Files
2019-03-20 17:55:36 -07:00

415 lines
21 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
---
title: kubectl
notitle: true
---
## kubectl
<!--
kubectl controls the Kubernetes cluster manager
-->
kubectl 用来控制 Kubernetes 集群管理器
<!--
### Synopsis
kubectl controls the Kubernetes cluster manager.
Find more information at: /docs/reference/kubectl/overview/
-->
### 摘要
kubectl 用来控制 Kubernetes 集群管理器。
更多信息参见 /docs/reference/kubectl/overview/
```
kubectl [flags]
```
### Options
<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>
<tr>
<td colspan="2">--allow-verification-with-non-compliant-keys</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Allow a SignatureVerifier to use keys which are technically non-compliant with RFC6962.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">允许 `SignatureVerifier` 使用和 RFC6962 技术上不兼容的键值。</td>
</tr>
<tr>
<td colspan="2">--alsologtostderr</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">log to standard error as well as files</td> -->
<td style="line-height: 130%; word-wrap: break-word;">同时将日志写到标准输出和文件中</td>
</tr>
<tr>
<td colspan="2">--as string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Username to impersonate for the operation</td> -->
<td style="line-height: 130%; word-wrap: break-word;">执行操作时假冒的用户名</td>
</tr>
<tr>
<td colspan="2">--as-group stringArray</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Group to impersonate for the operation, this flag can be repeated to specify multiple groups.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">执行操作时假冒的组名。此参数可以多次使用,以设置多个组名。</td>
</tr>
<tr>
<td colspan="2">--azure-container-registry-config string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">Azure 容器仓库配置信息文件的路径。</td>
</tr>
<tr>
<!-- <td colspan="2">--cache-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "$HOME/.kube/http-cache"</td> -->
<td colspan="2">--cache-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值: "$HOME/.kube/http-cache"</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Default HTTP cache directory</td> -->
<td style="line-height: 130%; word-wrap: break-word;">默认的 HTTP 缓存路径</td>
</tr>
<tr>
<td colspan="2">--certificate-authority string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Path to a cert file for the certificate authority</td> -->
<td style="line-height: 130%; word-wrap: break-word;">CA 证书机构的证书文件路径</td>
</tr>
<tr>
<td colspan="2">--client-certificate string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Path to a client certificate file for TLS</td> -->
<td style="line-height: 130%; word-wrap: break-word;">TLS 的客户端证书的文件路径</td>
</tr>
<tr>
<td colspan="2">--client-key string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Path to a client key file for TLS</td> -->
<td style="line-height: 130%; word-wrap: break-word;">TLS 客户端密钥文件的路径</td>
</tr>
<tr>
<!-- <td colspan="2">--cloud-provider-gce-lb-src-cidrs cidrs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16</td> -->
<td colspan="2">--cloud-provider-gce-lb-src-cidrs cidrs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值: 130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">CIDRs opened in GCE firewall for LB traffic proxy & health checks</td> -->
<td style="line-height: 130%; word-wrap: break-word;">在 GCE 防火墙中开放的 CIDRs,用于负载均衡器流量代理和健康检查。</td>
</tr>
<tr>
<td colspan="2">--cluster string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">The name of the kubeconfig cluster to use</td> -->
<td style="line-height: 130%; word-wrap: break-word;">所要使用的 kubeconfig 集群名</td>
</tr>
<tr>
<td colspan="2">--context string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">The name of the kubeconfig context to use</td> -->
<td style="line-height: 130%; word-wrap: break-word;">所要使用的 kubeconfig 上下文名</td>
</tr>
<tr>
<!-- <td colspan="2">--default-not-ready-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td> -->
<td colspan="2">--default-not-ready-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值:300</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">针对 `notReady:NoExecute` 污点的容忍时间(`tolerationSeconds`);对于没有设置该容忍度的 Pods,Kubernetes 会添加此容忍度设置。</td>
</tr>
<tr>
<!-- <td colspan="2">--default-unreachable-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td> -->
<td colspan="2">--default-unreachable-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;容忍度:300</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">针对 `unreachable:NoExecute` 污点的容忍时间(`tolerationSeconds`);对于没有设置该容忍度的 Pods,Kubernetes 会添加此容忍度设置。</td>
</tr>
<tr>
<td colspan="2">-h, --help</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">help for kubectl</td> -->
<td style="line-height: 130%; word-wrap: break-word;">kubectl 帮助选项</td>
</tr>
<tr>
<td colspan="2">--insecure-skip-tls-verify</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure</td> -->
<td style="line-height: 130%; word-wrap: break-word;">如果设置为 truekubectl 将不会验证服务器的证书。这样设置时,HTTPS 链接将不安全。</td>
</tr>
<tr>
<td colspan="2">--kubeconfig string</td>
</tr>
<tr>
<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the kubeconfig file to use for CLI requests.</td> -->
<td></td><td style="line-height: 130%; word-wrap: break-word;">kubeconfig 的文件路径,供 CLI 请求之用。</td>
</tr>
<tr>
<!-- <td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td> -->
<td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值::0</td>
</tr>
<tr>
<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">when logging hits line file:N, emit a stack trace</td> -->
<td></td><td style="line-height: 130%; word-wrap: break-word;">格式为“file:N”;在为文件 file 的第 N 行打印日志时,打印调用堆栈的跟踪信息。</td>
</tr>
<tr>
<td colspan="2">--log-dir string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">If non-empty, write log files in this directory</td> -->
<td style="line-height: 130%; word-wrap: break-word;">如果此参数不为空,将在所指定的路径下保存日志文件。</td>
</tr>
<tr>
<!-- <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td> -->
<td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值:5s</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes</td> -->
<td style="line-height: 130%; word-wrap: break-word;">清刷日志数据的最大间隔秒数。</td>
</tr>
<tr>
<!-- <td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td> -->
<td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值:true</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files</td> -->
<td style="line-height: 130%; word-wrap: break-word;">将日志输出到标准错误输出而非文件中。</td>
</tr>
<tr>
<td colspan="2">--match-server-version</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Require server version to match client version</td> -->
<td style="line-height: 130%; word-wrap: break-word;">要求服务器的版本和客户端版本一致</td>
</tr>
<tr>
<td colspan="2">-n, --namespace string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">If present, the namespace scope for this CLI request</td> -->
<td style="line-height: 130%; word-wrap: break-word;">此参数如果设置,用来控制 CLI 请求的名字空间范畴</td>
</tr>
<tr>
<!-- <td colspan="2">--request-timeout string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "0"</td> -->
<td colspan="2">--request-timeout string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值:"0"</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.</td> -->
<td style="line-height: 130%; word-wrap: break-word;">放弃单个服务请求前的等待时间。非零数值必须要包含时间单位(例如,1s,2m,3h)。零值意味着不会发生请求超时。</td>
</tr>
<tr>
<td colspan="2">-s, --server string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">The address and port of the Kubernetes API server</td> -->
<td style="line-height: 130%; word-wrap: break-word;">Kubernetes API 服务器的地址和端口</td>
</tr>
<tr>
<!-- <td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td> -->
<td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值:2</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr</td> -->
<td style="line-height: 130%; word-wrap: break-word;">严重级别整数值;严重级别高于或等于此值的日志都将会输出到标准错误输出</td>
</tr>
<tr>
<td colspan="2">--token string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Bearer token for authentication to the API server</td> -->
<td style="line-height: 130%; word-wrap: break-word;">持有者令牌(Bearer Token),用于向 API 服务器认证身份</td>
</tr>
<tr>
<td colspan="2">--user string</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">The name of the kubeconfig user to use</td> -->
<td style="line-height: 130%; word-wrap: break-word;">所要使用的 kubeconfig 用户名</td>
</tr>
<tr>
<td colspan="2">-v, --v Level</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">log level for V logs</td>
related issue: https://github.com/kubernetes/kubernetes/issues/35054
-->
<td style="line-height: 130%; word-wrap: break-word;">设定日志输出的等级</td>
</tr>
<tr>
<td colspan="2">--version version[=true]</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">Print version information and quit</td> -->
<td style="line-height: 130%; word-wrap: break-word;">打印版本信息,然后退出</td>
</tr>
<tr>
<td colspan="2">--vmodule moduleSpec</td>
</tr>
<tr>
<td></td>
<!-- <td style="line-height: 130%; word-wrap: break-word;">comma-separated list of pattern=N settings for file-filtered logging</td> -->
<td style="line-height: 130%; word-wrap: break-word;">逗号分隔的字符串表,每个元素都是 pattern=N 格式,用于基于文件名进行过滤的日志设置</td>
</tr>
</tbody>
</table>
<!-- ### SEE ALSO -->
### 更多资源
<!-- * [kubectl alpha](kubectl_alpha.md) - Commands for features in alpha -->
* [kubectl alpha](kubectl_alpha.md) - kubectl alpha 功能
<!-- * [kubectl annotate](kubectl_annotate.md) - Update the annotations on a resource -->
* [kubectl annotate](kubectl_annotate.md) - 更新资源所关联的注解
<!-- * [kubectl api-resources](kubectl_api-resources.md) - Print the supported API resources on the server -->
* [kubectl api-resources](kubectl_api-resources.md) - 打印服务器上所支持的 API 资源
<!-- * [kubectl api-versions](kubectl_api-versions.md) - Print the supported API versions on the server, in the form of "group/version" -->
* [kubectl api-versions](kubectl_api-versions.md) - 以“组/版本”的格式输出服务端支持的 API 版本
<!-- * [kubectl apply](kubectl_apply.md) - Apply a configuration to a resource by filename or stdin -->
* [kubectl apply](kubectl_apply.md) - 基于文件名或标准输入,将新的配置应用到资源上
<!-- * [kubectl attach](kubectl_attach.md) - Attach to a running container -->
* [kubectl attach](kubectl_attach.md) - 连接到一个正在运行的容器
<!-- * [kubectl auth](kubectl_auth.md) - Inspect authorization -->
* [kubectl auth](kubectl_auth.md) - 检视授权信息
<!-- * [kubectl autoscale](kubectl_autoscale.md) - Auto-scale a Deployment, ReplicaSet, or ReplicationController -->
* [kubectl autoscale](kubectl_autoscale.md) - 对一个资源对象( Deployment、ReplicaSet 或 ReplicationController )进行扩缩
<!-- * [kubectl certificate](kubectl_certificate.md) - Modify certificate resources. -->
* [kubectl certificate](kubectl_certificate.md) - 修改证书资源
<!-- * [kubectl cluster-info](kubectl_cluster-info.md) - Display cluster info -->
* [kubectl cluster-info](kubectl_cluster-info.md) - 显示集群信息
<!-- * [kubectl completion](kubectl_completion.md) - Output shell completion code for the specified shell (bash or zsh) -->
* [kubectl completion](kubectl_completion.md) - 根据已经给出的 Shellbash 或 zsh),输出 Shell 补全后的代码
<!-- * [kubectl config](kubectl_config.md) - Modify kubeconfig files -->
* [kubectl config](kubectl_config.md) - 修改 kubeconfig 配置文件
<!-- * [kubectl convert](kubectl_convert.md) - Convert config files between different API versions -->
* [kubectl convert](kubectl_convert.md) - 在不同的 API 版本之间转换配置文件
<!-- * [kubectl cordon](kubectl_cordon.md) - Mark node as unschedulable -->
* [kubectl cordon](kubectl_cordon.md) - 标记节点为不可调度的
<!-- * [kubectl cp](kubectl_cp.md) - Copy files and directories to and from containers. -->
* [kubectl cp](kubectl_cp.md) - 将文件和路径拷入/拷出容器。
<!-- * [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin. -->
* [kubectl create](kubectl_create.md) - 通过文件或标准输入来创建资源
<!-- * [kubectl delete](kubectl_delete.md) - Delete resources by filenames, stdin, resources and names, or by resources and label selector -->
* [kubectl delete](kubectl_delete.md) - 通过文件名、标准输入、资源和名字删除资源,或者通过资源和标签选择器来删除资源
<!-- * [kubectl describe](kubectl_describe.md) - Show details of a specific resource or group of resources -->
* [kubectl describe](kubectl_describe.md) - 显示某个资源或某组资源的详细信息
<!-- * [kubectl drain](kubectl_drain.md) - Drain node in preparation for maintenance -->
* [kubectl drain](kubectl_drain.md) - 腾空节点,准备维护
<!-- * [kubectl edit](kubectl_edit.md) - Edit a resource on the server -->
* [kubectl edit](kubectl_edit.md) - 修改服务器上的某资源
<!-- * [kubectl exec](kubectl_exec.md) - Execute a command in a container -->
* [kubectl exec](kubectl_exec.md) - 在容器中执行命令
<!-- * [kubectl explain](kubectl_explain.md) - Documentation of resources -->
* [kubectl explain](kubectl_explain.md) - 显示资源说明
<!-- * [kubectl expose](kubectl_expose.md) - Take a replication controller, service, deployment or pod and expose it as a new Kubernetes Service -->
* [kubectl expose](kubectl_expose.md) - 给定副本控制器、服务、Deployment 或 Pod,将其暴露为新的 kubernetes Service
<!-- * [kubectl get](kubectl_get.md) - Display one or many resources -->
* [kubectl get](kubectl_get.md) - 显示一个或者多个资源信息
<!-- * [kubectl label](kubectl_label.md) - Update the labels on a resource -->
* [kubectl label](kubectl_label.md) - 更新资源的标签
<!-- * [kubectl logs](kubectl_logs.md) - Print the logs for a container in a pod -->
* [kubectl logs](kubectl_logs.md) - 输出 pod 中某容器的日志
<!-- * [kubectl options](kubectl_options.md) - Print the list of flags inherited by all commands -->
* [kubectl options](kubectl_options.md) - 打印所有命令都支持的共有参数列表
<!-- * [kubectl patch](kubectl_patch.md) - Update field(s) of a resource using strategic merge patch -->
* [kubectl patch](kubectl_patch.md) - 基于策略性合并修补(Stategic Merge Patch)规则更新某资源中的字段
<!-- * [kubectl plugin](kubectl_plugin.md) - Runs a command-line plugin -->
* [kubectl plugin](kubectl_plugin.md) - 运行命令行插件
<!-- * [kubectl port-forward](kubectl_port-forward.md) - Forward one or more local ports to a pod -->
* [kubectl port-forward](kubectl_port-forward.md) - 将一个或者多个本地端口转发到 pod
<!-- * [kubectl proxy](kubectl_proxy.md) - Run a proxy to the Kubernetes API server -->
* [kubectl proxy](kubectl_proxy.md) - 运行一个 kubernetes API 服务器代理
<!-- * [kubectl replace](kubectl_replace.md) - Replace a resource by filename or stdin -->
* [kubectl replace](kubectl_replace.md) - 基于文件名或标准输入替换资源
<!-- * [kubectl rollout](kubectl_rollout.md) - Manage the rollout of a resource -->
* [kubectl rollout](kubectl_rollout.md) - 管理资源的上线
<!-- * [kubectl run](kubectl_run.md) - Run a particular image on the cluster -->
* [kubectl run](kubectl_run.md) - 在集群中使用指定镜像启动容器
<!-- * [kubectl scale](kubectl_scale.md) - Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job -->
* [kubectl scale](kubectl_scale.md) - 为一个 Deployment、ReplicaSet、ReplicationController 或 Job 设置一个新的规模尺寸值
<!-- * [kubectl set](kubectl_set.md) - Set specific features on objects -->
* [kubectl set](kubectl_set.md) - 在资源对象设置特定的功能
<!-- * [kubectl taint](kubectl_taint.md) - Update the taints on one or more nodes -->
* [kubectl taint](kubectl_taint.md) - 在一个或者多个节点上更新污点配置
<!-- * [kubectl top](kubectl_top.md) - Display Resource (CPU/Memory/Storage) usage. -->
* [kubectl top](kubectl_top.md) - 显示资源(CPU /内存/存储)使用率
<!-- * [kubectl uncordon](kubectl_uncordon.md) - Mark node as schedulable -->
* [kubectl uncordon](kubectl_uncordon.md) - 标记节点为可调度的
<!-- * [kubectl version](kubectl_version.md) - Print the client and server version information -->
* [kubectl version](kubectl_version.md) - 打印客户端和服务器的版本信息
<!-- * [kubectl wait](kubectl_wait.md) - Experimental: Wait for one condition on one or many resources -->
* [kubectl wait](kubectl_wait.md) - 实验性:等待一个或多个资源达到某种状态