$devvkit resources --cheatsheet kubernetes-cheatsheet

Kubernetes Cheatsheet

[containers]

Every kubectl command for managing Kubernetes clusters: from contexts to deployments, services, configs, and debugging, with syntax and real use cases.105 commands · 7 sections

Kubernetes orchestrates containerized workloads across a cluster. This cheatsheet covers the commands you run daily: cluster and context management, pods and deployments, scaling and rollouts, services and networking, ConfigMaps and Secrets, storage, and debugging workloads.

Every command shows its real syntax followed by the use case: when and why you reach for it.

Cluster Info & Context17

$kubectl version --short

Use case: Show client and server versions: verify kubectl matches the cluster.Example: kubectl version --short

$kubectl cluster-info

Use case: Show cluster endpoints and services: is my cluster reachable?Example: kubectl cluster-info

$kubectl config get-contexts

Use case: List all contexts: every cluster you have configured.Example: kubectl config get-contexts

$kubectl config current-context

Use case: Print the active context: which cluster am I about to touch?Example: kubectl config current-context

$kubectl config use-context <name>

Use case: Switch to another cluster context.Example: kubectl config use-context prod-cluster

$kubectl config set-context --current --namespace=dev

Use case: Set the default namespace for the current context: stop typing -n everywhere.Example: kubectl config set-context --current --namespace=dev

$kubectl get nodes

Use case: List cluster nodes and their status.Example: kubectl get nodes

$kubectl get nodes -o wide

Use case: Show node IPs, roles, and Kubernetes version: for networking and upgrades.Example: kubectl get nodes -o wide

$kubectl describe node <name>

Use case: Show node details: resources, taints, conditions, running pods.Example: kubectl describe node node-1

$kubectl top node

Use case: Show live CPU/memory usage per node: spot the overloaded one.Example: kubectl top node

$kubectl api-resources

Use case: List all resource types the cluster supports: discover CRDs.Example: kubectl api-resources

$kubectl explain deployment

Use case: Show the schema of a resource type: self-documenting kubectl.Example: kubectl explain deployment

$kubectl get ns

Use case: List all namespaces.Example: kubectl get ns

$kubectl create ns <name>

Use case: Create a namespace: isolate environments or teams.Example: kubectl create ns staging

$kubectl delete ns <name>

Use case: Delete a namespace and EVERYTHING in it: containers, services, configs.Example: kubectl delete ns staging

$kubectl auth can-i create deployments

Use case: Check whether your current user can perform an action: RBAC debugging.Example: kubectl auth can-i create deployments

$kubectl whoami

Use case: Print the current user identity (plugin): know who you are in the cluster.Example: kubectl whoami

Pod Management16

$kubectl get pods

Use case: List pods in the current namespace.Example: kubectl get pods

$kubectl get pods -n <ns>

Use case: List pods in a specific namespace.Example: kubectl get pods -n kube-system

$kubectl get pods -A

Use case: List pods in ALL namespaces: find where things run.Example: kubectl get pods -A

$kubectl get pods -o wide

Use case: Show pod node, IP, and ready state: map pods to nodes.Example: kubectl get pods -o wide

$kubectl get pods -l app=web

Use case: Filter pods by label selector.Example: kubectl get pods -l app=web

$kubectl run nginx --image=nginx

Use case: Create a standalone pod from an image: quick smoke tests.Example: kubectl run test --image=busybox -- sleep 3600

$kubectl run test --image=busybox --rm -it -- sh

Use case: Run an interactive ephemeral pod and delete it on exit: perfect for probing.Example: kubectl run test --image=busybox --rm -it -- sh

$kubectl delete pod <name>

Use case: Delete a pod: the Deployment will recreate it.Example: kubectl delete pod web-7d8f9

$kubectl delete pod --force --grace-period=0 <name>

Use case: Force-delete a stuck pod stuck in Terminating.Example: kubectl delete pod web-7d8f9 --force --grace-period=0

$kubectl get pod <name> -o yaml

Use case: Dump a pod's full YAML: inspect labels, tolerations, and status.Example: kubectl get pod web-7d8f9 -o yaml

$kubectl get pod <name> -o jsonpath="{.status.podIP}"

Use case: Extract a single field: script-friendly queries.Example: kubectl get pod web-7d8f9 -o jsonpath="{.status.podIP}"

$kubectl label pod <name> env=prod

Use case: Add or update a label: attach metadata without recreating.Example: kubectl label pod web-7d8f9 env=prod

$kubectl annotate pod <name> description="main web pod"

Use case: Add a non-selectable annotation: human notes and tooling metadata.Example: kubectl annotate pod web-7d8f9 owner=platform

$kubectl get pods --sort-by=.metadata.creationTimestamp

Use case: Sort pods by creation time: newest first for review.Example: kubectl get pods --sort-by=.metadata.creationTimestamp

$kubectl get pod --watch

Use case: Watch pod changes live: see restart loops in real time.Example: kubectl get pod --watch

$kubectl get pods --field-selector=status.phase=Running

Use case: Filter pods by field: e.g. only running ones.Example: kubectl get pods --field-selector=status.phase=Running

Deployments & Scaling22

$kubectl create deployment web --image=nginx

Use case: Create a Deployment with one replica: the standard way to run stateless apps.Example: kubectl create deployment web --image=nginx

$kubectl get deployments

Use case: List deployments and their replica status.Example: kubectl get deployments

$kubectl scale deployment web --replicas=5

Use case: Scale a deployment up or down.Example: kubectl scale deployment web --replicas=5

$kubectl scale deployment web --replicas=0

Use case: Scale to zero: stop a service without deleting its definition.Example: kubectl scale deployment web --replicas=0

$kubectl set image deployment/web nginx=nginx:1.27

Use case: Update a container image: triggers a rolling update.Example: kubectl set image deployment/web nginx=nginx:1.27

$kubectl edit deployment web

Use case: Open the deployment spec in your editor and apply changes live.Example: kubectl edit deployment web

$kubectl rollout status deployment/web

Use case: Wait until a rollout completes: script it in CI.Example: kubectl rollout status deployment/web

$kubectl rollout history deployment/web

Use case: Show rollout revisions: see every change you made.Example: kubectl rollout history deployment/web

$kubectl rollout undo deployment/web

Use case: Roll back to the previous revision: instant recovery.Example: kubectl rollout undo deployment/web

$kubectl rollout undo deployment/web --to-revision=2

Use case: Roll back to a specific revision.Example: kubectl rollout undo deployment/web --to-revision=2

$kubectl rollout restart deployment/web

Use case: Restart all pods without changing the image: pick up new ConfigMaps/Secrets.Example: kubectl rollout restart deployment/web

$kubectl rollout pause deployment/web

Use case: Pause a rollout: freeze replicas during multi-step changes.Example: kubectl rollout pause deployment/web

$kubectl rollout resume deployment/web

Use case: Resume a paused rollout.Example: kubectl rollout resume deployment/web

$kubectl autoscale deployment web --min=2 --max=10 --cpu-percent=70

Use case: Enable HPA: autoscale by CPU utilization.Example: kubectl autoscale deployment web --min=2 --max=10 --cpu-percent=70

$kubectl get hpa

Use case: List horizontal pod autoscalers and their targets.Example: kubectl get hpa

$kubectl get rs

Use case: List ReplicaSets: each rollout creates one, useful for rollback history.Example: kubectl get rs

$kubectl get statefulsets

Use case: List StatefulSets: for databases and stateful workloads with stable identities.Example: kubectl get statefulsets

$kubectl get daemonsets -A

Use case: List DaemonSets: pods that must run on every node (log agents, metrics).Example: kubectl get daemonsets -A

$kubectl get jobs

Use case: List Jobs: one-off batch workloads.Example: kubectl get jobs

$kubectl create job backup --image=myapp --from=cronjob/daily-backup

Use case: Manually trigger a CronJob now: run it on demand.Example: kubectl create job manual-backup --image=myapp --from=cronjob/daily-backup

$kubectl get cronjobs

Use case: List scheduled CronJobs.Example: kubectl get cronjobs

$kubectl get deployment web -o yaml > deployment.yaml

Use case: Export a live deployment's spec to a file: backup or migrate it.Example: kubectl get deployment web -o yaml > deployment.yaml

Services & Networking12

$kubectl get services

Use case: List services and their cluster IPs.Example: kubectl get services

$kubectl get svc -o wide

Use case: Show service type, cluster IP, and selector: verify routing.Example: kubectl get svc -o wide

$kubectl expose deployment web --port=80 --target-port=8080 --type=ClusterIP

Use case: Create a Service from a deployment: internal load balancing.Example: kubectl expose deployment web --port=80 --target-port=8080

$kubectl expose deployment web --type=LoadBalancer --port=80

Use case: Expose a deployment externally: cloud LB provisions a public IP.Example: kubectl expose deployment web --type=LoadBalancer --port=80

$kubectl expose deployment web --type=NodePort --port=80

Use case: Expose on a node port: for clusters without a load balancer.Example: kubectl expose deployment web --type=NodePort --port=80

$kubectl get endpoints

Use case: Show service endpoints: which pod IPs are currently behind each service.Example: kubectl get endpoints

$kubectl port-forward svc/web 8080:80

Use case: Forward a local port to a service: access internal services from your laptop.Example: kubectl port-forward svc/web 8080:80

$kubectl port-forward pod/web-7d8f9 3000:3000

Use case: Forward to a specific pod: debug a single instance.Example: kubectl port-forward pod/web-7d8f9 3000:3000

$kubectl get ingress

Use case: List ingress rules: external HTTP routing.Example: kubectl get ingress

$kubectl get networkpolicy

Use case: List network policies: which pods can talk to which.Example: kubectl get networkpolicy

$kubectl get endpointslices -l kubernetes.io/service-name=web

Use case: Inspect endpoint slices for a service: newer API for endpoint discovery.Example: kubectl get endpointslices -l kubernetes.io/service-name=web

$kubectl get svc --field-selector type=LoadBalancer

Use case: Find all load-balanced services: audit public exposure.Example: kubectl get svc --field-selector type=LoadBalancer

ConfigMaps & Secrets13

$kubectl create configmap app-config --from-literal=DEBUG=true

Use case: Create a ConfigMap from a literal key-value.Example: kubectl create configmap app-config --from-literal=DEBUG=true

$kubectl create configmap app-config --from-file=config.json

Use case: Create a ConfigMap from a file's contents.Example: kubectl create configmap app-config --from-file=config.json

$kubectl create configmap app-config --from-env-file=.env

Use case: Import a whole .env file as a ConfigMap.Example: kubectl create configmap app-config --from-env-file=.env

$kubectl get configmaps

Use case: List ConfigMaps.Example: kubectl get configmaps

$kubectl get cm app-config -o yaml

Use case: View a ConfigMap's data.Example: kubectl get cm app-config -o yaml

$kubectl create secret generic db-secret --from-literal=password=supersecret

Use case: Create a Secret: base64-encoded by default.Example: kubectl create secret generic db-secret --from-literal=password=supersecret

$kubectl create secret generic db-secret --from-file=./credentials.json

Use case: Create a Secret from a file: better than pasting literals in shell history.Example: kubectl create secret generic db-secret --from-file=./credentials.json

$kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem

Use case: Create a TLS Secret for HTTPS ingresses.Example: kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem

$kubectl create secret docker-registry regcred --docker-username=user --docker-password=pass

Use case: Create an image pull secret for private registries.Example: kubectl create secret docker-registry regcred --docker-username=user --docker-password=pass --docker-email=u@x.com

$kubectl get secrets

Use case: List secrets.Example: kubectl get secrets

$kubectl get secret db-secret -o jsonpath="{.data.password}" | base64 -d

Use case: Decode a secret value: view what is actually stored.Example: kubectl get secret db-secret -o jsonpath="{.data.password}" | base64 -d

$kubectl delete secret db-secret

Use case: Delete a secret.Example: kubectl delete secret db-secret

$kubectl create secret generic sops-age --from-file=age.agekey -n flux-system

Use case: Store a tool-specific secret (SOPS key) in a namespace: GitOps workflows.Example: kubectl create secret generic sops-age --from-file=age.agekey -n flux-system

Storage & Volumes7

$kubectl get pv

Use case: List persistent volumes (cluster-level storage).Example: kubectl get pv

$kubectl get pvc

Use case: List persistent volume claims (namespace-level requests).Example: kubectl get pvc

$kubectl get storageclass

Use case: List storage classes: the dynamic provisioning options available.Example: kubectl get storageclass

$kubectl describe pvc data-pvc

Use case: Inspect a PVC: status, capacity, and the PV it bound to.Example: kubectl describe pvc data-pvc

$kubectl delete pvc data-pvc

Use case: Delete a PVC: depending on reclaim policy, this may destroy the data.Example: kubectl delete pvc data-pvc

$kubectl patch pvc data-pvc -p '{"spec":{"resources":{"requests":{"storage":"20Gi"}}}}'

Use case: Expand a PVC's size (if the storage class allows volume expansion).Example: kubectl patch pvc data-pvc -p '{"spec":{"resources":{"requests":{"storage":"20Gi"}}}}'

$kubectl get pvc -o jsonpath="{.items[*].status.capacity.storage}"

Use case: List all PVC capacities: audit your storage usage.Example: kubectl get pvc -o jsonpath="{.items[*].status.capacity.storage}"

Debugging & Logs18

$kubectl logs <pod>

Use case: Show a pod's logs.Example: kubectl logs web-7d8f9

$kubectl logs -f <pod>

Use case: Follow a pod's logs live.Example: kubectl logs -f web-7d8f9

$kubectl logs --tail=100 <pod>

Use case: Show the last 100 log lines.Example: kubectl logs --tail=100 web-7d8f9

$kubectl logs deployment/web

Use case: Stream logs from all pods of a deployment.Example: kubectl logs deployment/web

$kubectl logs <pod> -c <container>

Use case: Logs of a specific container in a multi-container pod.Example: kubectl logs web-7d8f9 -c sidecar

$kubectl logs -l app=web --tail=50

Use case: Logs from all pods matching a label: follow a service's logs.Example: kubectl logs -l app=web --tail=50

$kubectl logs --since=10m <pod>

Use case: Logs from the last 10 minutes: post-incident review.Example: kubectl logs --since=10m web-7d8f9

$kubectl logs -p <pod>

Use case: Show logs of the previous (crashed) container instance: why did it die?Example: kubectl logs -p web-7d8f9

$kubectl exec -it <pod> -- /bin/sh

Use case: Open a shell inside a running container: the classic debugging move.Example: kubectl exec -it web-7d8f9 -- /bin/sh

$kubectl exec <pod> -- <cmd>

Use case: Run a single command in a container.Example: kubectl exec web-7d8f9 -- env

$kubectl describe pod <name>

Use case: Show pod events, conditions, and container status: the first place to look at failures.Example: kubectl describe pod web-7d8f9

$kubectl get events --sort-by=.lastTimestamp

Use case: Show cluster events sorted by time: what happened recently.Example: kubectl get events --sort-by=.lastTimestamp

$kubectl get events --field-selector involvedObject.name=web-7d8f9

Use case: Events for one object: trace a pod's lifecycle.Example: kubectl get events --field-selector involvedObject.name=web-7d8f9

$kubectl cp <pod>:/app/report.log ./report.log

Use case: Copy a file out of a container: grab logs or artifacts.Example: kubectl cp web-7d8f9:/app/report.log ./report.log

$kubectl top pod

Use case: Show CPU/memory usage per pod: find the memory hog.Example: kubectl top pod

$kubectl debug node/node-1 -it --image=ubuntu

Use case: Run a debug container on a node: inspect node-level issues.Example: kubectl debug node/node-1 -it --image=ubuntu

$kubectl debug pod/web-7d8f9 -it --image=nicolaka/netshoot

Use case: Run an ephemeral debug container with networking tools next to a pod.Example: kubectl debug pod/web-7d8f9 -it --image=nicolaka/netshoot

kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase,RESTARTS:.status.containerStatuses[0].restartCount

Use case: Custom table output: restart counts in one glance.Example: kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase,RESTARTS:.status.containerStatuses[0].restartCount

Kubernetes Cheatsheet

Every kubectl command for managing Kubernetes clusters: from contexts to deployments, services, configs, and debugging, with syntax and real use cases.

Every command shows its real syntax followed by the use case: when and why you reach for it.

Cluster Info & Context

kubectl version --short: Show client and server versions: verify kubectl matches the cluster.

Example: kubectl version --short

kubectl cluster-info: Show cluster endpoints and services: is my cluster reachable?

Example: kubectl cluster-info

kubectl config get-contexts: List all contexts: every cluster you have configured.

Example: kubectl config get-contexts

kubectl config current-context: Print the active context: which cluster am I about to touch?

Example: kubectl config current-context

kubectl config use-context <name>: Switch to another cluster context.

Example: kubectl config use-context prod-cluster

kubectl config set-context --current --namespace=dev: Set the default namespace for the current context: stop typing -n everywhere.

Example: kubectl config set-context --current --namespace=dev

kubectl get nodes: List cluster nodes and their status.

Example: kubectl get nodes

kubectl get nodes -o wide: Show node IPs, roles, and Kubernetes version: for networking and upgrades.

Example: kubectl get nodes -o wide

kubectl describe node <name>: Show node details: resources, taints, conditions, running pods.

Example: kubectl describe node node-1

kubectl top node: Show live CPU/memory usage per node: spot the overloaded one.

Example: kubectl top node

kubectl api-resources: List all resource types the cluster supports: discover CRDs.

Example: kubectl api-resources

kubectl explain deployment: Show the schema of a resource type: self-documenting kubectl.

Example: kubectl explain deployment

kubectl get ns: List all namespaces.

Example: kubectl get ns

kubectl create ns <name>: Create a namespace: isolate environments or teams.

Example: kubectl create ns staging

kubectl delete ns <name>: Delete a namespace and EVERYTHING in it: containers, services, configs.

Example: kubectl delete ns staging

kubectl auth can-i create deployments: Check whether your current user can perform an action: RBAC debugging.

Example: kubectl auth can-i create deployments

kubectl whoami: Print the current user identity (plugin): know who you are in the cluster.

Example: kubectl whoami

Pod Management

kubectl get pods: List pods in the current namespace.

Example: kubectl get pods

kubectl get pods -n <ns>: List pods in a specific namespace.

Example: kubectl get pods -n kube-system

kubectl get pods -A: List pods in ALL namespaces: find where things run.

Example: kubectl get pods -A

kubectl get pods -o wide: Show pod node, IP, and ready state: map pods to nodes.

Example: kubectl get pods -o wide

kubectl get pods -l app=web: Filter pods by label selector.

Example: kubectl get pods -l app=web

kubectl run nginx --image=nginx: Create a standalone pod from an image: quick smoke tests.

Example: kubectl run test --image=busybox -- sleep 3600

kubectl run test --image=busybox --rm -it -- sh: Run an interactive ephemeral pod and delete it on exit: perfect for probing.

Example: kubectl run test --image=busybox --rm -it -- sh

kubectl delete pod <name>: Delete a pod: the Deployment will recreate it.

Example: kubectl delete pod web-7d8f9

kubectl delete pod --force --grace-period=0 <name>: Force-delete a stuck pod stuck in Terminating.

Example: kubectl delete pod web-7d8f9 --force --grace-period=0

kubectl get pod <name> -o yaml: Dump a pod's full YAML: inspect labels, tolerations, and status.

Example: kubectl get pod web-7d8f9 -o yaml

kubectl get pod <name> -o jsonpath="{.status.podIP}": Extract a single field: script-friendly queries.

Example: kubectl get pod web-7d8f9 -o jsonpath="{.status.podIP}"

kubectl label pod <name> env=prod: Add or update a label: attach metadata without recreating.

Example: kubectl label pod web-7d8f9 env=prod

kubectl annotate pod <name> description="main web pod": Add a non-selectable annotation: human notes and tooling metadata.

Example: kubectl annotate pod web-7d8f9 owner=platform

kubectl get pods --sort-by=.metadata.creationTimestamp: Sort pods by creation time: newest first for review.

Example: kubectl get pods --sort-by=.metadata.creationTimestamp

kubectl get pod --watch: Watch pod changes live: see restart loops in real time.

Example: kubectl get pod --watch

kubectl get pods --field-selector=status.phase=Running: Filter pods by field: e.g. only running ones.

Example: kubectl get pods --field-selector=status.phase=Running

Deployments & Scaling

kubectl create deployment web --image=nginx: Create a Deployment with one replica: the standard way to run stateless apps.

Example: kubectl create deployment web --image=nginx

kubectl get deployments: List deployments and their replica status.

Example: kubectl get deployments

kubectl scale deployment web --replicas=5: Scale a deployment up or down.

Example: kubectl scale deployment web --replicas=5

kubectl scale deployment web --replicas=0: Scale to zero: stop a service without deleting its definition.

Example: kubectl scale deployment web --replicas=0

kubectl set image deployment/web nginx=nginx:1.27: Update a container image: triggers a rolling update.

Example: kubectl set image deployment/web nginx=nginx:1.27

kubectl edit deployment web: Open the deployment spec in your editor and apply changes live.

Example: kubectl edit deployment web

kubectl rollout status deployment/web: Wait until a rollout completes: script it in CI.

Example: kubectl rollout status deployment/web

kubectl rollout history deployment/web: Show rollout revisions: see every change you made.

Example: kubectl rollout history deployment/web

kubectl rollout undo deployment/web: Roll back to the previous revision: instant recovery.

Example: kubectl rollout undo deployment/web

kubectl rollout undo deployment/web --to-revision=2: Roll back to a specific revision.

Example: kubectl rollout undo deployment/web --to-revision=2

kubectl rollout restart deployment/web: Restart all pods without changing the image: pick up new ConfigMaps/Secrets.

Example: kubectl rollout restart deployment/web

kubectl rollout pause deployment/web: Pause a rollout: freeze replicas during multi-step changes.

Example: kubectl rollout pause deployment/web

kubectl rollout resume deployment/web: Resume a paused rollout.

Example: kubectl rollout resume deployment/web

kubectl autoscale deployment web --min=2 --max=10 --cpu-percent=70: Enable HPA: autoscale by CPU utilization.

Example: kubectl autoscale deployment web --min=2 --max=10 --cpu-percent=70

kubectl get hpa: List horizontal pod autoscalers and their targets.

Example: kubectl get hpa

kubectl get rs: List ReplicaSets: each rollout creates one, useful for rollback history.

Example: kubectl get rs

kubectl get statefulsets: List StatefulSets: for databases and stateful workloads with stable identities.

Example: kubectl get statefulsets

kubectl get daemonsets -A: List DaemonSets: pods that must run on every node (log agents, metrics).

Example: kubectl get daemonsets -A

kubectl get jobs: List Jobs: one-off batch workloads.

Example: kubectl get jobs

kubectl create job backup --image=myapp --from=cronjob/daily-backup: Manually trigger a CronJob now: run it on demand.

Example: kubectl create job manual-backup --image=myapp --from=cronjob/daily-backup

kubectl get cronjobs: List scheduled CronJobs.

Example: kubectl get cronjobs

kubectl get deployment web -o yaml > deployment.yaml: Export a live deployment's spec to a file: backup or migrate it.

Example: kubectl get deployment web -o yaml > deployment.yaml

Services & Networking

kubectl get services: List services and their cluster IPs.

Example: kubectl get services

kubectl get svc -o wide: Show service type, cluster IP, and selector: verify routing.

Example: kubectl get svc -o wide

kubectl expose deployment web --port=80 --target-port=8080 --type=ClusterIP: Create a Service from a deployment: internal load balancing.

Example: kubectl expose deployment web --port=80 --target-port=8080

kubectl expose deployment web --type=LoadBalancer --port=80: Expose a deployment externally: cloud LB provisions a public IP.

Example: kubectl expose deployment web --type=LoadBalancer --port=80

kubectl expose deployment web --type=NodePort --port=80: Expose on a node port: for clusters without a load balancer.

Example: kubectl expose deployment web --type=NodePort --port=80

kubectl get endpoints: Show service endpoints: which pod IPs are currently behind each service.

Example: kubectl get endpoints

kubectl port-forward svc/web 8080:80: Forward a local port to a service: access internal services from your laptop.

Example: kubectl port-forward svc/web 8080:80

kubectl port-forward pod/web-7d8f9 3000:3000: Forward to a specific pod: debug a single instance.

Example: kubectl port-forward pod/web-7d8f9 3000:3000

kubectl get ingress: List ingress rules: external HTTP routing.

Example: kubectl get ingress

kubectl get networkpolicy: List network policies: which pods can talk to which.

Example: kubectl get networkpolicy

kubectl get endpointslices -l kubernetes.io/service-name=web: Inspect endpoint slices for a service: newer API for endpoint discovery.

Example: kubectl get endpointslices -l kubernetes.io/service-name=web

kubectl get svc --field-selector type=LoadBalancer: Find all load-balanced services: audit public exposure.

Example: kubectl get svc --field-selector type=LoadBalancer

ConfigMaps & Secrets

kubectl create configmap app-config --from-literal=DEBUG=true: Create a ConfigMap from a literal key-value.

Example: kubectl create configmap app-config --from-literal=DEBUG=true

kubectl create configmap app-config --from-file=config.json: Create a ConfigMap from a file's contents.

Example: kubectl create configmap app-config --from-file=config.json

kubectl create configmap app-config --from-env-file=.env: Import a whole .env file as a ConfigMap.

Example: kubectl create configmap app-config --from-env-file=.env

kubectl get configmaps: List ConfigMaps.

Example: kubectl get configmaps

kubectl get cm app-config -o yaml: View a ConfigMap's data.

Example: kubectl get cm app-config -o yaml

kubectl create secret generic db-secret --from-literal=password=supersecret: Create a Secret: base64-encoded by default.

Example: kubectl create secret generic db-secret --from-literal=password=supersecret

kubectl create secret generic db-secret --from-file=./credentials.json: Create a Secret from a file: better than pasting literals in shell history.

Example: kubectl create secret generic db-secret --from-file=./credentials.json

kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem: Create a TLS Secret for HTTPS ingresses.

Example: kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem

kubectl create secret docker-registry regcred --docker-username=user --docker-password=pass: Create an image pull secret for private registries.

Example: kubectl create secret docker-registry regcred --docker-username=user --docker-password=pass --docker-email=u@x.com

kubectl get secrets: List secrets.

Example: kubectl get secrets

kubectl get secret db-secret -o jsonpath="{.data.password}" | base64 -d: Decode a secret value: view what is actually stored.

Example: kubectl get secret db-secret -o jsonpath="{.data.password}" | base64 -d

kubectl delete secret db-secret: Delete a secret.

Example: kubectl delete secret db-secret

kubectl create secret generic sops-age --from-file=age.agekey -n flux-system: Store a tool-specific secret (SOPS key) in a namespace: GitOps workflows.

Example: kubectl create secret generic sops-age --from-file=age.agekey -n flux-system

Storage & Volumes

kubectl get pv: List persistent volumes (cluster-level storage).

Example: kubectl get pv

kubectl get pvc: List persistent volume claims (namespace-level requests).

Example: kubectl get pvc

kubectl get storageclass: List storage classes: the dynamic provisioning options available.

Example: kubectl get storageclass

kubectl describe pvc data-pvc: Inspect a PVC: status, capacity, and the PV it bound to.

Example: kubectl describe pvc data-pvc

kubectl delete pvc data-pvc: Delete a PVC: depending on reclaim policy, this may destroy the data.

Example: kubectl delete pvc data-pvc

kubectl patch pvc data-pvc -p '{"spec":{"resources":{"requests":{"storage":"20Gi"}}}}': Expand a PVC's size (if the storage class allows volume expansion).

Example: kubectl patch pvc data-pvc -p '{"spec":{"resources":{"requests":{"storage":"20Gi"}}}}'

kubectl get pvc -o jsonpath="{.items[*].status.capacity.storage}": List all PVC capacities: audit your storage usage.

Example: kubectl get pvc -o jsonpath="{.items[*].status.capacity.storage}"

Debugging & Logs

kubectl logs <pod>: Show a pod's logs.

Example: kubectl logs web-7d8f9

kubectl logs -f <pod>: Follow a pod's logs live.

Example: kubectl logs -f web-7d8f9

kubectl logs --tail=100 <pod>: Show the last 100 log lines.

Example: kubectl logs --tail=100 web-7d8f9

kubectl logs deployment/web: Stream logs from all pods of a deployment.

Example: kubectl logs deployment/web

kubectl logs <pod> -c <container>: Logs of a specific container in a multi-container pod.

Example: kubectl logs web-7d8f9 -c sidecar

kubectl logs -l app=web --tail=50: Logs from all pods matching a label: follow a service's logs.

Example: kubectl logs -l app=web --tail=50

kubectl logs --since=10m <pod>: Logs from the last 10 minutes: post-incident review.

Example: kubectl logs --since=10m web-7d8f9

kubectl logs -p <pod>: Show logs of the previous (crashed) container instance: why did it die?

Example: kubectl logs -p web-7d8f9

kubectl exec -it <pod> -- /bin/sh: Open a shell inside a running container: the classic debugging move.

Example: kubectl exec -it web-7d8f9 -- /bin/sh

kubectl exec <pod> -- <cmd>: Run a single command in a container.

Example: kubectl exec web-7d8f9 -- env

kubectl describe pod <name>: Show pod events, conditions, and container status: the first place to look at failures.

Example: kubectl describe pod web-7d8f9

kubectl get events --sort-by=.lastTimestamp: Show cluster events sorted by time: what happened recently.

Example: kubectl get events --sort-by=.lastTimestamp

kubectl get events --field-selector involvedObject.name=web-7d8f9: Events for one object: trace a pod's lifecycle.

Example: kubectl get events --field-selector involvedObject.name=web-7d8f9

kubectl cp <pod>:/app/report.log ./report.log: Copy a file out of a container: grab logs or artifacts.

Example: kubectl cp web-7d8f9:/app/report.log ./report.log

kubectl top pod: Show CPU/memory usage per pod: find the memory hog.

Example: kubectl top pod

kubectl debug node/node-1 -it --image=ubuntu: Run a debug container on a node: inspect node-level issues.

Example: kubectl debug node/node-1 -it --image=ubuntu

kubectl debug pod/web-7d8f9 -it --image=nicolaka/netshoot: Run an ephemeral debug container with networking tools next to a pod.

Example: kubectl debug pod/web-7d8f9 -it --image=nicolaka/netshoot

kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase,RESTARTS:.status.containerStatuses[0].restartCount

: Custom table output: restart counts in one glance.

Example: kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase,RESTARTS:.status.containerStatuses[0].restartCount

Frequently asked questions

How do I view and switch Kubernetes contexts?

Run kubectl config get-contexts to list clusters, kubectl config use-context <name> to switch, and kubectl config current-context to see the active one. Contexts bundle cluster, user, and namespace.

How do I roll back a deployment?

Run kubectl rollout undo deployment/<name> to revert to the previous revision, or kubectl rollout undo deployment/<name> --to-revision=<n> for a specific one. Check history with kubectl rollout history deployment/<name>.

What is the difference between a pod and a deployment?

A pod is the smallest deployable unit: one or more containers sharing networking and storage. A deployment manages a set of replica pods, providing rolling updates, scaling, and self-healing.

How do I get logs from all pods of a deployment?

Use kubectl logs deployment/<name> to stream logs from all pods. Add -f to follow, --tail=50 to limit lines, or kubectl logs -l app=<label> to select pods by label.