OC(1)

📦
version 4.22.0 · 2 versions
, in nixpkgs unstable

👑 OC(1) — the oc diff glow-up

okay bestie, pull up a chair because we're talking about oc diff from the OpenShift CLI user manual, and honestly? it's giving "let me show you the future before you commit to it" energy 💅

✨ NAME ✨

oc diff — diff the live version against a would-be applied version 🦋

🌸 SYNOPSIS 🌸

oc diff [OPTIONS]

💖 DESCRIPTION 💖

So here's the vibe: oc diff diffs the configurations you point it at — either by file name or from stdin — between the current online configuration and the configuration as it would be if applied ✨. Like a sneak peek. A preview. A little trailer before the movie drops 🎬

The output is always YAML. no cap. 🫶

You can also bring your own diff tool with the KUBECTL_EXTERNAL_DIFF environment variable. And yes, you can absolutely pass params to external commands too — for example:

KUBECTL_EXTERNAL_DIFF="colordiff -N -u"

By default, whatever diff command is chillin' in your path gets run with the -u (unified diff) and -N (treat absent files as empty) options ✨

Exit status tea ☕: 0 = no differences were found. 1 = differences were found. >1 = kubectl or diff failed with an error 😭
Note bestie: if you use KUBECTL_EXTERNAL_DIFF, it's expected to follow that convention. iykyk 💀

🎀 OPTIONS 🎀

  • --concurrency=1 — number of objects to process in parallel when diffing against the live version. bigger number = faster, but more memory, I/O and CPU crammed into that shorter window of time 🔥
  • --field-manager="kubectl-client-side-apply" — the name of the manager used to track field ownership 👑
  • -f, --filename=[] — filename, directory, or URL to files containing the configuration to diff 🍓
  • --force-conflicts=false — if true, server-side apply will force the changes against conflicts 💥
  • -k, --kustomize="" — process the kustomization directory. heads up: this flag can't be used together with -f or -R 🙈
  • --prune=false — include resources that would be deleted by pruning. can be used with -l, and by default shows all resources that would be pruned 🌈
  • --prune-allowlist=[] — overwrite the default allowlist with <group/version/kind> for --prune ⭐
  • -R, --recursive=false — process the directory used in -f, --filename recursively. so useful when you want to manage related manifests organized within the same directory 🧚
  • -l, --selector="" — selector (label query) to filter on, supports =, ==, !=, in, notin. (e.g. -l key1=value1,key2=value2,key3 in (value3)). matching objects must satisfy all of the specified label constraints ✨
  • --server-side=false — if true, apply runs in the server instead of the client 💜
  • --show-managed-fields=false — if true, include managed fields in the diff 👀

🌟 OPTIONS INHERITED FROM PARENT COMMANDS 🌟

these are the family heirlooms, passed down from the parent command, we love a legacy 💖

  • --as="" — username to impersonate for the operation. user could be a regular user or a service account in a namespace 🫶
  • --as-group=[] — group to impersonate for the operation; this flag can be repeated to specify multiple groups 👯
  • --as-uid="" — UID to impersonate for the operation ⭐
  • --as-user-extra=[] — user extras to impersonate for the operation; this flag can be repeated to specify multiple values for the same key 🎀
  • --cache-dir="/homeless-shelter/.kube/cache" — default cache directory 📁
  • --certificate-authority="" — path to a cert file for the certificate authority 🔐
  • --client-certificate="" — path to a client certificate file for TLS 🔐
  • --client-key="" — path to a client key file for TLS 🔑
  • --cluster="" — the name of the kubeconfig cluster to use ☁️
  • --context="" — the name of the kubeconfig context to use 🌸
  • --disable-compression=false — if true, opt-out of response compression for all requests to the server 📦
  • --insecure-skip-tls-verify=false — if true, the server's certificate will not be checked for validity. this will make your HTTPS connections insecure — yes, actually insecure, take that seriously bestie 😭
  • --kubeconfig="" — path to the kubeconfig file to use for CLI requests 🗂️
  • --kuberc="" — path to the kuberc file to use for preferences. this can be disabled by exporting the KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off 🧚
  • --match-server-version=false — require server version to match client version 🪞
  • -n, --namespace="" — if present, the namespace scope for this CLI request 🌈
  • --profile="none" — name of profile to capture. one of (none|cpu|heap|goroutine|threadcreate|block|mutex) 📊
  • --profile-output="profile.pprof" — name of the file to write the profile to 💾
  • --request-timeout="0" — the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). a value of zero means don't timeout requests ⏳
  • -s, --server="" — the address and port of the Kubernetes API server 🛰️
  • --tls-server-name="" — server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used 🏷️
  • --token="" — bearer token for authentication to the API server 🎟️
  • --user="" — the name of the kubeconfig user to use 👤
  • --warnings-as-errors=false — treat warnings received from the server as errors and exit with a non-zero exit code — dramatic but valid 💀

🌈 EXAMPLE 🌈

# Diff resources included in pod.json
oc diff -f pod.json

# Diff file read from stdin
cat service.yaml | oc diff -f -

👑 SEE ALSO 👑

💜 HISTORY 💜

June 2016, ported from the Kubernetes man-doc generator 🎀

and that's the whole page, bestie — iconic, honestly. this gem lives in the Openshift CLI User Manuals, brought to you by Openshift, dated June 2016 ✨ periodt 💅🦋

📦 where this page comes from