KUBERNETES(1)(kubernetes)
π KUBERNETES(1)(kubernetes) β the kubectl cp glow-up
okay bestie, sit down, hydrate, and let me tell you about kubectl cp from the kubernetes manual, originally scribed by Eric Paris back in Jan 2015. This is the page that copies your lil files in and out of containers and honestly? she's giving β¨essential toolβ¨ energy.
πΈ NAME πΈ
kubectl cp β Copy files and directories to and from containers
like. that's it. that's the whole job. she moves your files. no cap. π¦
π SYNOPSIS π
kubectl cp [OPTIONS]
π DESCRIPTION π
Copy files and directories to and from containers.
fr fr that's the description. she does one thing and she does it well. main character energy, minimal dialogue. π
β¨ OPTIONS β¨
-c,--container=""β the container name, bestie. If you omit it, kubectl uses thekubectl.kubernetes.io/default-containerannotation to pick which container to attach to β and if that's not there either, it just grabs the first container in the pod. so like, it'll figure it out, but maybe tell her what you want? π₯°--no-preserve=falseβ when this is on, the copied file/directory's ownership and permissions will not be preserved in the container. so your perms get left at home. noted. π--retries=0β set the number of retries to complete a copy operation from a container. Specify0to disable, or any negative value for infinite retrying. The default is0(no retry). so if your network is being a little dramatic, this is your girl. π₯
π OPTIONS INHERITED FROM PARENT COMMANDS π
these are the family traits she got from her parent command, and yes, we're listing every single one because we don't skip. periodt. π
--as=""β Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group=[]β Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid=""β UID to impersonate for the operation.--as-user-extra=[]β User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.--cache-dir="/home/username/.kube/cache"β Default cache directory--certificate-authority=""β Path to a cert file for the certificate authority--client-certificate=""β Path to a client certificate file for TLS--client-key=""β Path to a client key file for TLS--cluster=""β The name of the kubeconfig cluster to use--context=""β The name of the kubeconfig context to use--disable-compression=falseβ If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify=falseβ If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
π¨ bestie. this one literally has "insecure" in the name. it does exactly what it says. do not be surprised pikachu about it. π
--kubeconfig=""β Path to the kubeconfig file to use for CLI requests.--kuberc=""β Path to the kuberc file to use for preferences. This can be disabled by exportingKUBECTL_KUBERC=falsefeature gate or turning off the featureKUBERC=off.--match-server-version=falseβ Require server version to match client version-n,--namespace=""β If present, the namespace scope for this CLI request--password=""β Password for basic authentication to the API server--profile="none"β Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex|trace)--profile-output="profile.pprof"β Name of the file to write the profile to--proxy-url=""β Proxy URL to use for requests to the API server--request-timeout="0"β The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g.1s,2m,3h). A value of zero means don't timeout requests.-s,--server=""β The address and port of the Kubernetes API server--tls-server-name=""β Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token=""β Bearer token for authentication to the API server--user=""β The name of the kubeconfig user to use--username=""β Username for basic authentication to the API server--version=falseβ--version,--version=rawprints version information and quits;--version=vX.Y.Z...sets the reported version--warnings-as-errors=falseβ Treat warnings received from the server as errors and exit with a non-zero exit code
π§ EXAMPLE π§
okay here's the whole vibe, verbatim, because these commands are sacred text and we do not paraphrase:
# !!!Important Note!!!
# Requires that the 'tar' binary is present in your container
# image. If 'tar' is not present, 'kubectl cp' will fail.
#
# For advanced use cases, such as symlinks, wildcard expansion or
# file mode preservation, consider using 'kubectl exec'.
# Copy /tmp/foo local file to /tmp/bar in a remote pod in namespace <some-namespace>
tar cf - /tmp/foo | kubectl exec -i -n <some-namespace> <some-pod> -- tar xf - -C /tmp/bar
# Copy /tmp/foo from a remote pod to /tmp/bar locally
kubectl exec -n <some-namespace> <some-pod> -- tar cf - /tmp/foo | tar xf - -C /tmp/bar
# Copy /tmp/foo_dir local directory to /tmp/bar_dir in a remote pod in the default namespace
kubectl cp /tmp/foo_dir <some-pod>:/tmp/bar_dir
# Copy /tmp/foo local file to /tmp/bar in a remote pod in a specific container
kubectl cp /tmp/foo <some-pod>:/tmp/bar -c <specific-container>
# Copy /tmp/foo local file to /tmp/bar in a remote pod in namespace <some-namespace>
kubectl cp /tmp/foo <some-namespace>/<some-pod>:/tmp/bar
# Copy /tmp/foo from a remote pod to /tmp/bar locally
kubectl cp <some-namespace>/<some-pod>:/tmp/foo /tmp/bar
β οΈ real talk though: that first note is doing SO much work. You need thetarbinary in your container image. Iftarisn't there,kubectl cpwill fail. and for the fancy stuff β symlinks, wildcard expansion, file mode preservation β the page says consider usingkubectl execinstead. iykyk. π«Ά
π¦ SEE ALSO π¦
π HISTORY π
January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! π
and that's the whole page bestie, you ate that. π
Manuals Β· User Β· KUBERNETES(1)(kubernetes) β this one's from the kubernetes manual set, and the page is dated Jan 2015 up top with January 2015 in the HISTORY. go forth and copy files, icon. β¨ππ
π¦ where this page comes from
- arch rolling: kubectl 1.37.2-1 Β· Apache-2.0
- fedora 43: kubernetes1.37-client 1.37.0-3.fc43
- fedora 43: kubernetes1.37-client 1.37.1-1.fc43 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- fedora 44: kubernetes1.37-client 1.37.0-3.fc44
- fedora 44: kubernetes1.37-client 1.37.1-1.fc44 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- nixpkgs unstable: kubectl 1.37.2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms