KUBERNETES(1)(kubernetes)
π KUBERNETES(1)(kubernetes) π
okay bestie, pull up a chair, we're reading the manual for kubectl β that's the Kubernetes command-line tool, manual section 1 (aka "user commands", the good stuff). This particular page? It's the one Eric Paris wrote back in January 2015 and it's all about one lil subcommand that will genuinely change your life: config view. no cap. let's get into it π«Ά
β¨ NAME β¨
kubectl config view β Display merged kubeconfig settings or a specified kubeconfig file π
πΈ SYNOPSIS πΈ
kubectl config view [OPTIONS]
that's it. that's the whole vibe. no required args, just you and your options β¨
π¦ DESCRIPTION π¦
So what does it actually do? It displays merged kubeconfig settings, or a specific kubeconfig file if you point it at one. Your kubeconfig is basically the group chat of your clusters, contexts, and users β and this command is you scrolling through the whole chat history.
And here's the little trick that makes everyone obsessed: you can use --output jsonpath={...} to extract specific values using a jsonpath expression. yes bestie, you can yoink exactly the one field you need and nothing else. main character energy fr fr π
π OPTIONS π
--allow-missing-template-keys=trueβ If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (translation: no crying over missing keys, we simply move on π)--flatten=falseβ Flatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files). perfect for when you wanna hand someone a kubeconfig that Just Works on their machine π--merge=trueβ Merge the full hierarchy of kubeconfig files. the whole family tree, all of it π--minify=falseβ Remove all information not used by current-context from the output. decluttering queen β¨-o,--output="yaml"β Output format. One of: (json,yaml,kyaml,name,go-template,go-template-file,template,templatefile,jsonpath,jsonpath-as-json,jsonpath-file). pick your fighter π₯--raw=falseβ Display raw byte data and sensitive data. β οΈ sensitive bestie. this one's showing secrets.--show-managed-fields=falseβ If true, keep themanagedFieldswhen printing objects in JSON or YAML format.--template=""β Template string or path to template file to use when-o=go-template,-o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
π OPTIONS INHERITED FROM PARENT COMMANDS π
these are the ones kubectl passed down to literally every child command. the family inheritance, if you will. π§¬
--as=""β Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group=[]β Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid=""β UID to impersonate for the operation.--as-user-extra=[]β User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.--cache-dir="/home/username/.kube/cache"β Default cache directory.--certificate-authority=""β Path to a cert file for the certificate authority.--client-certificate=""β Path to a client certificate file for TLS.--client-key=""β Path to a client key file for TLS.--cluster=""β The name of the kubeconfig cluster to use.--context=""β The name of the kubeconfig context to use.--disable-compression=falseβ If true, opt-out of response compression for all requests to the server.--insecure-skip-tls-verify=falseβ If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure. π¨ like, actually insecure. this is the "trust me bro" flag.--kubeconfig=""β use a particular kubeconfig file.--kuberc=""β Path to the kuberc file to use for preferences. This can be disabled by exportingKUBECTL_KUBERC=falsefeature gate or turning off the featureKUBERC=off.--match-server-version=falseβ Require server version to match client version.-n,--namespace=""β If present, the namespace scope for this CLI request.--password=""β Password for basic authentication to the API server.--profile="none"β Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex|trace).--profile-output="profile.pprof"β Name of the file to write the profile to.--proxy-url=""β Proxy URL to use for requests to the API server.--request-timeout="0"β The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g.1s,2m,3h). A value of zero means don't timeout requests.-s,--server=""β The address and port of the Kubernetes API server.--tls-server-name=""β Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used.--token=""β Bearer token for authentication to the API server.--user=""β The name of the kubeconfig user to use.--username=""β Username for basic authentication to the API server.--version=falseβ--version,--version=rawprints version information and quits;--version=vX.Y.Z...sets the reported version.--warnings-as-errors=falseβ Treat warnings received from the server as errors and exit with a non-zero exit code.
π EXAMPLE π
okay here's the part where it gets fun, these are straight from the source, copy them exactly bestie:
# Show merged kubeconfig settings
kubectl config view
# Show merged kubeconfig settings, raw certificate data, and exposed secrets
kubectl config view --raw
# Get the password for the e2e user
kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}'
see that third one? that's the jsonpath magic we were talking about. extracting one tiny password field out of the entire config. it's giving hacker but make it cute π
β οΈ real talk though: that --raw example literally says "exposed secrets". be careful where you paste that output. no posting it in the group chat, iykyk π
π SEE ALSO π
(that's the parent command, go read it too, it's the whole config family π«Ά)
π HISTORY π
January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! π (he said "hopefully" and honestly? relatable.)
and that's the whole page bestie!! this was the kubectl config view manual, section 1 of the kubernetes manuals, in the User category. go forth and view your configs responsibly π β¨ π
π¦ where this page comes from
- arch rolling: kubectl 1.37.2-1 Β· Apache-2.0
- fedora 43: kubernetes1.37-client 1.37.0-3.fc43
- fedora 43: kubernetes1.37-client 1.37.1-1.fc43 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- fedora 44: kubernetes1.37-client 1.37.0-3.fc44
- fedora 44: kubernetes1.37-client 1.37.1-1.fc44 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- nixpkgs unstable: kubectl 1.37.2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms