KUBERNETES(1)(kubernetes)
π kubectl β the manual page, but make it make sense
okay bestie, welcome to kubectl(1) β that's section 1 of the kubernetes manual, the one you actually open when you're staring at a terminal at 2am and your pods are doing something unhinged. π
β¨ NAME β¨
kubectl β kubectl controls the Kubernetes cluster manager
β¨ SYNOPSIS β¨
kubectl [OPTIONS]
β¨ DESCRIPTION β¨
kubectl controls the Kubernetes cluster manager. that's the whole job description, and honestly? it ate. π
want the full lore? it lives here:
https://kubernetes.io/docs/reference/kubectl/
no cap, that link is the mothership. go read it when you want the deep dive, because this page is just the global flags that apply to basically everything. π¦
β¨ OPTIONS β¨
these are the flags that ride along with literally every kubectl command. memorize the ones you use, look up the ones you don't. πΈ
--as=""β username to impersonate for the operation. could be a regular user, could be a service account chillin' in a namespace. shapeshifter energy. π§--as-group=[]β group to impersonate for the operation. repeat this flag to stack up multiple groups, like friendship bracelets but for RBAC.--as-uid=""β UID to impersonate for the operation. yep, you can cosplay as a specific UID now.--as-user-extra=[]β user extras to impersonate for the operation. repeat the flag to give multiple values for the same key. very "and another thing" of you.--cache-dir="/home/username/.kube/cache"β default cache directory. this is where the vibes get cached. π--certificate-authority=""β path to a cert file for the certificate authority.--client-certificate=""β path to a client certificate file for TLS.--client-key=""β path to a client key file for TLS.--cluster=""β the name of the kubeconfig cluster to use.--context=""β the name of the kubeconfig context to use. switching contexts is literally the main character moment of every k8s story.--disable-compression=falseβ if true, opt-out of response compression for all requests to the server.--insecure-skip-tls-verify=falseβ if true, the server's certificate will not be checked for validity. this will make your HTTPS connections insecure. π¨
bestie. please. this one is a warning, not a personality trait. insecure HTTPS is not the slay you think it is.
--kubeconfig=""β path to the kubeconfig file to use for CLI requests.--kuberc=""β path to the kuberc file to use for preferences. this can be disabled by exportingKUBECTL_KUBERC=falsefeature gate or turning off the featureKUBERC=off.--match-server-version=falseβ require server version to match client version. strict queen behavior. π-n,--namespace=""β if present, the namespace scope for this CLI request.--password=""β password for basic authentication to the API server.--profile="none"β name of profile to capture. one of (none|cpu|heap|goroutine|threadcreate|block|mutex|trace).--profile-output="profile.pprof"β name of the file to write the profile to.--proxy-url=""β proxy URL to use for requests to the API server.--request-timeout="0"β the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g.1s,2m,3h). a value of zero means don't timeout requests. zero = the "we'll be here forever and that's fine" setting. π-s,--server=""β the address and port of the Kubernetes API server.--tls-server-name=""β server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used.--token=""β bearer token for authentication to the API server.--user=""β the name of the kubeconfig user to use.--username=""β username for basic authentication to the API server.--version=falseβ--version,--version=rawprints version information and quits;--version=vX.Y.Z...sets the reported version.--warnings-as-errors=falseβ treat warnings received from the server as errors and exit with a non-zero exit code. turning a warning into a whole crisis. iconic, honestly. π
β¨ SEE ALSO β¨
the whole extended universe, fr fr. go follow them all: π
kubectl-alpha(1)kubectl-annotate(1)kubectl-api-resources(1)kubectl-api-versions(1)kubectl-apply(1)kubectl-attach(1)kubectl-auth(1)kubectl-autoscale(1)kubectl-certificate(1)kubectl-cluster-info(1)kubectl-completion(1)kubectl-config(1)kubectl-cordon(1)kubectl-cp(1)kubectl-create(1)kubectl-debug(1)kubectl-delete(1)kubectl-describe(1)kubectl-diff(1)kubectl-drain(1)kubectl-edit(1)kubectl-events(1)kubectl-exec(1)kubectl-explain(1)kubectl-expose(1)kubectl-get(1)kubectl-kuberc(1)kubectl-kustomize(1)kubectl-label(1)kubectl-logs(1)kubectl-options(1)kubectl-patch(1)kubectl-plugin(1)kubectl-port-forward(1)kubectl-proxy(1)kubectl-replace(1)kubectl-rollout(1)kubectl-run(1)kubectl-scale(1)kubectl-set(1)kubectl-taint(1)kubectl-top(1)kubectl-uncordon(1)kubectl-version(1)kubectl-wait(1)
β¨ HISTORY β¨
January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! π«Ά
and that's the whole page, bestie. this is the Manuals / User version of the KUBERNETES(1)(kubernetes) page, dated Jan 2015 β so like, vintage, but make it cluster management. π slay responsibly. β¨
π¦ where this page comes from
- arch rolling: kubectl 1.37.2-1 Β· Apache-2.0
- fedora 43: kubernetes1.37-client 1.37.0-3.fc43
- fedora 43: kubernetes1.37-client 1.37.1-1.fc43 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- fedora 44: kubernetes1.37-client 1.37.0-3.fc44
- fedora 44: kubernetes1.37-client 1.37.1-1.fc44 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- nixpkgs unstable: kubectl 1.37.2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms