit compose up [IMAGE_NAME...] [options] [--docker-compose-options="OPTIONS"] [--docker-compose-command-options="OPTIONS"] [--] [SERVICE...]Run docker-compose up command with forwarded image names.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-compose-bin-pathDEPRECATED: "docker compose" command always used now, this option is ignored. Define docker-compose bin path (default $WERF_DOCKER_COMPOSE_BIN_PATH)--docker-compose-command-optionsDefine docker-compose command options (default $WERF_DOCKER_COMPOSE_COMMAND_OPTIONS)--docker-compose-optionsDefine docker-compose options (default $WERF_DOCKER_COMPOSE_OPTIONS)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit config
Usage:d8 delivery-kit config [options]Work with werf.yaml
d8 delivery-kit config graph
Usage:d8 delivery-kit config graph [IMAGE_NAME...] [options]Print dependency graph for images in werf.yaml.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or false by default)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit config list
Usage:d8 delivery-kit config list [options]List image and artifact names defined in werf.yaml.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--final-images-onlyShow only final images--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--images-onlyShow only final images--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit config render
Usage:d8 delivery-kit config render [IMAGE_NAME...] [options]Render werf.yaml.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit converge
Usage:d8 delivery-kit converge [options]Build and push images, then deploy application into Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--atomicEnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_ATOMIC by default)--auto-rollback,-REnable auto rollback of the failed release to the previous deployed release version when current deploy process have failed ($WERF_AUTO_ROLLBACK by default)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--deploy-graph-pathSave deploy graph path to the specified file (by default $WERF_DEPLOY_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--force-adoptionAlways adopt resources, even if they belong to a different Helm release (default $WERF_FORCE_ADOPTION or false)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--no-install-crdsDo not install CRDs from "crds/" directories of installed charts (default $WERF_NO_INSTALL_CRDS)--no-pod-logsDisable Pod logs collection and printing (default $WERF_NO_POD_LOGS or false)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--release-labelAdd Helm release labels (can specify multiple). Kind of labels depends or release storage driver. Format: labelName=labelValue. Also, can be specified with $WERF_RELEASE_LABEL_* (e.g. $WERF_RELEASE_LABEL_1=labelName1=labelValue1, $WERF_RELEASE_LABEL_2=labelName2=labelValue2)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--render-subchart-notesIf set, render subchart notes along with the parent (by default $WERF_RENDER_SUBCHART_NOTES or false)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rollback-graph-pathSave rollback graph path to the specified file (by default $WERF_ROLLBACK_GRAPH_PATH). Extension must be .dot or not specified. If extension not specified, then .dot is used--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--save-deploy-reportSave deploy report (by default $WERF_SAVE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-helm-dependenciesSkip TLS certificate validation when accessing a Helm charts repository (default $WERF_SKIP_TLS_VERIFY_HELM_DEPENDENCIES)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit cr
Usage:d8 delivery-kit cr [options]Authenticate with container registry.
d8 delivery-kit cr login
Usage:d8 delivery-kit cr login registry [options]Login into remote registry.
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--password,-pUse specified password for login (default $WERF_PASSWORD)--password-stdinRead password from stdin for login (default $WERF_PASSWORD_STDIN)--quietDisable explanatory output (default $WERF_QUIET).--username,-uUse specified username for login (default $WERF_USERNAME)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit cr logout
Usage:d8 delivery-kit cr logout registry [options]Logout from a remote registry.
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit dismiss
Usage:d8 delivery-kit dismiss [options]Delete werf release from Kubernetes
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--deploy-report-pathChange deploy report path and format (by default $WERF_DEPLOY_REPORT_PATH or ".werf-deploy-report.json" if not set). Extension must be .json for JSON format. If extension not specified, then .json is used--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--no-pod-logsDisable Pod logs collection and printing (default $WERF_NO_POD_LOGS or false)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-deploy-reportUse deploy report, previously saved with --save-deploy-report (by default $WERF_USE_DEPLOY_REPORT or false). Its path and format configured with --deploy-report-path--verboseEnable verbose output (default $WERF_VERBOSE).--with-hooksDelete Helm Release hooks getting from existing revisions (default $WERF_WITH_HOOKS or true)--with-namespaceDelete Kubernetes Namespace after purging Helm Release (default $WERF_WITH_NAMESPACE)
d8 delivery-kit export
Usage:d8 delivery-kit export [IMAGE_NAME...] [options]Export images
Options
--add-labelAdd label to exported images (can specify multiple). Format: labelName=labelValue[labelName=labelValue ...]. The default separator is a newline ("\n"), but it can be customized using the --add-label-separator flag. Also, can be specified with $WERF_EXPORT_ADD_LABEL_* (e.g. $WERF_EXPORT_ADD_LABEL_1=labelName1=labelValue1, $WERF_EXPORT_ADD_LABEL_2=labelName2=labelValue2) --add-label-separatorSeparator for --add-label values (default $WERF_EXPORT_ADD_LABEL_SEPARATOR or "\n")--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tagSet a tag template (can specify multiple). It is necessary to use image name shortcut %image% or %image_slug% if multiple images are exported (e.g. REPO:TAG-%image% or REPO-%image%:TAG)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 delivery-kit helm
Usage:d8 delivery-kit helm [options]Manage application deployment with helm
Options
--debugEnable debug (default $WERF_DEBUG).--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--insecure-helm-dependenciesAllow insecure oci registries to be used in the Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm create
Usage:d8 delivery-kit helm create NAME [options]create a new chart with the given name
Options
--starter,-pthe name or absolute path to Helm starter scaffold
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm dependency
Aliases: dep, dependencies
d8 delivery-kit helm dependency update|build|list [options]manage a chart's dependencies
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm dependency build
Usage:d8 delivery-kit helm dependency update|build|list build CHART [options]rebuild the charts/ directory based on the Chart.lock file
Options
--keyringkeyring containing public keys--skip-refreshdo not refresh the local repository cache--verifyverify the packages against signatures
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm dependency list
Alias: ls
d8 delivery-kit helm dependency update|build|list list CHART [options]list the dependencies for the given chart
Options
--max-col-widthmaximum column width for output table
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm dependency update
Alias: up
d8 delivery-kit helm dependency update|build|list update CHART [options]update charts/ based on the contents of Chart.yaml
Options
--keyringkeyring containing public keys--skip-refreshdo not refresh the local repository cache--verifyverify the packages against signatures
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm env
Usage:d8 delivery-kit helm env [options]helm client environment information
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get
Usage:d8 delivery-kit helm get [options]download extended information of a named release
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get all
Usage:d8 delivery-kit helm get all RELEASE_NAME [options]download all information for a named release
Options
--revisionget the named release with revision--templatego template for formatting the output, eg: {{.Release.Name}}
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get hooks
Usage:d8 delivery-kit helm get hooks RELEASE_NAME [options]download all hooks for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get manifest
Usage:d8 delivery-kit helm get manifest RELEASE_NAME [options]download the manifest for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get metadata
Usage:d8 delivery-kit helm get metadata RELEASE_NAME [options]This command fetches metadata for a given release
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionspecify release revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get notes
Usage:d8 delivery-kit helm get notes RELEASE_NAME [options]download the notes for a named release
Options
--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get values
Usage:d8 delivery-kit helm get values RELEASE_NAME [options]download the values file for a named release
Options
--all,-adump all (computed) values--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionget the named release with revision
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm get-autogenerated-values
Usage:d8 delivery-kit helm get-autogenerated-values [IMAGE_NAME...] [options]Get service values yaml generated by werf for helm chart during deploy
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm get-namespace
Usage:d8 delivery-kit helm get-namespace [options]Print Kubernetes Namespace that will be used in current configuration with specified params.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm get-release
Usage:d8 delivery-kit helm get-release [options]Print Helm Release name that will be used in current configuration with specified params.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm history
Alias: hist
d8 delivery-kit helm history RELEASE_NAME [options]fetch release history
Options
--maxmaximum number of revision to include in history--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm install
Usage:d8 delivery-kit helm install [NAME] [CHART] [options]install a chart
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicif set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this installation when install fails--create-namespacecreate the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--generate-name,-ggenerate the name (and omit the NAME parameter)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--labels,-lLabels that would be added to release metadata. Should be divided by comma.--name-templatespecify template used to name the release--no-hooksprevent hooks from running during install--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--render-subchart-notesif set, render subchart notes along with the parent--replacere-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repochart repository url where to locate the requested chart--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crdsif set, no CRDs will be installed. By default, CRDs are installed if not already present--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm lint
Usage:d8 delivery-kit helm lint PATH [options]examine a chart for possible issues
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--envUse specified environment (default $WERF_ENV)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--kube-versionKubernetes version used for capabilities and deprecation checks--quietprint only warnings and errors--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--strictfail on lint warnings--values,-fspecify values in a YAML file or a URL (can specify multiple)--with-subchartslint dependent charts
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm list
Alias: ls
d8 delivery-kit helm list [options]list releases
Options
--all,-ashow all releases without any filter applied--all-namespaces,-Alist releases across all namespaces--date,-dsort by release date--deployedshow deployed releases. If no other is specified, this will be automatically enabled--failedshow failed releases--filter,-fa regular expression (Perl compatible). Any releases that match the expression will be included in the results--max,-mmaximum number of releases to fetch--no-headersdon't print headers when using the default output format--offsetnext release index in the list, used to offset from start value--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pendingshow pending releases--reverse,-rreverse the sort order--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Works only for secret(default) and configmap storage backends.--short,-qoutput short (quiet) listing format--supersededshow superseded releases--time-formatformat time using golang time formatter. Example: --time-format "2006-01-02 15:04:05Z0700"--uninstalledshow uninstalled releases (if 'helm uninstall --keep-history' was used)--uninstallingshow releases that are currently being uninstalled
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm package
Usage:d8 delivery-kit helm package [CHART_PATH] [...] [options]package a chart directory into a chart archive
Options
--app-versionset the appVersion on the chart to this version--dependency-update,-uupdate dependencies from "Chart.yaml" to dir "charts/" before packaging--destination,-dlocation to write the chart.--keyname of the key to use when signing. Used if --sign is true--keyringlocation of a public keyring--passphrase-filelocation of a file which contains the passphrase for the signing key. Use "-" in order to read from stdin.--signuse a PGP private key to sign this package--versionset the version on the chart to this semver version
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm plugin
Usage:d8 delivery-kit helm plugin [options]install, list, or uninstall Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm plugin install
Alias: add
d8 delivery-kit helm plugin install [options] <path|url>...install one or more Helm plugins
Options
--versionspecify a version constraint. If this is not specified, the latest version is installed
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm plugin list
Alias: ls
d8 delivery-kit helm plugin list [options]list installed Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm plugin uninstall
Aliases: rm, remove
d8 delivery-kit helm plugin uninstall <plugin>... [options]uninstall one or more Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm plugin update
Alias: up
d8 delivery-kit helm plugin update <plugin>... [options]update one or more Helm plugins
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm pull
Alias: fetch
d8 delivery-kit helm pull [chart URL | repo/chartname] [...] [options]download a chart from a repository and (optionally) unpack it in local directory
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--destination,-dlocation to write the chart. If this and untardir are specified, untardir is appended to this--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored.--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--provfetch the provenance file, but don't perform verification--repochart repository url where to locate the requested chart--untarif set to true, will untar the chart after downloading it--untardirif untar is specified, this flag specifies the name of the directory into which the chart is expanded--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm registry
Usage:d8 delivery-kit helm registry [options]login to or logout from a registry
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm registry login
Usage:d8 delivery-kit helm registry login [host] [options]login to a registry
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify registry client using this SSL certificate file--insecureallow connections to TLS registry without certs--key-fileidentify registry client using this SSL key file--password,-pregistry password or identity token--password-stdinread password or identity token from stdin--username,-uregistry username
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm registry logout
Usage:d8 delivery-kit helm registry logout [host] [options]logout from a registry
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo
Usage:d8 delivery-kit helm repo add|remove|list|index|update [ARGS] [options]add, list, remove, update, and index chart repositories
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo add
Usage:d8 delivery-kit helm repo add|remove|list|index|update [ARGS] add [NAME] [URL] [options]add a chart repository
Options
--allow-deprecated-reposby default, this command will not allow adding official repos that have been permanently deleted. This disables that behavior--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--force-updatereplace (overwrite) the repo if it already exists--insecure-skip-tls-verifyskip tls certificate checks for the repository--key-fileidentify HTTPS client using this SSL key file--no-updateIgnored. Formerly, it would disabled forced updates. It is deprecated by force-update.--pass-credentialspass credentials to all domains--passwordchart repository password--password-stdinread chart repository password from stdin--usernamechart repository username
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo index
Usage:d8 delivery-kit helm repo add|remove|list|index|update [ARGS] index [DIR] [options]generate an index file given a directory containing packaged charts
Options
--jsonoutput in JSON format--mergemerge the generated index into the given index--urlurl of chart repository
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo list
Alias: ls
d8 delivery-kit helm repo add|remove|list|index|update [ARGS] list [options]list chart repositories
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo remove
Alias: rm
d8 delivery-kit helm repo add|remove|list|index|update [ARGS] remove [REPO1 [REPO2 ...]] [options]remove one or more chart repositories
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm repo update
Alias: up
d8 delivery-kit helm repo add|remove|list|index|update [ARGS] update [REPO1 [REPO2 ...]] [options]update information of available charts locally from chart repositories
Options
--fail-on-repo-update-failupdate fails if any of the repository updates fail
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm rollback
Usage:d8 delivery-kit helm rollback <RELEASE> [REVISION] [options]roll back a release to a previous revision
Options
--cleanup-on-failallow deletion of new resources created in this rollback when rollback fails--deploy-report-pathsave deploy report in JSON to the specified path--dry-runsimulate a rollback--forceforce resource update through delete/recreate if needed--history-maxlimit the maximum number of revisions saved per release. Use 0 for no limit--no-hooksprevent hooks from running during rollback--recreate-podsperforms pods restart for the resource if applicable--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm search
Usage:d8 delivery-kit helm search [keyword] [options]search for a keyword in charts
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm search hub
Usage:d8 delivery-kit helm search [keyword] hub [KEYWORD] [options]search for charts in the Artifact Hub or your own hub instance
Options
--endpointHub instance to query for charts--fail-on-no-resultsearch fails if no results are found--list-repo-urlprint charts repository URL--max-col-widthmaximum column width for output table--output,-oprints the output in the specified format. Allowed values: table, json, yaml
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm search repo
Usage:d8 delivery-kit helm search [keyword] repo [keyword] [options]search repositories for a keyword in charts
Options
--develuse development versions (alpha, beta, and release candidate releases), too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--fail-on-no-resultsearch fails if no results are found--max-col-widthmaximum column width for output table--output,-oprints the output in the specified format. Allowed values: table, json, yaml--regexp,-ruse regular expressions for searching repositories you have added--versionsearch using semantic versioning constraints on repositories you have added--versions,-lshow the long listing, with each version of each chart on its own line, for repositories you have added
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm secret
Usage:d8 delivery-kit helm secret [options]Work with secrets
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm secret decrypt
Usage:d8 delivery-kit helm secret decrypt [options]Decrypt data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret encrypt
Usage:d8 delivery-kit helm secret encrypt [options]Encrypt data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret file
Usage:d8 delivery-kit helm secret file [options]Work with secret files
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm secret file decrypt
Usage:d8 delivery-kit helm secret file decrypt [FILE_PATH] [options]Decrypt secret file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret file edit
Usage:d8 delivery-kit helm secret file edit FILE_PATH [options]Edit or create new secret file
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret file encrypt
Usage:d8 delivery-kit helm secret file encrypt [FILE_PATH] [options]Encrypt file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret generate-secret-key
Usage:d8 delivery-kit helm secret generate-secret-key [options]Generate hex encryption key
Options
--debugEnable debug (default $WERF_DEBUG).--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret rotate-secret-key
Usage:d8 delivery-kit helm secret rotate-secret-key [EXTRA_SECRET_VALUES_FILE_PATH...] [options]Regenerate secret files with new secret key
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret values
Usage:d8 delivery-kit helm secret values [options]Work with secret values files
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm secret values decrypt
Usage:d8 delivery-kit helm secret values decrypt [FILE_PATH] [options]Decrypt secret values file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret values edit
Usage:d8 delivery-kit helm secret values edit FILE_PATH [options]Edit or create new secret values file
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm secret values encrypt
Usage:d8 delivery-kit helm secret values encrypt [FILE_PATH] [options]Encrypt values file data
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--output-file-path,-oWrite to file instead of stdout--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
Global options
--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--namespace,-nnamespace scope for this request--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds
d8 delivery-kit helm show
Alias: inspect
d8 delivery-kit helm show [options]show information of a chart
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm show all
Usage:d8 delivery-kit helm show all [CHART] [options]show all information of the chart
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm show chart
Usage:d8 delivery-kit helm show chart [CHART] [options]show the chart's definition
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm show crds
Usage:d8 delivery-kit helm show crds [CHART] [options]show the chart's CRDs
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm show readme
Usage:d8 delivery-kit helm show readme [CHART] [options]show the chart's README
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm show values
Usage:d8 delivery-kit helm show values [CHART] [options]show the chart's values
Options
--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--insecure-skip-tls-verifyskip tls certificate checks for the chart download--jsonpathsupply a JSONPath expression to filter the output--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--repochart repository url where to locate the requested chart--usernamechart repository username where to locate the requested chart--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm status
Usage:d8 delivery-kit helm status RELEASE_NAME [options]display the status of the named release
Options
--output,-oprints the output in the specified format. Allowed values: table, json, yaml--revisionif set, display the status of the named release with revision--show-descif set, display the description message of the named release--show-resourcesif set, display the resources of the named release
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm template
Usage:d8 delivery-kit helm template [NAME] [CHART] [options]locally render templates
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--api-versions,-aKubernetes api versions used for Capabilities.APIVersions--atomicif set, the installation process deletes the installation on failure. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this installation when install fails--create-namespacecreate the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--generate-name,-ggenerate the name (and omit the NAME parameter)--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsinclude CRDs in the templated output--insecure-skip-tls-verifyskip tls certificate checks for the chart download--is-upgradeset .Release.IsUpgrade instead of .Release.IsInstall--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--kube-versionKubernetes version used for Capabilities.KubeVersion--labels,-lLabels that would be added to release metadata. Should be divided by comma.--name-templatespecify template used to name the release--no-hooksprevent hooks from running during install--output-dirwrites the executed templates to files in output-dir instead of stdout--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--release-nameuse release name in the output-dir path.--render-subchart-notesif set, render subchart notes along with the parent--replacere-use the given name, only if that name is a deleted release which remains in the history. This is unsafe in production--repochart repository url where to locate the requested chart--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--show-only,-sonly show manifests rendered from the given templates--skip-crdsif set, no CRDs will be installed. By default, CRDs are installed if not already present--skip-testsskip tests from templated output--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--validatevalidate your manifests against the Kubernetes cluster you are currently pointing at. This is the same validation performed on an install--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm test
Usage:d8 delivery-kit helm test [RELEASE] [options]run tests for a release
Options
--filterspecify tests by attribute (currently "name") using attribute=value syntax or '!attribute=value' to exclude a test (can specify multiple or separate values with commas: name=test1,name=test2)--logsdump the logs from test pods (this runs after all tests are complete, but before any cleanup)--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm uninstall
Aliases: del, delete, un
d8 delivery-kit helm uninstall RELEASE_NAME [...] [options]uninstall a release
Options
--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents. Defaults to background.--descriptionadd a custom description--dry-runsimulate a uninstall--ignore-not-foundTreat "release not found" as a successful uninstall--keep-historyremove all associated resources and mark the release as deleted, but retain the release history--no-hooksprevent hooks from running during uninstallation--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--waitif set, will wait until all the resources are deleted before returning. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm upgrade
Usage:d8 delivery-kit helm upgrade [RELEASE] [CHART] [options]upgrade a release
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--atomicif set, upgrade process rolls back changes made in case of failed upgrade. The --wait flag will be set automatically if --atomic is used--ca-fileverify certificates of HTTPS-enabled servers using this CA bundle--cert-fileidentify HTTPS client using this SSL certificate file--cleanup-on-failallow deletion of new resources created in this upgrade when upgrade fails--create-namespaceif --install is set, create the release namespace if not present--dependency-updateupdate dependencies if they are missing before installing the chart--deploy-report-pathsave deploy report in JSON to the specified path--descriptionadd a custom description--develuse development versions, too. Equivalent to version '>0.0.0-0'. If --version is set, this is ignored--disable-openapi-validationif set, the upgrade process will not validate rendered templates against the Kubernetes OpenAPI Schema--dry-runsimulate an install. If --dry-run is set with no option being specified or as '--dry-run=client', it will not attempt cluster connections. Setting '--dry-run=server' allows attempting cluster connections.--enable-dnsenable DNS lookups when rendering templates--forceforce resource updates through a replacement strategy--history-maxlimit the maximum number of revisions saved per release. Use 0 for no limit--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-skip-tls-verifyskip tls certificate checks for the chart download--install,-iif a release by this name doesn't already exist, run an install--key-fileidentify HTTPS client using this SSL key file--keyringlocation of public keys used for verification--labels,-lLabels that would be added to release metadata. Should be separated by comma. Original release labels will be merged with upgrade labels. You can unset label using null.--no-hooksdisable pre/post upgrade hooks--output,-oprints the output in the specified format. Allowed values: table, json, yaml--pass-credentialspass credentials to all domains--passwordchart repository password where to locate the requested chart--plain-httpuse insecure HTTP connections for the chart download--post-rendererthe path to an executable to be used for post rendering. If it exists in $PATH, the binary will be used, otherwise it will try to look for the executable at the given path--post-renderer-argsan argument to the post-renderer (can specify multiple)--recreate-podsperforms pods restart for the resource if applicable--render-subchart-notesif set, render subchart notes along with the parent--repochart repository url where to locate the requested chart--reset-then-reuse-valueswhen upgrading, reset the values to the ones built into the chart, apply the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' or '--reuse-values' is specified, this is ignored--reset-valueswhen upgrading, reset the values to the ones built into the chart--reuse-valueswhen upgrading, reuse the last release's values and merge in any overrides from the command line via --set and -f. If '--reset-values' is specified, this is ignored--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)--set-jsonset JSON values on the command line (can specify multiple or separate values with commas: key1=jsonval1,key2=jsonval2)--set-literalset a literal STRING value on the command line--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)--skip-crdsif set, no CRDs will be installed when an upgrade is performed with install flag enabled. By default, CRDs are installed if not already present, when an upgrade is performed with install flag enabled--timeouttime to wait for any individual Kubernetes operation (like Jobs for hooks)--usernamechart repository username where to locate the requested chart--values,-fspecify values in a YAML file or a URL (can specify multiple)--verifyverify the package before using it--versionspecify a version constraint for the chart version to use. This constraint can be a specific tag (e.g. 1.1.1) or it may reference a valid range (e.g. ^2.0.0). If this is not specified, the latest version is used--waitif set, will wait until all Pods, PVCs, Services, and minimum number of Pods of a Deployment, StatefulSet, or ReplicaSet are in a ready state before marking the release as successful. It will wait for as long as --timeout--wait-for-jobsif set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm verify
Usage:d8 delivery-kit helm verify PATH [options]verify that a chart at the given path has been signed and is valid
Options
--keyringkeyring containing public keys
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit helm version
Usage:d8 delivery-kit helm version [options]print the client version information
Options
--client,-cdisplay client version information--shortprint the version number--templatetemplate for version string format
Global options
--debugEnable debug (default $WERF_DEBUG).--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--namespace,-nnamespace scope for this request--quietDisable explanatory output (default $WERF_QUIET).--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit host
Usage:d8 delivery-kit host [options]Work with werf cache and data of all projects on the host machine
d8 delivery-kit host cleanup
Usage:d8 delivery-kit host cleanup [options]Cleanup old unused werf cache and data of all projects on host machine.
Options
--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--forceForce deletion of images which are being used by some containers (default $WERF_FORCE)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit host purge
Usage:d8 delivery-kit host purge [options]Purge werf images, cache and other data for all projects on host machine
Options
--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--forceFirst remove containers that use werf docker images which are going to be deleted--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit includes
Usage:d8 delivery-kit includes [options]Work with werf includes
d8 delivery-kit includes get-file
Usage:d8 delivery-kit includes get-file [FILE_NAME] [options]Display file content that will be used by werf according to the includes overlay rules.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit includes ls-files
Usage:d8 delivery-kit includes ls-files [GLOB...] [options]List files in the project according to the includes overlay rules.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--filterFilter by source, e.g. --filter=source=local,remoteRepo (default $WERF_INCLUDES_LIST_FILTER or all sources).--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit includes update
Usage:d8 delivery-kit includes update [options]Create or update includes lock file (default: werf-includes.lock).
Options
--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--envUse specified environment (default $WERF_ENV)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit kube-run
Usage:d8 delivery-kit kube-run [options] [IMAGE_NAME] [-- COMMAND ARG...]Run container for project image in Kubernetes
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--auto-pull-secretAutomatically create docker config secret in the namespace and plug it via pod's imagePullSecrets for private registry access (default $WERF_AUTO_PULL_SECRET or true if not specified)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--copy-fromCopy file/dir from container to local machine after user command execution. Example: "/from/file:to". Can be specified multiple times. Can also be defined with "$WERF_COPY_FROM_*", e.g. "WERF_COPY_FROM_1=from:to".--copy-toCopy file/dir from local machine to container before user command execution. Example: "from:/to/file". Can be specified multiple times. Can also be defined with "$WERF_COPY_TO_*", e.g. "WERF_COPY_TO_1=from:to".--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--extra-optionsPass extra options to "kubectl run" command, which will create a Pod (default $WERF_EXTRA_OPTIONS)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--interactive,-iEnable interactive mode (default $WERF_INTERACTIVE or false if not specified)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--overridesInline JSON to override/extend any fields in created Pod, e.g. to add imagePullSecrets field (default $WERF_OVERRIDES). %pod_name%, %container_name%, and %container_image% will be replaced with the names of the created pod, container, and container image, respectively.--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--podSet created pod name (default $WERF_POD or autogenerated if not specified)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--rmRemove pod and other created resources after command completion (default $WERF_RM or true if not specified)--rm-with-namespaceRemove also a namespace after command completion (default $WERF_RM_WITH_NAMESPACE or false if not specified)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--tty,-tAllocate a TTY (default $WERF_TTY or false if not specified)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 delivery-kit managed-images
Usage:d8 delivery-kit managed-images [options]Work with managed images which will be preserved during cleanup procedure
d8 delivery-kit managed-images add
Usage:d8 delivery-kit managed-images add [options]Add image record to the list of managed images which will be preserved during cleanup procedure.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit managed-images ls
Usage:d8 delivery-kit managed-images ls [options]List managed images which will be preserved during cleanup procedure.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read images from the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit managed-images rm
Usage:d8 delivery-kit managed-images rm [options]Remove image record from the list of managed images which will be preserved during cleanup procedure.
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and write images to the specified repo--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit plan
Usage:d8 delivery-kit plan [options]Prepare deploy plan and show how resources in a Kubernetes cluster would change on next deploy
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-custom-tagSet tag alias for the content-based tag. The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also can be defined with $WERF_ADD_CUSTOM_TAG_* (e.g. $WERF_ADD_CUSTOM_TAG_1="%image%-tag1", $WERF_ADD_CUSTOM_TAG_2="%image%-tag2")--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo, to pull base images--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--envUse specified environment (default $WERF_ENV)--exit-codeIf true, returns exit code 0 if no changes, exit code 2 if any changes planned or exit code 1 in case of an error (default $WERF_EXIT_CODE or false)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--force-adoptionAlways adopt resources, even if they belong to a different Helm release (default $WERF_FORCE_ADOPTION or false)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--no-install-crdsDo not install CRDs from "crds/" directories of installed charts (default $WERF_NO_INSTALL_CRDS)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--project-name,-NSet a specific project name (default $WERF_PROJECT_NAME)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-helm-dependenciesSkip TLS certificate validation when accessing a Helm charts repository (default $WERF_SKIP_TLS_VERIFY_HELM_DEPENDENCIES)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--timeout,-tResources tracking timeout in seconds ($WERF_TIMEOUT by default)--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit purge
Usage:d8 delivery-kit purge [options]Purge all project images in the container registry
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--allowed-backend-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE)--allowed-backend-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_BACKEND_STORAGE_VOLUME_USAGE_MARGIN)--allowed-docker-storage-volume-usageSet allowed percentage of backend (Docker or Buildah) storage volume usage which will cause cleanup of least recently used local backend images (default 70% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE)--allowed-docker-storage-volume-usage-marginDuring cleanup of least recently used local backend (Docker or Buildah) images werf would delete images until volume usage becomes below "allowed-backend-storage-volume-usage - allowed-backend-storage-volume-usage-margin" level (default 5% or $WERF_ALLOWED_DOCKER_STORAGE_VOLUME_USAGE_MARGIN)--allowed-local-cache-volume-usageSet allowed percentage of local cache (~/.werf/local_cache by default) volume usage which will cause cleanup of least recently used data from the local cache (default 70% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE)--allowed-local-cache-volume-usage-marginDuring cleanup of local cache werf would delete local cache data until volume usage becomes below "allowed-local-cache-volume-usage - allowed-local-cache-volume-usage-margin" level (default 5% or $WERF_ALLOWED_LOCAL_CACHE_VOLUME_USAGE_MARGIN)--backend-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_BACKEND_STORAGE_PATH)--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-auto-host-cleanupDisable auto host cleanup procedure in main werf commands like werf-build, werf-converge and other (default disabled or WERF_DISABLE_AUTO_HOST_CLEANUP)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to delete images from the specified repo--docker-server-storage-pathUse specified path to the local backend (Docker or Buildah) storage to check backend storage volume usage while performing garbage collection of local backend images (detect local backend storage path by default or use $WERF_DOCKER_SERVER_STORAGE_PATH)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit render
Usage:d8 delivery-kit render [IMAGE_NAME...] [options]Render Kubernetes templates
Options
--add-annotationAdd annotation to deploying resources (can specify multiple). Format: annoName=annoValue. Also, can be specified with $WERF_ADD_ANNOTATION_* (e.g. $WERF_ADD_ANNOTATION_1=annoName1=annoValue1, $WERF_ADD_ANNOTATION_2=annoName2=annoValue2)--add-labelAdd label to deploying resources (can specify multiple). Format: labelName=labelValue. Also, can be specified with $WERF_ADD_LABEL_* (e.g. $WERF_ADD_LABEL_1=labelName1=labelValue1, $WERF_ADD_LABEL_2=labelName2=labelValue2)--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--build-report-pathChange build report path and format (by default $WERF_BUILD_REPORT_PATH or ".werf-build-report.json" if not set). Extension must be either .json for JSON format or .env for env-file format. If extension not specified, then .json is used--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--disable-default-secret-valuesDo not use secret values from the default .helm/secret-values.yaml file (default $WERF_DISABLE_DEFAULT_SECRET_VALUES or false)--disable-default-valuesDo not use values from the default .helm/values.yaml file (default $WERF_DISABLE_DEFAULT_VALUES or false)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read, pull and push images into the specified repo and to pull base images--envUse specified environment (default $WERF_ENV)--final-images-onlyProcess final images only ($WERF_FINAL_IMAGES_ONLY or true by default)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--force-adoptionAlways adopt resources, even if they belong to a different Helm release (default $WERF_FORCE_ADOPTION or false)--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hooks-status-progress-periodHooks status progress period in seconds. Set 0 to stop showing hooks status progress. Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value--ignore-secret-keyDisable secrets decryption (default $WERF_IGNORE_SECRET_KEY)--include-crdsInclude CRDs in the templated output (default $WERF_INCLUDE_CRDS)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--introspect-before-errorIntrospect failed stage in the clean state, before running all assembly instructions of the stage--introspect-errorIntrospect failed stage in the state, right after running failed assembly instruction--introspect-stageIntrospect a specific stage. The option can be used multiple times to introspect several stages. There are the following formats to use: * specify IMAGE_NAME/STAGE_NAME to introspect stage STAGE_NAME of either image or artifact IMAGE_NAME * specify STAGE_NAME or */STAGE_NAME for the introspection of all existing stages with name STAGE_NAME IMAGE_NAME is the name of an image or artifact described in werf.yaml, the nameless image specified with ~. STAGE_NAME should be one of the following: from, beforeInstall, dependenciesBeforeInstall, gitArchive, install, dependenciesAfterInstall, beforeSetup, dependenciesBeforeSetup, setup, dependenciesAfterSetup, gitCache, gitLatestPatch, dockerInstructions, dockerfile, imageSpec--kube-api-serverKubernetes API server address (default $WERF_KUBE_API_SERVER)--kube-burst-limitKubernetes client burst limit (default $WERF_KUBE_BURST_LIMIT or 100)--kube-ca-pathKubernetes API server CA path (default $WERF_KUBE_CA_PATH)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kube-qps-limitKubernetes client QPS limit (default $WERF_KUBE_QPS_LIMIT or 30)--kube-tls-serverServer name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used (default $WERF_KUBE_TLS_SERVER)--kube-tokenKubernetes bearer token used for authentication (default $WERF_KUBE_TOKEN)--kube-versionSet specific Capabilities.KubeVersion (default $WERF_KUBE_VERSION)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--namespaceUse specified Kubernetes namespace (default [[ project ]]-[[ env ]] template or deploy.namespace custom template from werf.yaml or $WERF_NAMESPACE)--network-parallelismParallelize some network operations (default $WERF_NETWORK_PARALLELISM or 30)--outputWrite render output to the specified file instead of stdout ($WERF_RENDER_OUTPUT by default)--parallel,-pRun in parallel (default $WERF_PARALLEL or true)--parallel-tasks-limitParallel tasks limit, set -1 to remove the limitation (default $WERF_PARALLEL_TASKS_LIMIT or 5)--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--releaseUse specified Helm release name (default [[ project ]]-[[ env ]] template or deploy.helmRelease custom template from werf.yaml or $WERF_RELEASE)--releases-history-maxMax releases to keep in release storage ($WERF_RELEASES_HISTORY_MAX or 5 by default)--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--save-build-reportSave build report (by default $WERF_SAVE_BUILD_REPORT or false). Its path and format configured with --build-report-path--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--secret-valuesSpecify helm secret values in a YAML file (can specify multiple). Also, can be defined with $WERF_SECRET_VALUES_* (e.g. $WERF_SECRET_VALUES_ENV=.helm/secret_values_test.yaml, $WERF_SECRET_VALUES_DB=.helm/secret_values_db.yaml)--setSet helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_* (e.g. $WERF_SET_1=key1=val1, $WERF_SET_2=key2=val2)--set-docker-config-json-valueShortcut to set current docker config into the .Values.dockerconfigjson--set-fileSet values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2). Also, can be defined with $WERF_SET_FILE_* (e.g. $WERF_SET_FILE_1=key1=path1, $WERF_SET_FILE_2=key2=val2)--set-stringSet STRING helm values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2). Also, can be defined with $WERF_SET_STRING_* (e.g. $WERF_SET_STRING_1=key1=val1, $WERF_SET_STRING_2=key2=val2)--show-only,-sonly show manifests rendered from the given templates--skip-dependencies-repo-refresh,-LDo not refresh helm chart repositories locally cached index--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-helm-dependenciesSkip TLS certificate validation when accessing a Helm charts repository (default $WERF_SKIP_TLS_VERIFY_HELM_DEPENDENCIES)--skip-tls-verify-kubeSkip TLS certificate validation when accessing a Kubernetes cluster (default $WERF_SKIP_TLS_VERIFY_KUBE)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--status-progress-periodStatus progress period in seconds. Set -1 to stop showing status progress. Defaults to $WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds--stub-tagsUse stubs instead of real tags (default $WERF_STUB_TAGS)--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--use-custom-tagUse a tag alias in helm templates instead of an image content-based tag (NOT RECOMMENDED). The alias may contain the following shortcuts: - %image%, %image_slug% or %image_safe_slug% to use the image name (necessary if there is more than one image in the werf config); - %image_content_based_tag% to use a content-based tag. For cleaning custom tags and associated content-based tag are treated as one. Also, can be defined with $WERF_USE_CUSTOM_TAG (e.g. $WERF_USE_CUSTOM_TAG="%image%-tag")--validateValidate your manifests against the Kubernetes cluster you are currently pointing at (default $WERF_VALIDATE)--valuesSpecify helm values in a YAML file or a URL (can specify multiple). Also, can be defined with $WERF_VALUES_* (e.g. $WERF_VALUES_1=.helm/values_1.yaml, $WERF_VALUES_2=.helm/values_2.yaml)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)--without-imagesDisable building of images defined in the werf.yaml (if any) and usage of such images in the .helm/templates ($WERF_WITHOUT_IMAGES or false by default — e.g. enable all images defined in the werf.yaml by default)
d8 delivery-kit run
Usage:d8 delivery-kit run [options] [IMAGE_NAME] [-- COMMAND ARG...]Run container for project image
Options
--allow-includes-updateAllow use includes latest versions (default $WERF_ALLOW_INCLUDES_UPDATE or false)--bashUse predefined docker options and command for debug--cache-repoSpecify one or multiple cache repos with images that will be used as a cache. Cache will be populated when pushing newly built images into the primary repo and when pulling existing images from the primary repo. Cache repo will be used to pull images and to get manifests before making requests to the primary repo. Also, can be specified with $WERF_CACHE_REPO_* (e.g. $WERF_CACHE_REPO_1=..., $WERF_CACHE_REPO_2=...)--configUse custom configuration file (default $WERF_CONFIG or werf.yaml in the project directory)--config-templates-dirCustom configuration templates directory (default $WERF_CONFIG_TEMPLATES_DIR or .werf in working directory)--container-registry-mirror(Buildah-only) Use specified mirrors for docker.io--debugEnable debug (default $WERF_DEBUG).--debug-templatesEnable debug mode for Go templates (default $WERF_DEBUG_TEMPLATES or false)--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--dirUse specified project directory where project’s werf.yaml and other configuration files should reside (default $WERF_DIR or current working directory)--docker-configSpecify docker config directory path. Default $WERF_DOCKER_CONFIG or $DOCKER_CONFIG or ~/.docker (in the order of priority) Command needs granted permissions to read and pull images from the specified repo--docker-optionsDefine docker run options (default $WERF_DOCKER_OPTIONS)--dry-runIndicate what the command would do without actually doing that (default $WERF_DRY_RUN)--envUse specified environment (default $WERF_ENV)--final-repoContainer registry storage address (default $WERF_FINAL_REPO)--final-repo-container-registryChoose final-repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_FINAL_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--final-repo-docker-hub-passwordfinal-repo Docker Hub password (default $WERF_FINAL_REPO_DOCKER_HUB_PASSWORD)--final-repo-docker-hub-tokenfinal-repo Docker Hub token (default $WERF_FINAL_REPO_DOCKER_HUB_TOKEN)--final-repo-docker-hub-usernamefinal-repo Docker Hub username (default $WERF_FINAL_REPO_DOCKER_HUB_USERNAME)--final-repo-github-tokenfinal-repo GitHub token (default $WERF_FINAL_REPO_GITHUB_TOKEN)--final-repo-harbor-passwordfinal-repo Harbor password (default $WERF_FINAL_REPO_HARBOR_PASSWORD)--final-repo-harbor-usernamefinal-repo Harbor username (default $WERF_FINAL_REPO_HARBOR_USERNAME)--final-repo-quay-tokenfinal-repo quay.io token (default $WERF_FINAL_REPO_QUAY_TOKEN)--followEnable follow mode (default $WERF_FOLLOW). The mode allows restarting the command on a new commit. In development mode (--dev), werf restarts the command on any changes (including untracked files) in the git repository worktree--git-work-treeUse specified git work tree dir (default $WERF_WORK_TREE or lookup for directory that contains .git in the current or parent directories)--giterminism-configCustom path to the giterminism configuration file relative to working directory (default $WERF_GITERMINISM_CONFIG or werf-giterminism.yaml in working directory)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--insecure-helm-dependenciesAllow insecure oci registries to be used in the .helm/Chart.yaml dependencies configuration (default $WERF_INSECURE_HELM_DEPENDENCIES)--insecure-registryUse plain HTTP requests when accessing a registry (default $WERF_INSECURE_REGISTRY)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-project-dirPrint current project directory path (default $WERF_LOG_PROJECT_DIR)--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--platformEnable platform emulation when building images with werf, format: OS/ARCH[/VARIANT] ($WERF_PLATFORM or $DOCKER_DEFAULT_PLATFORM by default)--quietDisable explanatory output (default $WERF_QUIET).--repoContainer registry storage address (default $WERF_REPO)--repo-container-registryChoose repo container registry implementation. The following container registries are supported: ecr, acr, default, dockerhub, gcr, github, gitlab, harbor, quay. Default $WERF_REPO_CONTAINER_REGISTRY or auto mode (detect container registry by repo address).--repo-docker-hub-passwordrepo Docker Hub password (default $WERF_REPO_DOCKER_HUB_PASSWORD)--repo-docker-hub-tokenrepo Docker Hub token (default $WERF_REPO_DOCKER_HUB_TOKEN)--repo-docker-hub-usernamerepo Docker Hub username (default $WERF_REPO_DOCKER_HUB_USERNAME)--repo-github-tokenrepo GitHub token (default $WERF_REPO_GITHUB_TOKEN)--repo-harbor-passwordrepo Harbor password (default $WERF_REPO_HARBOR_PASSWORD)--repo-harbor-usernamerepo Harbor username (default $WERF_REPO_HARBOR_USERNAME)--repo-quay-tokenrepo quay.io token (default $WERF_REPO_QUAY_TOKEN)--require-built-images,-ZRequires all used images to be previously built and exist in repo. Exits with error if needed images are not cached and so require to run build instructions (default $WERF_REQUIRE_BUILT_IMAGES)--secondary-repoSpecify one or multiple secondary read-only repos with images that will be used as a cache. Also, can be specified with $WERF_SECONDARY_REPO_* (e.g. $WERF_SECONDARY_REPO_1=..., $WERF_SECONDARY_REPO_2=...)--shellUse predefined docker options and command for debug--skip-image-spec-stageForce skipping "imageSpec" build stage (default $WERF_SKIP_IMAGE_SPEC_STAGE or false)--skip-tls-verify-registrySkip TLS certificate validation when accessing a registry (default $WERF_SKIP_TLS_VERIFY_REGISTRY)--ssh-keyUse only specific ssh key(s). Can be specified with $WERF_SSH_KEY_* (e.g. $WERF_SSH_KEY_REPO=~/.ssh/repo_rsa, $WERF_SSH_KEY_NODEJS=~/.ssh/nodejs_rsa). Defaults to $WERF_SSH_KEY_*, system ssh-agent or ~/.ssh/{id_rsa|id_dsa}--synchronization,-SAddress of synchronizer for multiple werf processes to work with a single repo. Default: - $WERF_SYNCHRONIZATION, or - :local if --repo is not specified, or - https://delivery-sync.deckhouse.ru if --repo has been specified. The same address should be specified for all werf processes that work with a single repo. :local address allows execution of werf processes from a single host only--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--verboseEnable verbose output (default $WERF_VERBOSE).--virtual-mergeEnable virtual/ephemeral merge commit mode when building current application state ($WERF_VIRTUAL_MERGE by default)
d8 delivery-kit slugify
Usage:d8 delivery-kit slugify STRING [options]Print slugged string by specified format.
Options
--debugEnable debug (default $WERF_DEBUG).--format,-fr|helm-release: suitable for Helm Release ns|kubernetes-namespace: suitable for Kubernetes Namespace tag|docker-tag: suitable for Docker Tag--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--quietDisable explanatory output (default $WERF_QUIET).--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit synchronization
Usage:d8 delivery-kit synchronization [options]Run synchronization server
Options
--debugEnable debug (default $WERF_DEBUG).--devEnable development mode (default $WERF_DEV). The mode allows working with project files without doing redundant commits during debugging and development--dev-branchSet dev git branch name (default $WERF_DEV_BRANCH or "_werf-dev")--dev-ignoreAdd rules to ignore tracked and untracked changes in development mode (can specify multiple). Also, can be specified with $WERF_DEV_IGNORE_* (e.g. $WERF_DEV_IGNORE_TESTS=*_test.go, $WERF_DEV_IGNORE_DOCS=path/to/docs)--home-dirUse specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)--hostBind synchronization server to the specified host (default localhost or $WERF_HOST)--kube-configKubernetes config file path (default $WERF_KUBE_CONFIG, or $WERF_KUBECONFIG, or $KUBECONFIG)--kube-config-base64Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or $WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)--kube-contextKubernetes config context (default $WERF_KUBE_CONTEXT)--kubernetesUse kubernetes lock-manager stages-storage-cache (default $WERF_KUBERNETES)--kubernetes-namespace-prefixUse specified prefix for namespaces created for lock-manager and stages-storage-cache (defaults to 'werf-synchronization-' when --kubernetes option is used or $WERF_KUBERNETES_NAMESPACE_PREFIX)--localUse file lock-manager and file stages-storage-cache (true by default or $WERF_LOCAL)--local-lock-manager-base-dirUse specified directory as base for file lock-manager (~/.werf/synchronization_server/lock_manager by default or $WERF_LOCAL_LOCK_MANAGER_BASE_DIR)--local-stages-storage-cache-base-dirUse specified directory as base for file stages-storage-cache (~/.werf/synchronization_server/stages_storage_cache by default or $WERF_LOCAL_STAGES_STORAGE_CACHE_BASE_DIR)--log-color-modeSet log color mode. Supported on, off and auto (based on the stdout’s file descriptor referring to a terminal) modes. Default $WERF_LOG_COLOR_MODE or auto mode.--log-debugEnable debug (default $WERF_LOG_DEBUG).--log-prettyEnable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or true).--log-quietDisable explanatory output (default $WERF_LOG_QUIET).--log-terminal-widthSet log terminal width. Defaults to: * $WERF_LOG_TERMINAL_WIDTH * interactive terminal width or 140--log-timeAdd time to log entries for precise event time tracking (default $WERF_LOG_TIME or false).--log-time-formatSpecify custom log time format (default $WERF_LOG_TIME_FORMAT or RFC3339 format).--log-verboseEnable verbose output (default $WERF_LOG_VERBOSE).--loose-giterminismLoose werf giterminism mode restrictions--portBind synchronization server to the specified port (default 55581 or $WERF_PORT)--quietDisable explanatory output (default $WERF_QUIET).--tmp-dirUse specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)--ttlTime to live for lock-manager locks and stages-storage-cache records (default $WERF_TTL)--verboseEnable verbose output (default $WERF_VERBOSE).
d8 delivery-kit version
Usage:d8 delivery-kit version [options]Print version
d8 help
Help about any command
d8 k
Alias: kubectl
kubectl controls the Kubernetes cluster manager
Options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k alpha
Usage:d8 k alpha [options]Commands for features in alpha
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k annotate
Usage:d8 k annotate [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]Update the annotations on a resource
Options
--allSelect all resources, in the namespace of the specified resource types.--all-namespaces,-AIf true, check the specified action in all namespaces.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to update the annotation--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the annotations for a given resource.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the annotation update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-resources
Usage:d8 k api-resources [options]Print the supported API resources on the server
Options
--api-groupLimit to resources in the specified API group.--cachedUse the cached list of resources if available.--categoriesLimit to resources that belong to the specified categories.--namespacedIf false, non-namespaced resources will be returned, otherwise returning namespaced resources by default.--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (wide, name).--sort-byIf non-empty, sort list of resources using specified field. The field can be either 'name' or 'kind'.--verbsLimit to resources that support the specified verbs.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k api-versions
Usage:d8 k api-versions [options]Print the supported API versions on the server, in the form of "group/version"
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) [options]Apply a configuration to a resource by file name or stdin
Options
--allSelect all resources in the namespace of the specified resource types.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fThe files that contain the configurations to apply.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--force-conflictsIf true, server-side apply will force the changes against conflicts.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--openapi-patchIf true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked-in types.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteAutomatically resolve conflicts between the modified and live configuration by using values from the modified configuration--pruneAutomatically delete resource objects, that do not appear in the configs and are created by either apply or create --save-config. Should be used with either -l or --all.--prune-allowlistOverwrite the default allowlist withfor --prune --recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-sideIf true, apply runs in the server instead of the client.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, apply will operate on the subresource of the requested object. Only allowed when using --server-side. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply edit-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) edit-last-applied (RESOURCE/NAME | -f FILENAME) [options]Edit latest last-applied-configuration annotations of a resource/object
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to edit the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsDefaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply set-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) set-last-applied -f FILENAME [options]Set the last-applied-configuration annotation on a live object to match the contents of a file
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--create-annotationWill create 'last-applied-configuration' annotations if current objects doesn't have one--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files that contains the last-applied-configuration annotations--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k apply view-last-applied
Usage:d8 k apply (-f FILENAME | -k DIRECTORY) view-last-applied (TYPE [NAME | -l label] | TYPE/NAME | -f FILENAME) [options]View the latest last-applied-configuration annotations of a resource/object
Options
--allSelect all resources in the namespace of the specified resource types--filename,-fFilename, directory, or URL to files that contains the last-applied-configuration annotations--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. Must be one of (yaml, json)--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k attach
Usage:d8 k attach (POD | TYPE/NAME) -c CONTAINER [options]Attach to a running container
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet,-qOnly print output from the remote session--stdin,-iPass stdin to the container--tty,-tStdin is a TTY
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth
Usage:d8 k auth [options]Inspect authorization
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth can-i
Usage:d8 k auth can-i VERB [TYPE | TYPE/NAME | NONRESOURCEURL] [options]Check whether an action is allowed
Options
--all-namespaces,-AIf true, check the specified action in all namespaces.--listIf true, prints all allowed actions.--no-headersIf true, prints allowed actions without headers--quiet,-qIf true, suppress output and just return the exit code.--subresourceSubResource such as pod/log or deployment/scale
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth reconcile
Usage:d8 k auth reconcile -f FILENAME [options]Reconciles rules for RBAC role, role binding, cluster role, and cluster role binding objects
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to reconcile.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--remove-extra-permissionsIf true, removes extra permissions added to roles--remove-extra-subjectsIf true, removes extra subjects added to rolebindings--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k auth whoami
Usage:d8 k auth whoami [options]Experimental: Check self subject attributes
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k autoscale
Usage:d8 k autoscale (-f FILENAME | TYPE NAME | TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [options]Auto-scale a deployment, replica set, stateful set, or replication controller
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cpu-percentThe target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to autoscale.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--maxThe upper limit for the number of pods that can be set by the autoscaler. Required.--minThe lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value.--nameThe name for the newly created object. If not specified, the name of the input resource will be used.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate
Usage:d8 k certificate SUBCOMMAND [options]Modify certificate resources
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate approve
Usage:d8 k certificate SUBCOMMAND approve (-f FILENAME | NAME) [options]Approve a certificate signing request
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to update--forceUpdate the CSR even if it is already approved.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k certificate deny
Usage:d8 k certificate SUBCOMMAND deny (-f FILENAME | NAME) [options]Deny a certificate signing request
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to update--forceUpdate the CSR even if it is already denied.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info
Usage:d8 k cluster-info [options]Display cluster information
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cluster-info dump
Usage:d8 k cluster-info dump [options]Dump relevant information for debugging and diagnosis
Options
--all-namespaces,-AIf true, dump all namespaces. If true, --namespaces is ignored.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--namespacesA comma separated list of namespaces to dump.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-directoryWhere to output the files. If empty or '-' uses stdout, otherwise creates a directory hierarchy in that directory--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k completion
Usage:d8 k completion SHELL [options]Output shell completion code for the specified shell (bash, zsh, fish, or powershell)
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config
Usage:d8 k config SUBCOMMAND [options]Modify kubeconfig files
Options
--kubeconfiguse a particular kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config current-context
Usage:d8 k config SUBCOMMAND current-context [options]Display the current-context
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-cluster
Usage:d8 k config SUBCOMMAND delete-cluster NAME [options]Delete the specified cluster from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-context
Usage:d8 k config SUBCOMMAND delete-context NAME [options]Delete the specified context from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config delete-user
Usage:d8 k config SUBCOMMAND delete-user NAME [options]Delete the specified user from the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-clusters
Usage:d8 k config SUBCOMMAND get-clusters [options]Display clusters defined in the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-contexts
Usage:d8 k config SUBCOMMAND get-contexts [(-o|--output=)name)] [options]Describe one or many contexts
Options
--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (name).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config get-users
Usage:d8 k config SUBCOMMAND get-users [options]Display users defined in the kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config rename-context
Usage:d8 k config SUBCOMMAND rename-context CONTEXT_NAME NEW_NAME [options]Rename a context from the kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set
Usage:d8 k config SUBCOMMAND set PROPERTY_NAME PROPERTY_VALUE [options]Set an individual value in a kubeconfig file
Options
--set-raw-bytesWhen writing a []byte PROPERTY_VALUE, write the given string directly without base64 decoding.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-cluster
Usage:d8 k config SUBCOMMAND set-cluster NAME [--server=server] [--certificate-authority=path/to/certificate/authority] [--insecure-skip-tls-verify=true] [--tls-server-name=example.com] [options]Set a cluster entry in kubeconfig
Options
--certificate-authorityPath to certificate-authority file for the cluster entry in kubeconfig--embed-certsembed-certs for the cluster entry in kubeconfig--insecure-skip-tls-verifyinsecure-skip-tls-verify for the cluster entry in kubeconfig--proxy-urlproxy-url for the cluster entry in kubeconfig--serverserver for the cluster entry in kubeconfig--tls-server-nametls-server-name for the cluster entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-context
Usage:d8 k config SUBCOMMAND set-context [NAME | --current] [--cluster=cluster_nickname] [--user=user_nickname] [--namespace=namespace] [options]Set a context entry in kubeconfig
Options
--clustercluster for the context entry in kubeconfig--currentModify the current context--namespacenamespace for the context entry in kubeconfig--useruser for the context entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config set-credentials
Usage:d8 k config SUBCOMMAND set-credentials NAME [--client-certificate=path/to/certfile] [--client-key=path/to/keyfile] [--token=bearer_token] [--username=basic_user] [--password=basic_password] [--auth-provider=provider_name] [--auth-provider-arg=key=value] [--exec-command=exec_command] [--exec-api-version=exec_api_version] [--exec-arg=arg] [--exec-env=key=value] [options]Set a user entry in kubeconfig
Options
--auth-providerAuth provider for the user entry in kubeconfig--auth-provider-arg'key=value' arguments for the auth provider--client-certificatePath to client-certificate file for the user entry in kubeconfig--client-keyPath to client-key file for the user entry in kubeconfig--embed-certsEmbed client cert/key for the user entry in kubeconfig--exec-api-versionAPI version of the exec credential plugin for the user entry in kubeconfig--exec-argNew arguments for the exec credential plugin command for the user entry in kubeconfig--exec-commandCommand for the exec credential plugin for the user entry in kubeconfig--exec-env'key=value' environment values for the exec credential plugin--exec-interactive-modeInteractiveMode of the exec credentials plugin for the user entry in kubeconfig--exec-provide-cluster-infoProvideClusterInfo of the exec credentials plugin for the user entry in kubeconfig--passwordpassword for the user entry in kubeconfig--tokentoken for the user entry in kubeconfig--usernameusername for the user entry in kubeconfig
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config unset
Usage:d8 k config SUBCOMMAND unset PROPERTY_NAME [options]Unset an individual value in a kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config use-context
Alias: use
d8 k config SUBCOMMAND use-context CONTEXT_NAME [options]Set the current-context in a kubeconfig file
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k config view
Usage:d8 k config SUBCOMMAND view [options]Display merged kubeconfig settings or a specified kubeconfig file
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--flattenFlatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files)--mergeMerge the full hierarchy of kubeconfig files--minifyRemove all information not used by current-context from the output--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawDisplay raw byte data and sensitive data--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfiguse a particular kubeconfig file--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cordon
Usage:d8 k cordon NODE [options]Mark node as unschedulable
Options
--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k cp
Usage:d8 k cp <file-spec-src> <file-spec-dest> [options]Copy files and directories to and from containers
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--no-preserveThe copied file/directory's ownership and permissions will not be preserved in the container--retriesSet number of retries to complete a copy operation from a container. Specify 0 to disable or any negative value for infinite retrying. The default is 0 (no retry).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create
Usage:d8 k create -f FILENAME [options]Create a resource from a file or from stdin
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--editEdit the API resource before creating--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to create the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawRaw URI to POST to the server. Uses the transport specified by the kubeconfig file.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsOnly relevant if --edit=true. Defaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrole
Usage:d8 k create -f FILENAME clusterrole NAME --verb=verb --resource=resource.group [--resource-name=resourcename] [--dry-run=server|client|none] [options]Create a cluster role
Options
--aggregation-ruleAn aggregation label selector for combining ClusterRoles.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--non-resource-urlA partial url that user should have access to.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resourceResource that the rule applies to--resource-nameResource in the white list that the rule applies to, repeat this flag for multiple items--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verbVerb that applies to the resources contained in the rule
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create clusterrolebinding
Usage:d8 k create -f FILENAME clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Create a cluster role binding for a particular cluster role
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterroleClusterRole this ClusterRoleBinding should reference--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--groupGroups to bind to the clusterrole. The flag can be repeated to add multiple groups.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccountService accounts to bind to the clusterrole, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the clusterrole. The flag can be repeated to add multiple users.--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create configmap
Alias: cm
d8 k create -f FILENAME configmap NAME [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]Create a config map from a local file, directory or literal value
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the configmap to its name.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-env-fileSpecify the path to a file to read lines of key=val pairs to create a configmap.--from-fileKey file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.--from-literalSpecify a key and literal value to insert in configmap (i.e. mykey=somevalue)--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create cronjob
Alias: cj
d8 k create -f FILENAME cronjob NAME --image=image --schedule='0/5 * * * ?' -- [COMMAND] [args...] [options]Create a cron job with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--imageImage name to run.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--restartjob's restart policy. supported values: OnFailure, Never--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--scheduleA schedule in the Cron format the job should be run with.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create deployment
Alias: deploy
d8 k create -f FILENAME deployment NAME --image=image -- [COMMAND] [args...] [options]Create a deployment with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--imageImage names to run. A deployment can have multiple images set for multi-container pod.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--portThe containerPort that this deployment exposes.--replicas,-rNumber of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create ingress
Alias: ing
d8 k create -f FILENAME ingress NAME --rule=host/path=service:port[,tls[=secret]] [options]Create an ingress with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotationAnnotation to insert in the ingress object, in the format annotation=value--classIngress Class to be used--default-backendDefault service for backend, in format of svcname:port--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--ruleRule in format host/path=service:port[,tls=secretname]. Paths containing the leading character '*' are considered pathType=Prefix. tls argument is optional.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create job
Usage:d8 k create -f FILENAME job NAME --image=image [--from=cronjob/name] -- [COMMAND] [args...] [options]Create a job with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--fromThe name of the resource to create a Job from (only cronjob is supported).--imageImage name to run.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create namespace
Alias: ns
d8 k create -f FILENAME namespace NAME [--dry-run=server|client|none] [options]Create a namespace with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create poddisruptionbudget
Alias: pdb
d8 k create -f FILENAME poddisruptionbudget NAME --selector=SELECTOR --min-available=N [--dry-run=server|client|none] [options]Create a pod disruption budget with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--max-unavailableThe maximum number or percentage of unavailable pods this budget requires.--min-availableThe minimum number or percentage of available pods this budget requires.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selectorA label selector to use for this budget. Only equality-based selector requirements are supported.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create priorityclass
Alias: pc
d8 k create -f FILENAME priorityclass NAME --value=VALUE --global-default=BOOL [--dry-run=server|client|none] [options]Create a priority class with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--descriptiondescription is an arbitrary string that usually provides guidelines on when this priority class should be used.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--global-defaultglobal-default specifies whether this PriorityClass should be considered as the default priority.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--preemption-policypreemption-policy is the policy for preempting pods with lower priority.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--valuethe value of this priority class.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create quota
Alias: resourcequota
d8 k create -f FILENAME quota NAME [--hard=key1=value1,key2=value2] [--scopes=Scope1,Scope2] [--dry-run=server|client|none] [options]Create a quota with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--hardA comma-delimited set of resource=quantity pairs that define a hard limit.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--scopesA comma-delimited set of quota scopes that must all match each object tracked by the quota.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create role
Usage:d8 k create -f FILENAME role NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename] [--dry-run=server|client|none] [options]Create a role with single rule
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--resourceResource that the rule applies to--resource-nameResource in the white list that the rule applies to, repeat this flag for multiple items--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--verbVerb that applies to the resources contained in the rule
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create rolebinding
Usage:d8 k create -f FILENAME rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Create a role binding for a particular role or cluster role
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusterroleClusterRole this RoleBinding should reference--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--groupGroups to bind to the role. The flag can be repeated to add multiple groups.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--roleRole this RoleBinding should reference--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--serviceaccountService accounts to bind to the role, in the format: . The flag can be repeated to add multiple service accounts. --show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the role. The flag can be repeated to add multiple users.--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) [options]Create a secret using a specified subcommand
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret docker-registry
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-file=[key=]source] [--dry-run=server|client|none] [options]Create a secret for use with a Docker registry
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--docker-emailEmail for Docker registry--docker-passwordPassword for Docker registry authentication--docker-serverServer location for Docker registry--docker-usernameUsername for Docker registry authentication--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-fileKey files can be specified using their file path, in which case a default name of .dockerconfigjson will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key. For this command, the key should always be .dockerconfigjson.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret generic
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) generic NAME [--type=string] [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run=server|client|none] [options]Create a secret from a local file, directory, or literal value
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--from-env-fileSpecify the path to a file to read lines of key=val pairs to create a secret.--from-fileKey files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.--from-literalSpecify a key and literal value to insert in secret (i.e. mykey=somevalue)--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeThe type of secret to create--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create secret tls
Usage:d8 k create -f FILENAME secret (docker-registry | generic | tls) tls NAME --cert=path/to/cert/file --key=path/to/key/file [--dry-run=server|client|none] [options]Create a TLS secret
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--append-hashAppend a hash of the secret to its name.--certPath to PEM encoded public key certificate.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--keyPath to private key associated with given certificate.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service
Alias: svc
d8 k create -f FILENAME service [options]Create a service using a specified subcommand
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service clusterip
Usage:d8 k create -f FILENAME service clusterip NAME [--tcp=<port>:<targetPort>] [--dry-run=server|client|none] [options]Create a ClusterIP service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--clusteripAssign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service externalname
Usage:d8 k create -f FILENAME service externalname NAME --external-name external.name [--dry-run=server|client|none] [options]Create an ExternalName service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-nameExternal name of service--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service loadbalancer
Usage:d8 k create -f FILENAME service loadbalancer NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]Create a LoadBalancer service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create service nodeport
Usage:d8 k create -f FILENAME service nodeport NAME [--tcp=port:targetPort] [--dry-run=server|client|none] [options]Create a NodePort service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--node-portPort used to expose the service on each node in a cluster.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--tcpPort pairs can be specified as ': '. --templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create serviceaccount
Alias: sa
d8 k create -f FILENAME serviceaccount NAME [--dry-run=server|client|none] [options]Create a service account with the specified name
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k create token
Usage:d8 k create -f FILENAME token SERVICE_ACCOUNT_NAME [options]Request a service account token
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--audienceAudience of the requested token. If unset, defaults to requesting a token for use with the Kubernetes API server. May be repeated to request a token valid for multiple audiences.--bound-object-kindKind of an object to bind the token to. Supported kinds are Node, Pod, Secret. If set, --bound-object-name must be provided.--bound-object-nameName of an object to bind the token to. The token will expire when the object is deleted. Requires --bound-object-kind.--bound-object-uidUID of an object to bind the token to. Requires --bound-object-kind and --bound-object-name. If unset, the UID of the existing object is used.--durationRequested lifetime of the issued token. If not set or if set to 0, the lifetime will be determined by the server automatically. The server may return a token with a longer or shorter lifetime.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k debug
Usage:d8 k debug (POD | TYPE[[.VERSION].GROUP]/NAME) [ -- COMMAND [args...] ] [options]Create debugging sessions for troubleshooting workloads and nodes
Options
--arguments-onlyIf specified, everything after -- will be passed to the new container as Args instead of Command.--attachIf true, wait for the container to start running, and then attach as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true.--container,-cContainer name to use for debug container.--copy-toCreate a copy of the target Pod with this name.--customPath to a JSON or YAML file containing a partial container spec to customize built-in debug profiles.--envEnvironment variables to set in the container.--filename,-fidentifying the resource to debug--imageContainer image to use for debug container. If not specified, the platform's recommended image will be used.--image-pull-policyThe image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--keep-annotationsIf true, keep the original pod annotations.(This flag only works when used with '--copy-to')--keep-init-containersRun the init containers for the pod. Defaults to true.(This flag only works when used with '--copy-to')--keep-labelsIf true, keep the original pod labels.(This flag only works when used with '--copy-to')--keep-livenessIf true, keep the original pod liveness probes.(This flag only works when used with '--copy-to')--keep-readinessIf true, keep the original pod readiness probes.(This flag only works when used with '--copy-to')--keep-startupIf true, keep the original startup probes.(This flag only works when used with '--copy-to')--profileOptions are "legacy", "general", "baseline", "netadmin", "restricted" or "sysadmin".--quiet,-qIf true, suppress informational messages.--replaceWhen used with '--copy-to', delete the original Pod.--same-nodeWhen used with '--copy-to', schedule the copy of target Pod on the same node.--set-imageWhen used with '--copy-to', a list of name=image pairs for changing container images, similar to how 'kubectl set image' works.--share-processesWhen used with '--copy-to', enable process namespace sharing in the copy.--stdin,-iKeep stdin open on the container(s) in the pod, even if nothing is attached.--targetWhen using an ephemeral container, target processes in this container name.--tty,-tAllocate a TTY for the debugging container.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k delete
Usage:d8 k delete ([-f FILENAME] | [-k DIRECTORY] | TYPE [(NAME | -l label | --all)]) [options]Delete resources by file names, stdin, resources and names, or by resources and label selector
Options
--allDelete all resources, in the namespace of the specified resource types.--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fcontaining the resource to delete.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--ignore-not-foundTreat "resource not found" as a successful delete. Defaults to "true" when --all is specified.--interactive,-iIf true, delete resource only when user confirms.--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--nowIf true, resources are signaled for immediate shutdown (same as --grace-period=1).--output,-oOutput mode. Use "-o name" for shorter output (resource/name).--rawRaw URI to DELETE to the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k describe
Usage:d8 k describe (-f FILENAME | TYPE [NAME_PREFIX | -l label] | TYPE/NAME) [options]Show details of a specific resource or group of resources
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--filename,-fFilename, directory, or URL to files containing the resource to describe--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-eventsIf true, display events related to the described object.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k diff
Usage:d8 k diff -f FILENAME [options]Diff the live version against a would-be applied version
Options
--concurrencyNumber of objects to process in parallel when diffing against the live version. Larger number = faster, but more memory, I/O and CPU over that shorter period of time.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files contains the configuration to diff--force-conflictsIf true, server-side apply will force the changes against conflicts.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--pruneInclude resources that would be deleted by pruning. Can be used with -l and default shows all resources would be pruned--prune-allowlistOverwrite the default allowlist withfor --prune --recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-sideIf true, apply runs in the server instead of the client.--show-managed-fieldsIf true, include managed fields in the diff.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k drain
Usage:d8 k drain NODE [options]Drain node in preparation for maintenance
Options
--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--delete-emptydir-dataContinue even if there are pods using emptyDir (local data that will be deleted when the node is drained).--disable-evictionForce drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, use with caution.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--forceContinue even if there are pods that do not declare a controller.--grace-periodPeriod of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used.--ignore-daemonsetsIgnore DaemonSet-managed pods.--pod-selectorLabel selector to filter pods on the node--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--skip-wait-for-delete-timeoutIf pod DeletionTimestamp older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip.--timeoutThe length of time to wait before giving up, zero means infinite
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k edit
Usage:d8 k edit (RESOURCE/NAME | -f FILENAME) [options]Edit a resource on the server
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files to use to edit the resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--output-patchOutput the patch if the resource is edited.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, edit will operate on the subresource of the requested object. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--windows-line-endingsDefaults to the line ending native to your platform.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k events
Usage:d8 k events [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file] [--for TYPE/NAME] [--watch] [--types=Normal,Warning] [options]List events
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--forFilter events to only those pertaining to the specified resource.--no-headersWhen using the default output format, don't print headers.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typesOutput only events of given types.--watch,-wAfter listing the requested events, watch for more events.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k exec
Usage:d8 k exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] [options]Execute a command in a container
Options
--container,-cContainer name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen--filename,-fto use to exec into the resource--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--quiet,-qOnly print output from the remote session--stdin,-iPass stdin to the container--tty,-tStdin is a TTY
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k explain
Usage:d8 k explain TYPE [--recursive=FALSE|TRUE] [--api-version=api-version-group] [-o|--output=plaintext|plaintext-openapiv2] [options]Get documentation for a resource
Options
--api-versionUse given api-version (group/version) of the resource.--output,-oFormat in which to render the schema. Valid values are: (plaintext, plaintext-openapiv2).--recursiveWhen true, print the name of all the fields recursively. Otherwise, print the available fields with their description.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k expose
Usage:d8 k expose (-f FILENAME | TYPE NAME) [--port=port] [--protocol=TCP|UDP|SCTP] [--target-port=number-or-name] [--name=name] [--external-ip=external-ip-of-service] [--type=type] [options]Take a replication controller, service, deployment or pod and expose it as a new Kubernetes service
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cluster-ipClusterIP to be assigned to the service. Leave empty to auto-allocate, or set to 'None' to create a headless service.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--external-ipAdditional external IP address (not managed by Kubernetes) to accept for the service. If this IP is routed to a node, the service can be accessed by this IP in addition to its generated service IP.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to expose a service--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--labels,-lLabels to apply to the service created by this call.--load-balancer-ipIP to assign to the LoadBalancer. If empty, an ephemeral IP will be created and used (cloud-provider specific).--nameThe name for the newly created object.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-typeThe method used to override the generated object: json, merge, or strategic.--overridesAn inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--portThe port that the service should serve on. Copied from the resource being exposed, if unspecified--protocolThe network protocol for the service to be created. Default is 'TCP'.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--selectorA label selector to use for this service. Only equality-based selector requirements are supported. If empty (the default) infer the selector from the replication controller or replica set.)--session-affinityIf non-empty, set the session affinity for the service to this; legal values: 'None', 'ClientIP'--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--target-portName or number for the port on the container that the service should direct traffic to. Optional.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeType for this service: ClusterIP, NodePort, LoadBalancer, or ExternalName. Default is 'ClusterIP'.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k get
Usage:d8 k get [(-o|--output=)json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file|custom-columns|custom-columns-file|wide] (TYPE[.VERSION][.GROUP] [NAME | -l label] | TYPE[.VERSION][.GROUP]/NAME ...) [flags] [options]Display one or many resources
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--chunk-sizeReturn large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--ignore-not-foundIf the requested object does not exist the command will return exit code 0.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--label-columns,-LAccepts a comma separated list of labels that are going to be presented as columns. Names are case-sensitive. You can also use multiple flag options like -L label1 -L label2...--no-headersWhen using the default or custom-column output format, don't print headers (default print headers).--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file, custom-columns, custom-columns-file, wide). See custom columns [https://kubernetes.io/docs/reference/kubectl/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [https://kubernetes.io/docs/reference/kubectl/jsonpath/].--output-watch-eventsOutput watch event objects when --watch or --watch-only is used. Existing objects are output as initial ADDED events.--rawRaw URI to request from the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--server-printIf true, have the server return the appropriate table output. Supports extension APIs and CRDs.--show-kindIf present, list the resource type for the requested object(s).--show-labelsWhen printing, show all labels as the last column (default hide labels column)--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--sort-byIf non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.--subresourceIf specified, gets the subresource of the requested object. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--watch,-wAfter listing/getting the requested object, watch for changes.--watch-onlyWatch for changes to the requested object(s), without listing/getting first.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k kustomize
Usage:d8 k kustomize DIR [options]Build a kustomization target from a directory or URL
Options
--as-current-useruse the uid and gid of the command executor to run the function in the container--enable-alpha-pluginsenable kustomize plugins--enable-helmEnable use of the Helm chart inflator generator.--enable-managedby-labelenable adding app.kubernetes.io/managed-by--env,-ea list of environment variables to be used by functions--helm-api-versionsKubernetes api versions used by Helm for Capabilities.APIVersions--helm-commandhelm command (path to executable)--helm-debugEnable debug output from the Helm chart inflator generator.--helm-kube-versionKubernetes version used by Helm for Capabilities.KubeVersion--load-restrictorif set to 'LoadRestrictionsNone', local kustomizations may load files from outside their root. This does, however, break the relocatability of the kustomization.--mounta list of storage options read from the filesystem--networkenable network access for functions that declare it--network-namethe docker network to run the container in--output,-oIf specified, write output to this path.--reorderReorder the resources just before output. Use 'legacy' to apply a legacy reordering (Namespaces first, Webhooks last, etc). Use 'none' to suppress a final reordering.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k label
Usage:d8 k label [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version] [options]Update the labels on a resource
Options
--allSelect all resources, in the namespace of the specified resource types--all-namespaces,-AIf true, check the specified action in all namespaces.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fFilename, directory, or URL to files identifying the resource to update the labels--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the labels for a given resource.--localIf true, label will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow labels to be overwritten, otherwise reject label updates that overwrite existing labels.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the labels update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k logs
Usage:d8 k logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER] [options]Print the logs for a container in a pod
Options
--all-containersGet all containers' logs in the pod(s).--all-podsGet logs from all pod(s). Sets prefix to true.--container,-cPrint the logs of this container--follow,-fSpecify if the logs should be streamed.--ignore-errorsIf watching / following pod logs, allow for any errors that occur to be non-fatal--insecure-skip-tls-verify-backendSkip verifying the identity of the kubelet that logs are requested from. In theory, an attacker could provide invalid log content back. You might want to use this if your kubelet serving certificates have expired.--limit-bytesMaximum bytes of logs to return. Defaults to no limit.--max-log-requestsSpecify maximum number of concurrent logs to follow when using by a selector. Defaults to 5.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--prefixPrefix each log line with the log source (pod name and container name)--previous,-pIf true, print the logs for the previous instance of the container in a pod if it exists.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--sinceOnly return logs newer than a relative duration like 5s, 2m, or 3h. Defaults to all logs. Only one of since-time / since may be used.--since-timeOnly return logs after a specific date (RFC3339). Defaults to all logs. Only one of since-time / since may be used.--tailLines of recent log file to display. Defaults to -1 with no selector, showing all log lines otherwise 10, if a selector is provided.--timestampsInclude timestamps on each line in the log output
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k options
Usage:d8 k options [options]Print the list of flags inherited by all commands
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k patch
Usage:d8 k patch (-f FILENAME | TYPE NAME) [-p PATCH|--patch-file FILE] [options]Update fields of a resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to update--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, patch will operate on the content of the file, not the server-side resource.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--patch,-pThe patch to be applied to the resource JSON file.--patch-fileA file containing a patch to be applied to the resource.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, patch will operate on the subresource of the requested object. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--typeThe type of patch being provided; one of [json merge strategic]
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin
Usage:d8 k plugin [flags] [options]Provides utilities for interacting with plugins
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k plugin list
Usage:d8 k plugin [flags] list [options]List all visible plugin executables on a user's PATH
Options
--name-onlyIf true, display only the binary name of each plugin, rather than its full path
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k port-forward
Usage:d8 k port-forward TYPE/NAME [options] [LOCAL_PORT:]REMOTE_PORT [...[LOCAL_PORT_N:]REMOTE_PORT_N]Forward one or more local ports to a pod
Options
--addressAddresses to listen on (comma separated). Only accepts IP addresses or localhost as a value. When localhost is supplied, kubectl will try to bind on both 127.0.0.1 and ::1 and will fail if neither of these addresses are available to bind.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k proxy
Usage:d8 k proxy [--port=PORT] [--www=static-dir] [--www-prefix=prefix] [--api-prefix=prefix] [options]Run a proxy to the Kubernetes API server
Options
--accept-hostsRegular expression for hosts that the proxy should accept.--accept-pathsRegular expression for paths that the proxy should accept.--addressThe IP address on which to serve on.--api-prefixPrefix to serve the proxied API under.--append-server-pathIf true, enables automatic path appending of the kube context server path to each request.--disable-filterIf true, disable request filtering in the proxy. This is dangerous, and can leave you vulnerable to XSRF attacks, when used with an accessible port.--keepalivekeepalive specifies the keep-alive period for an active network connection. Set to 0 to disable keepalive.--port,-pThe port on which to run the proxy. Set to 0 to pick a random port.--reject-methodsRegular expression for HTTP methods that the proxy should reject (example --reject-methods='POST,PUT,PATCH').--reject-pathsRegular expression for paths that the proxy should reject. Paths specified here will be rejected even accepted by --accept-paths.--unix-socket,-uUnix socket on which to run the proxy.--www,-wAlso serve static files from the given directory under the specified prefix.--www-prefix,-PPrefix to serve static files under, if static file directory is specified.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k replace
Usage:d8 k replace -f FILENAME [options]Replace a resource by file name or stdin
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fThe files that contain the configurations to replace.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--rawRaw URI to PUT to the server. Uses the transport specified by the kubeconfig file.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--subresourceIf specified, replace will operate on the subresource of the requested object. This flag is beta and may change in the future.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout
Usage:d8 k rollout SUBCOMMAND [options]Manage the rollout of a resource
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout history
Usage:d8 k rollout SUBCOMMAND history (TYPE NAME | TYPE/NAME) [flags] [options]View rollout history
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revisionSee the details, including podTemplate of the revision specified--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout pause
Usage:d8 k rollout SUBCOMMAND pause RESOURCE [options]Mark the provided resource as paused
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout restart
Usage:d8 k rollout SUBCOMMAND restart RESOURCE [options]Restart a resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout resume
Usage:d8 k rollout SUBCOMMAND resume RESOURCE [options]Resume a paused resource
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout status
Usage:d8 k rollout SUBCOMMAND status (TYPE NAME | TYPE/NAME) [flags] [options]Show the status of the rollout
Options
--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--revisionPin to a specific revision for showing its status. Defaults to 0 (last revision).--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--timeoutThe length of time to wait before ending watch, zero means never. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).--watch,-wWatch the status of the rollout until it's done.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k rollout undo
Usage:d8 k rollout SUBCOMMAND undo (TYPE NAME | TYPE/NAME) [flags] [options]Undo a previous rollout
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--to-revisionThe revision to rollback to. Default to 0 (last revision).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k run
Usage:d8 k run NAME --image=image [--env="key=value"] [--port=port] [--dry-run=server|client] [--overrides=inline-json] [--command] -- [COMMAND] [args...] [options]Run a particular image on the cluster
Options
--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--annotationsAnnotations to apply to the pod.--attachIf true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '-i/--stdin' is set, in which case the default is true. With '--restart=Never' the exit code of the container process is returned.--cascadeMust be "background", "orphan", or "foreground". Selects the deletion cascading strategy for the dependents (e.g. Pods created by a ReplicationController). Defaults to background.--commandIf true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--envEnvironment variables to set in the container.--exposeIf true, create a ClusterIP service associated with the pod. Requires `--port`.--field-managerName of the manager used to track field ownership.--filename,-fto use to replace the resource.--forceIf true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.--grace-periodPeriod of time in seconds given to the resource to terminate gracefully. Ignored if negative. Set to 1 for immediate shutdown. Can only be set to 0 when --force is true (force deletion).--imageThe image for the container to run.--image-pull-policyThe image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server.--kustomize,-kProcess a kustomization directory. This flag can't be used together with -f or -R.--labels,-lComma separated labels to apply to the pod. Will override previous values.--leave-stdin-openIf the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--override-typeThe method used to override the generated object: json, merge, or strategic.--overridesAn inline JSON override for the generated object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.--pod-running-timeoutThe length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running--portThe port that this container exposes.--privilegedIf true, run the container in privileged mode.--quiet,-qIf true, suppress prompt messages.--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--restartThe restart policy for this Pod. Legal values [Always, OnFailure, Never].--rmIf true, delete the pod after it exits. Only valid when attaching to the container, e.g. with '--attach' or with '-i/--stdin'.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--stdin,-iKeep stdin open on the container in the pod, even if nothing is attached.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object--tty,-tAllocate a TTY for the container in the pod.--waitIf true, wait for resources to be gone before returning. This waits for finalizers.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k scale
Usage:d8 k scale [--resource-version=version] [--current-replicas=count] --replicas=COUNT (-f FILENAME | TYPE NAME) [options]Set a new size for a deployment, replica set, or replication controller
Options
--allSelect all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--current-replicasPrecondition for current size. Requires that the current size of the resource match this value in order to scale. -1 (default) for no condition.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--filename,-fFilename, directory, or URL to files identifying the resource to set a new size--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--replicasThe new desired number of replicas. Required.--resource-versionPrecondition for resource version. Requires that the current resource version match this value in order to scale.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up on a scale operation, zero means don't wait. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set
Usage:d8 k set SUBCOMMAND [options]Set specific features on objects
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set env
Usage:d8 k set SUBCOMMAND env RESOURCE/NAME KEY_1=VAL_1 ... KEY_N=VAL_N [options]Update environment variables on a pod template
Options
--allIf true, select all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers,-cThe names of containers in the selected pod templates to change - may use wildcards--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--env,-eSpecify a key-value pair for an environment variable to set into each container.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files the resource to update the env--fromThe name of a resource from which to inject environment variables--keysComma-separated list of keys to import from specified resource--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--listIf true, display the environment and any changes in the standard format. this flag will removed when we have kubectl view env.--localIf true, set env will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow environment to be overwritten, otherwise reject updates that overwrite existing environment.--prefixPrefix to append to variable names--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resolveIf true, show secret or configmap references when listing variables--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set image
Usage:d8 k set SUBCOMMAND image (-f FILENAME | TYPE NAME) CONTAINER_NAME_1=CONTAINER_IMAGE_1 ... CONTAINER_NAME_N=CONTAINER_IMAGE_N [options]Update the image of a pod template
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set image will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set resources
Usage:d8 k set SUBCOMMAND resources (-f FILENAME | TYPE NAME) ([--limits=LIMITS & --requests=REQUESTS] [options]Update resource requests/limits on objects with pod templates
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--containers,-cThe names of containers in the selected pod templates to change, all containers are selected by default - may use wildcards--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--limitsThe resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--localIf true, set resources will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--requestsThe resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set selector
Usage:d8 k set SUBCOMMAND selector (-f FILENAME | TYPE NAME) EXPRESSIONS [--resource-version=version] [options]Set the selector on a resource
Options
--allSelect all resources in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fidentifying the resource.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--resource-versionIf non-empty, the selectors update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set serviceaccount
Alias: sa
d8 k set SUBCOMMAND serviceaccount (-f FILENAME | TYPE NAME) SERVICE_ACCOUNT [options]Update the service account of a resource
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files identifying the resource to get from a server.--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set serviceaccount will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recordRecord current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k set subject
Usage:d8 k set SUBCOMMAND subject (-f FILENAME | TYPE NAME) [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run=server|client|none] [options]Update the user, group, or service account in a role binding or cluster role binding
Options
--allSelect all resources, in the namespace of the specified resource types--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--filename,-fFilename, directory, or URL to files the resource to update the subjects--groupGroups to bind to the role--kustomize,-kProcess the kustomization directory. This flag can't be used together with -f or -R.--localIf true, set subject will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--serviceaccountService accounts to bind to the role--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--userUsernames to bind to the role
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k taint
Usage:d8 k taint NODE NAME KEY_1=VAL_1:TAINT_EFFECT_1 ... KEY_N=VAL_N:TAINT_EFFECT_N [options]Update the taints on one or more nodes
Options
--allSelect all nodes in the cluster--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-managerName of the manager used to track field ownership.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--overwriteIf true, allow taints to be overwritten, otherwise reject taint updates that overwrite existing taints.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validateMust be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top
Usage:d8 k top [options]Display resource (CPU/memory) usage
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top node
Aliases: nodes, no
d8 k top node [NAME | -l label] [options]Display resource (CPU/memory) usage of nodes
Options
--no-headersIf present, print output without headers--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--show-capacityPrint node resources based on Capacity instead of Allocatable(default) of the nodes.--sort-byIf non-empty, sort nodes list using specified field. The field can be either 'cpu' or 'memory'.--use-protocol-buffersEnables using protocol-buffers to access Metrics API.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k top pod
Aliases: pods, po
d8 k top pod [NAME | -l label] [options]Display resource (CPU/memory) usage of pods
Options
--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--containersIf present, print usage of containers within a pod.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--no-headersIf present, print output without headers.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.--sort-byIf non-empty, sort pods list using specified field. The field can be either 'cpu' or 'memory'.--sumPrint the sum of the resource usage--use-protocol-buffersEnables using protocol-buffers to access Metrics API.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k uncordon
Usage:d8 k uncordon NODE [options]Mark node as schedulable
Options
--dry-runMust be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k version
Usage:d8 k version [options]Print the client and server version information
Options
--clientIf true, shows client version only (no server required).--output,-oOne of 'yaml' or 'json'.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 k wait
Usage:d8 k wait ([-f FILENAME] | resource.group/resource.name | resource.group [(-l label | --all)]) [--for=create|--for=delete|--for condition=available|--for=jsonpath='{}'[=value]] [options]Experimental: Wait for a specific condition on one or many resources
Options
--allSelect all resources in the namespace of the specified resource types--all-namespaces,-AIf present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--field-selectorSelector (field query) to filter on, supports '=', '==', and '!='.(e.g. --field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.--filename,-fidentifying the resource.--forThe condition to wait on: [create|delete|condition=condition-name[=condition-value]|jsonpath='{JSONPath expression}'=[JSONPath value]]. The default condition-value is true. Condition values are compared after Unicode simple case folding, which is a more general form of case-insensitivity.--localIf true, annotation will NOT contact api-server but run locally.--output,-oOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--recursive,-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.--selector,-lSelector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--timeoutThe length of time to wait before giving up. Zero means check once and don't wait, negative means wait for a week.
Global options
--asUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation.--cache-dirDefault cache directory--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--match-server-versionRequire server version to match client version--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--profileName of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-outputName of the file to write the profile to--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)--warnings-as-errorsTreat warnings received from the server as errors and exit with a non-zero exit code
d8 login
Log in to the Deckhouse Kubernetes Platform
Options
--add-dir-headerIf true, adds the file directory to the header of the log messages--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-atwhen logging hits line file:N, emit a stack trace--log-dirIf non-empty, write log files in this directory (no effect when -logtostderr=true)--log-fileIf non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-sizeDefines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderrlog to standard error instead of files--one-outputIf true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headersIf true, avoid header prefixes in the log messages--skip-log-headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthresholdlogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging
d8 login get-token
Usage:d8 login get-token [flags] [options]Run as a kubectl credential plugin
Options
--authentication-timeout-sec[authcode] Timeout of authentication in seconds--browser-command[authcode] Command to open the browser--certificate-authorityPath to a cert file for the certificate authority--certificate-authority-dataBase64 encoded cert for the certificate authority--force-refreshIf set, refresh the ID token regardless of its expiration time--grant-typeAuthorization grant type to use. One of (auto|authcode|authcode-keyboard|password|device-code)--insecure-skip-tls-verifyIf set, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--listen-address[authcode] Address to bind to the local server. If multiple addresses are set, it will try binding in order--listen-port[authcode] deprecated: port to bind to the local server--local-server-cert[authcode] Certificate path for the local server--local-server-key[authcode] Certificate key path for the local server--oidc-auth-request-extra-params[authcode, authcode-keyboard] Extra query parameters to send with an authentication request--oidc-client-idClient ID of the provider (mandatory)--oidc-client-secretClient secret of the provider--oidc-extra-scopeScopes to request to the provider--oidc-issuer-urlIssuer URL of the provider (mandatory)--oidc-redirect-url-authcode-keyboard[authcode-keyboard] Redirect URL--oidc-redirect-url-hostname[authcode] Hostname of the redirect URL--oidc-use-pkceForce PKCE usage--open-url-after-authentication[authcode] If set, open the URL in the browser after authentication--password[password] Password for resource owner password credentials grant--skip-open-browser[authcode] Do not open the browser automatically--tls-renegotiation-freelyIf set, allow a remote server to repeatedly request renegotiation--tls-renegotiation-onceIf set, allow a remote server to request renegotiation once per connection--token-cache-dirPath to a directory for token cache--username[password] Username for resource owner password credentials grant
Global options
--add-dir-headerIf true, adds the file directory to the header of the log messages--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)--log-backtrace-atwhen logging hits line file:N, emit a stack trace--log-dirIf non-empty, write log files in this directory (no effect when -logtostderr=true)--log-fileIf non-empty, use this log file (no effect when -logtostderr=true)--log-file-max-sizeDefines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited.--logtostderrlog to standard error instead of files--one-outputIf true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)--skip-headersIf true, avoid header prefixes in the log messages--skip-log-headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)--stderrthresholdlogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true)--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging
d8 mirror
Copy Deckhouse Kubernetes Platform distribution to the local filesystem or third-party registry
d8 mirror pull
Usage:d8 mirror pull <images-bundle-path> [options]Copy Deckhouse Kubernetes Platform distribution to the local filesystem
Options
--deckhouse-tagSpecific Deckhouse build tag to pull. Conflicts with --since-version. If registry contains release channel image for specified tag, all release channels in the bundle will be pointed to it.--exclude-module,-eBlacklist specific modules from downloading. Format is "module-name[@version]". Use one flag per each module. Overridden by use of --include-module."--forceOverwrite existing bundle packages if they are conflicting with current pull operation.--gost-digestCalculate GOST R 34.11-2012 STREEBOG digest for downloaded bundle--ignore-suspendIgnore suspended release channels and continue mirroring. Use with caution.--images-bundle-chunk-size,-cSplit resulting bundle file into chunks of at most N gigabytes--include-module,-iWhitelist specific modules for downloading. Use one flag per each module. Disables blacklisting by --exclude-module." Example: Available versions for: v1.0.0, v1.1.0, v1.2.0, v1.3.0, v1.3.3, v1.4.1 module-name@1.3.0 → semver ^ constraint (^1.3.0): include v1.3.0, v1.3.3, v1.4.1. In addition pulls current versions from release channels module-name@~1.3.0 → semver ~ constraint (>=1.3.0 <1.4.0): include only v1.3.0, v1.3.3. In addition pulls current versions from release channels module-name@=v1.3.0 → exact tag match: include only v1.3.0 and publish it to all release channels (alpha, beta, early-access, stable, rock-solid). module-name@=bobV1 → exact tag match: include only bobV1 and publish it to all release channels (alpha, beta, early-access, stable, rock-solid). module-name@=v1.3.0+stable → exact tag match: include only v1.3.0 and and publish it to stable channel --insecureInteract with registries over HTTP.--license,-lDeckhouse license key. Shortcut for --source-login=license-token --source-password=<>.--modules-path-suffixSuffix to append to source repo path to locate modules.--no-modulesDo not pull Deckhouse modules into bundle.--no-platformDo not pull Deckhouse Kubernetes Platform into bundle.--no-pull-resumeDo not continue last unfinished pull operation and start from scratch.--no-security-dbDo not pull security databases into bundle.--only-extra-imagesPull only extra images for modules (additional images like security databases, scanners, etc.) without pulling main module images.--since-versionMinimal Deckhouse release to pull. Ignored if above current Rock Solid release. Conflicts with --deckhouse-tag.--sourceSource registry to pull Deckhouse images from.--source-loginSource registry login.--source-passwordSource registry password.--tls-skip-verifyDisable TLS certificate validation.--tmp-dirPath to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 mirror push
Usage:d8 mirror push <images-bundle-path> <registry> [options]Copy Deckhouse Kubernetes Platform distribution to the third-party registry
Options
--insecureInteract with registries over HTTP.--modules-path-suffixSuffix to append to source repo path to locate modules.--registry-login,-uUsername to log into the target registry.--registry-password,-pPassword to log into the target registry.--tls-skip-verifyDisable TLS certificate validation.--tmp-dirPath to a temporary directory to use for image pulling and pushing. All processing is done in this directory, so make sure there is enough free disk space to accommodate the entire bundle you are downloading;
d8 status
Get cluster status information
Options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 stronghold
Deckhouse Stronghold commands
d8 stronghold agent
Usage:d8 stronghold agent [options]Start a Stronghold agent
d8 stronghold auth
Usage:d8 stronghold auth [options]Interact with auth methods
d8 stronghold delete
Usage:d8 stronghold delete [options]Delete secrets and configuration
d8 stronghold kv
Usage:d8 stronghold kv [options]Interact with Stronghold's Key-Value storage
d8 stronghold lease
Usage:d8 stronghold lease [options]Interact with leases
d8 stronghold list
Usage:d8 stronghold list [options]List data or secrets
d8 stronghold login
Usage:d8 stronghold login [options]Authenticate locally
d8 stronghold namespace
Usage:d8 stronghold namespace [options]Interact with namespaces
d8 stronghold operator
Usage:d8 stronghold operator [options]Perform operator-specific tasks
d8 stronghold patch
Usage:d8 stronghold patch [options]Patch data, configuration, and secrets
d8 stronghold path-help
Usage:d8 stronghold path-help [options]Retrieve API help for paths
d8 stronghold pki
Usage:d8 stronghold pki [options]Interact with Stronghold's PKI Secrets Engine
d8 stronghold policy
Usage:d8 stronghold policy [options]Interact with policies
d8 stronghold print
Usage:d8 stronghold print [options]Prints runtime configurations
d8 stronghold proxy
Usage:d8 stronghold proxy [options]Start a Stronghold Proxy
d8 stronghold read
Usage:d8 stronghold read [options]Read data and retrieves secrets
d8 stronghold secrets
Usage:d8 stronghold secrets [options]Interact with secrets engines
d8 stronghold status
Usage:d8 stronghold status [options]Print seal and HA status
d8 stronghold token
Usage:d8 stronghold token [options]Interact with tokens
d8 stronghold transit
Usage:d8 stronghold transit [options]Interact with Stronghold's Transit Secrets Engine
d8 stronghold unwrap
Usage:d8 stronghold unwrap [options]Unwrap a wrapped secret
d8 stronghold version
Usage:d8 stronghold version [options]Print version
d8 stronghold version-history
Usage:d8 stronghold version-history [options]Prints the version history of the target Stronghold server
d8 stronghold write
Usage:d8 stronghold write [options]Write data, configuration, and secrets
d8 system
Aliases: s, p, platform
Operate system options. Aliases: s, p, platform
Options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system collect-debug-info
Usage:d8 system collect-debug-info [options]Collect debug info.
Options
--excludeExclude specific files from the debug archive. Use comma-separated values--list-exclude,-lList all files that can be excluded from the debug archive
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit
Usage:d8 system edit [options]Edit configuration files
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit cluster-configuration
Usage:d8 system edit cluster-configuration [options]Edit cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit provider-cluster-configuration
Usage:d8 system edit provider-cluster-configuration [options]Edit provider-cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system edit static-cluster-configuration
Usage:d8 system edit static-cluster-configuration [options]Edit static-cluster-configuration.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system get
Usage:d8 system get [options]Get configuration files
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system get cluster-configuration
Usage:d8 system get cluster-configuration [options]Get cluster-configuration.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system get provider-cluster-configuration
Usage:d8 system get provider-cluster-configuration [options]Get provider-cluster-configuration.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system get static-cluster-configuration
Usage:d8 system get static-cluster-configuration [options]Get static-cluster-configuration.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system logs
Usage:d8 system logs [options]Inspect deckhouse-controller logs.
Options
--follow,-fSpecify if the logs should be streamed.--sinceShow logs newer than a relative duration like 5s, 2m, or 1h. Only one of since-time / since may be used.--since-timeShow logs after a specific timestamp, e.g. --since-time='2025-05-19 12:00:00'. Only one of since-time / since may be used.--tailLimit the number of lines in the output to the last N lines. Defaults to -1 with no limit.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module
Usage:d8 system module [options]Operate the Deckhouse Kubernetes Platform modules
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module apply-now
Usage:d8 system module apply-now <module-name> <version> [options]Apply a module release immediately, bypassing update windows.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module approve
Usage:d8 system module approve <module-name> <version> [options]Approve a pending module release for Manual update policy.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module disable
Usage:d8 system module disable [options]Disable module.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module enable
Usage:d8 system module enable [options]Enable module.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module list
Usage:d8 system module list [options]List enabled modules.
Options
--editor,-eYour favourite editor.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module snapshots
Usage:d8 system module snapshots [options]Dump shapshots.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system module values
Usage:d8 system module values [options]Dump values.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue
Usage:d8 system queue [options]Dump queues.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue list
Usage:d8 system queue list [options]Dump all queues.
Options
--output,-oOutput format: json|yaml|text.--show-empty,-eShow empty queues.--watch,-wWatch for changes to the queue list.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 system queue main
Usage:d8 system queue main [options]Dump main queue.
Options
--output,-oOutput format: json|yaml|text.
Global options
--contextThe name of the kubeconfig context to use--kubeconfig,-kKubeConfig of the cluster. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)
d8 tools
Alias: t
Various useful tools for operating in The Deckhouse Ecosystem.
d8 tools far-convert
Usage:d8 tools far-convert [options]Converts files with Falco rules to FalcoAuditRules CRD format
d8 tools gostsum
Usage:d8 tools gostsum [options]Calculate Streebog checksum of the data according to the RFC 6986 (GOST R 34.11-2012) specifications
Options
--hash-length,-lBit-length variant of the algorithm to use. Only 256 (default) and 512 bit lengths are supported.
d8 tools imagedigest
Usage:d8 tools imagedigest [options]Options
--debug,-dEnable debug logging--insecure,-iAllow insecure connections to registries (skip TLS verification)--jsonUse JSON formatter for output logs
d8 tools imagedigest add
Usage:d8 tools imagedigest add <image> [options]Calculating and adding the image digest to the image metadata according to the GOST standard Streebog (GOST R 34.11-2012)
Global options
--debug,-dEnable debug logging--insecure,-iAllow insecure connections to registries (skip TLS verification)--jsonUse JSON formatter for output logs
d8 tools imagedigest calculate
Usage:d8 tools imagedigest calculate <image> [options]Calculating the image digest according to the GOST standard Streebog (GOST R 34.11-2012)
Global options
--debug,-dEnable debug logging--insecure,-iAllow insecure connections to registries (skip TLS verification)--jsonUse JSON formatter for output logs
d8 tools imagedigest calculate-from-file
Usage:d8 tools imagedigest calculate-from-file <file> [options]Calculating the file digest according to the GOST standard Streebog (GOST R 34.11-2012). For stdin use '-'
Global options
--debug,-dEnable debug logging--insecure,-iAllow insecure connections to registries (skip TLS verification)--jsonUse JSON formatter for output logs
d8 tools imagedigest validate
Usage:d8 tools imagedigest validate <image> [options]Validating the image digest in the image metadata calculated according to the GOST standard Streebog (GOST R 34.11-2012)
Options
--fixFix GOST Image Digest if it is incorrect
Global options
--debug,-dEnable debug logging--insecure,-iAllow insecure connections to registries (skip TLS verification)--jsonUse JSON formatter for output logs
d8 tools sig-migrate
Usage:d8 tools sig-migrate [options]Migrate Kubernetes resources by adding and removing migration annotations
Options
--asSpecify a Kubernetes service account for the kubectl operations (impersonation).--contextThe name of the kubeconfig context to use.--kubeconfigPath to the kubeconfig file to use for CLI requests. (default is $KUBECONFIG when it is set, $HOME/.kube/config otherwise)--log-levelSet the log level (INFO, DEBUG, TRACE). Defaults to DEBUG.--retryRetry annotation for previously failed objects.
d8 v
Alias: virtualization
d8 v controls virtual machine related operations on your kubernetes cluster.
Options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v ansible-inventory
Usage:d8 v ansible-inventory [options]Generate ansible inventory from virtual machines (ansible inventory script compatible).
Options
--hostReturn variables for specific host--listReturn all hosts (default behavior if no arguments)--namespace,-nNamespace to list virtual machines from (overrides kubeconfig context namespace)--output,-oOutput format: json, ini, or yaml (default: json)
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v collect-debug-info
Usage:d8 v collect-debug-info (VirtualMachine) [options]Collect debug information for VM: configuration, events, and logs. Output is written as compressed archive to stdout.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v console
Usage:d8 v console (VirtualMachine) [options]Connect to a console of a virtual machine.
Options
--timeoutThe number of minutes to wait for the virtual machine to be ready.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v evict
Usage:d8 v evict (VirtualMachine) [options]Evict a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v port-forward
Usage:d8 v port-forward name[.namespace] [protocol/]localPort[:targetPort]... [options]Forward local ports to a virtual machine
Options
--address--address=: Set this to the address the local ports should be opened on--stdio--stdio=true: Set this to true to forward the tunnel to stdout/stdin; Only works with a single port
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v restart
Usage:d8 v restart (VirtualMachine) [options]Restart a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v scp
Usage:d8 v scp VirtualMachine) [options]SCP files from/to a virtual machine.
Options
--identity-file,-i--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts,-t--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port,-p--port=22: Specify a port on the VM to send SSH traffic to--preservePreserves modification times, access times, and modes from the original file.--recursive,-rRecursively copy entire directories--username,-l--username=root: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v ssh
Usage:d8 v ssh VirtualMachine [options]Open a SSH connection to a virtual machine.
Options
--command,-c--command='ls /': Specify a command to execute in the VM--identity-file,-i--identity-file=/home/user/.ssh/id_rsa: Set the path to a private key used for authenticating to the server; If not provided, the client will try to use the local ssh-agent at $SSH_AUTH_SOCK--known-hosts--d8virtualization_known_hosts=/home/user/.ssh/known-hosts: Set the path to the known_hosts file.--local-ssh--local-ssh=true: Set this to true to use the SSH/SCP client available on your system by using this command as ProxyCommand; If set to false, this will establish a SSH/SCP connection with limited capabilities provided by this client--local-ssh-opts,-t--local-ssh-opts="-o StrictHostKeyChecking=no" : Additional options to be passed to the local ssh. This is applied only if local-ssh=true--port,-p--port=22: Specify a port on the VM to send SSH traffic to--username,-l--username=root: Set this to the user you want to open the SSH connection as; If unassigned, this will be empty and the SSH default will apply
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v start
Usage:d8 v start (VirtualMachine) [options]Start a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v stop
Usage:d8 v stop (VirtualMachine) [options]Stop a virtual machine.
Options
--create-only,-c--create-only, -c: Set this flag for create operation only.--force,-f--force, -f: Set this flag to force the operation.--timeout,-t--timeout, -t: Set this flag to change the timeout.--wait,-w--wait, -w: Set this flag to wait for the operation to complete.
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)
d8 v vnc
Usage:d8 v vnc VirtualMachine [options]Open a vnc connection to a virtual machine.
Options
--address--address=127.0.0.1: Setting this will change the listening address of the VNC server. Example: --address=0.0.0.0 will make the server listen on all interfaces.--port--port=0: Assigning a port value to this will try to run the proxy on the given port if the port is accessible; If unassigned, the proxy will run on a random port--proxy-only--proxy-only=false: Setting this true will run only the vnc proxy and show the port where VNC viewers can connect
Global options
--asUsername to impersonate for the operation--as-groupGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uidUID to impersonate for the operation--certificate-authorityPath to a cert file for the certificate authority--client-certificatePath to a client certificate file for TLS--client-keyPath to a client key file for TLS--clusterThe name of the kubeconfig cluster to use--contextThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfigPath to the kubeconfig file to use for CLI requests.--log-flush-frequencyMaximum number of seconds between log flushes--namespace,-nIf present, the namespace scope for this CLI request--passwordPassword for basic authentication to the API server--proxy-urlIf provided, this URL will be used to connect via proxy--request-timeoutThe length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.--server,-sThe address and port of the Kubernetes API server--tls-server-nameIf provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.--tokenBearer token for authentication to the API server--userThe name of the kubeconfig user to use--usernameUsername for basic authentication to the API server--v,-vnumber for the log level verbosity--vmodulecomma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format)