OC(1)

okay bestie, welcome to OC(1) — the OpenShift CLI user manual page for oc tag — and yes, this is the whole vibe: tagging images into image streams. no cap, we’re keeping every single flag. 🎀✨

🌸 NAME 🌸

oc tag — tag existing images into image streams. that’s the assignment, and she ate 💅

✨ SYNOPSIS ✨

oc tag [OPTIONS]

🦋 DESCRIPTION 🦋

Tag existing images into image streams. simple as that, bestie 💖

The tag command lets you take an existing tag or image from an image stream, or a container image pull spec, and set it as the most recent image for a tag in 1 or more other image streams. It’s similar to the 'docker tag' command, but it operates on image streams instead. iconic behavior, honestly 👑

Pass the --insecure flag if your external registry does not have a valid HTTPS certificate, or is only served over HTTP. Pass --scheduled to have the server regularly check the tag for updates and import the latest version (which can then trigger builds and deployments). Note that --scheduled is only allowed for container images. ⚠️

💖 OPTIONS 💖

• --alias=false — should the destination tag be updated whenever the source tag changes? applies only to a single image stream. defaults to false. 💫
• -d, --delete=false — delete the provided spec tags. bye-bye spec tags 🫶
• --import-mode="" — imports the full manifest list of a tag when set to 'PreserveOriginal'. defaults to 'Legacy'. ✨
• --insecure=false — set to true if importing the specified container image requires HTTP or has a self-signed certificate. defaults to false. 🔥
• --reference=false — should the destination tag continue to pull from the source namespace? defaults to false. 💅
• --reference-policy="source" — allow to request pullthrough for external image when set to 'local'. defaults to 'source'. 🦋
• --scheduled=false — set a container image to be periodically imported from a remote repository. defaults to false. ⏰
• --source="" — optional hint for the source type; valid values are 'imagestreamtag', 'istag', 'imagestreamimage', 'isimage', and 'docker'. iykyk 🎀

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

these come from the parent commands, bestie — inherited, not invented. every single one is here 🫶

• --as="" — username to impersonate for the operation. user could be a regular user or a service account in a namespace. 🧚
• --as-group=[] — group to impersonate for the operation; this flag can be repeated to specify multiple groups. 👯
• --as-uid="" — UID to impersonate for the operation. 🪪
• --as-user-extra=[] — user extras to impersonate for the operation; this flag can be repeated to specify multiple values for the same key. 🗝️
• --cache-dir="/homeless-shelter/.kube/cache" — default cache directory. periodt.
• --certificate-authority="" — path to a cert file for the certificate authority. 📜
• --client-certificate="" — path to a client certificate file for TLS. 🔐
• --client-key="" — path to a client key file for TLS. 🔑
• --cluster="" — the name of the kubeconfig cluster to use. ☁️
• --context="" — the name of the kubeconfig context to use. 🌀
• --disable-compression=false — if true, opt-out of response compression for all requests to the server. 🚫📦
• --insecure-skip-tls-verify=false — if true, the server’s certificate will not be checked for validity. this will make your HTTPS connections insecure 😭
• --kubeconfig="" — path to the kubeconfig file to use for CLI requests. 🗂️
• --kuberc="" — path to the kuberc file to use for preferences. this can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off. ⚙️
• --match-server-version=false — require server version to match client version. 🧩
• -n, --namespace="" — if present, the namespace scope for this CLI request. 🌙
• --profile="none" — name of profile to capture. one of (none|cpu|heap|goroutine|threadcreate|block|mutex). 🔍
• --profile-output="profile.pprof" — name of the file to write the profile to. 📝
• --request-timeout="0" — the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). a value of zero means don't timeout requests. ⏳
• -s, --server="" — the address and port of the Kubernetes API server. 🛰️
• --tls-server-name="" — server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used. 🛡️
• --token="" — bearer token for authentication to the API server. 🎟️
• --user="" — the name of the kubeconfig user to use. 🙋
• --warnings-as-errors=false — treat warnings received from the server as errors and exit with a non-zero exit code. 💀

🌈 EXAMPLE 🌈

                # Tag the current image for the image stream 'openshift/ruby' and tag '2.0' into the image stream 'yourproject/ruby with tag 'tip'
                oc tag openshift/ruby:2.0 yourproject/ruby:tip

                # Tag a specific image
                oc tag openshift/ruby@sha256:6b646fa6bf5e5e4c7fa41056c27910e679c03ebe7f93e361e6515a9da7e258cc yourproject/ruby:tip

                # Tag an external container image
                oc tag --source=docker openshift/origin-control-plane:latest yourproject/ruby:tip

                # Tag an external container image and request pullthrough for it
                oc tag --source=docker openshift/origin-control-plane:latest yourproject/ruby:tip --reference-policy=local

                # Tag an external container image and include the full manifest list
                oc tag --source=docker openshift/origin-control-plane:latest yourproject/ruby:tip --import-mode=PreserveOriginal

                # Remove the specified spec tag from an image stream
                oc tag openshift/origin-control-plane:latest -d

🫶 SEE ALSO 🫶

oc(1), — go peek at the rest of the CLI family, iykyk 👑

💜 HISTORY 💜

June 2016, Ported from the Kubernetes man-doc generator. throwback moment, but make it iconic ✨

---

and that’s the page, bestie 🫶 — source/version vibes: Openshift / Openshift CLI User Manuals, dated June 2016. mwah 💋