Red Hat Summit Red Hat Summit지원콘솔개발자평가판 시작연락처

이 콘텐츠는 선택한 언어로 제공되지 않습니다.

CLI reference

OpenShift Container Platform 4.1

Learning how to use the OpenShift CLI

Red Hat OpenShift Documentation Team

Abstract

This document provides information about installing, configuring, and using the OpenShift CLI (oc). It also contains a reference of CLI commands and examples of how to use them.

Chapter 1. Getting started with the CLI
링크 복사

1.1. About the CLI
링크 복사

With the OpenShift Container Platform command-line interface (CLI), you can create applications and manage OpenShift Container Platform projects from a terminal. The CLI is ideal in situations where you:

  • Work directly with project source code.
  • Script OpenShift Container Platform operations.
  • Are restricted by bandwidth resources and can not use the web console.

1.2. Installing the CLI
링크 복사

You can install the CLI in order to interact with OpenShift Container Platform using a command-line interface.

Procedure

  1. From the Infrastructure Provider page on the Red Hat OpenShift Cluster Manager site, navigate to the page for your installation type and click Download Command-line Tools.
  2. Click the folder for your operating system and architecture and click the compressed file.
  3. Save the file to your file system.
  4. Extract the compressed file.
  5. Place it in a directory that is on your PATH.

After you install the CLI, it is available using the oc command: 

$ oc <command>
Copy to Clipboard Toggle word wrap

1.3. Logging in to the CLI
링크 복사

You can log in to the oc CLI to access and manage your cluster.

Prerequisites

  • You must have access to an OpenShift Container Platform cluster.
  • You must have installed the CLI.

Procedure

  • Log in to the CLI using the oc login command and enter the required information when prompted. 

    $ oc login
Server [https://localhost:8443]: https://openshift.example.com:6443
    1 
    
The server uses a certificate signed by an unknown authority.
You can bypass the certificate check, but any data you send to the server could be intercepted by others.
Use insecure connections? (y/n): y
    2 
    

Authentication required for https://openshift.example.com:6443 (openshift)
Username: user1
    3 
    
Password:
    4 
    
Login successful.

You don't have any projects. You can try to create a new project, by running

    oc new-project <projectname>

Welcome! See 'oc help' to get started.
    Copy to Clipboard Toggle word wrap
    1
    Enter the OpenShift Container Platform server URL.
    2
    Enter whether to use insecure connections.
    3
    Enter the user name to log in as.
    4
    Enter the user’s password.

You can now create a project or issue other commands for managing your cluster.

1.4. Using the CLI
링크 복사

Review the following sections to learn how to complete common tasks using the CLI.

1.4.1. Creating a project
링크 복사

Use the oc new-project command to create a new project. 

$ oc new-project my-project
Now using project "my-project" on server "https://openshift.example.com:6443".
Copy to Clipboard Toggle word wrap

1.4.2. Creating a new app
링크 복사

Use the oc new-app command to create a new application. 

$ oc new-app https://github.com/sclorg/cakephp-ex
--> Found image 40de956 (9 days old) in imagestream "openshift/php" under tag "7.2" for "php"

...

    Run 'oc status' to view your app.
Copy to Clipboard Toggle word wrap

1.4.3. Viewing pods
링크 복사

Use the oc get pods command to view the pods for the current project. 

$ oc get pods -o wide
NAME                  READY   STATUS      RESTARTS   AGE     IP            NODE                           NOMINATED NODE
cakephp-ex-1-build    0/1     Completed   0          5m45s   10.131.0.10   ip-10-0-141-74.ec2.internal    <none>
cakephp-ex-1-deploy   0/1     Completed   0          3m44s   10.129.2.9    ip-10-0-147-65.ec2.internal    <none>
cakephp-ex-1-ktz97    1/1     Running     0          3m33s   10.128.2.11   ip-10-0-168-105.ec2.internal   <none>
Copy to Clipboard Toggle word wrap

1.4.4. Viewing pod logs
링크 복사

Use the oc logs command to view logs for a particular pod. 

$ oc logs cakephp-ex-1-deploy
--> Scaling cakephp-ex-1 to 1
--> Success
Copy to Clipboard Toggle word wrap

1.4.5. Viewing the current project
링크 복사

Use the oc project command to view the current project. 

$ oc project
Using project "my-project" on server "https://openshift.example.com:6443".
Copy to Clipboard Toggle word wrap

1.4.6. Viewing the status for the current project
링크 복사

Use the oc status command to view information about the current project, such as Services, DeploymentConfigs, and BuildConfigs. 

$ oc status
In project my-project on server https://openshift.example.com:6443

svc/cakephp-ex - 172.30.236.80 ports 8080, 8443
  dc/cakephp-ex deploys istag/cakephp-ex:latest <-
    bc/cakephp-ex source builds https://github.com/sclorg/cakephp-ex on openshift/php:7.2
    deployment #1 deployed 2 minutes ago - 1 pod

3 infos identified, use 'oc status --suggest' to see details.
Copy to Clipboard Toggle word wrap

1.4.7. Listing supported API resources
링크 복사

Use the oc api-resources command to view the list of supported API resources on the server. 

$ oc api-resources
NAME                                  SHORTNAMES       APIGROUP                              NAMESPACED   KIND
bindings                                                                                     true         Binding
componentstatuses                     cs                                                     false        ComponentStatus
configmaps                            cm                                                     true         ConfigMap
...
Copy to Clipboard Toggle word wrap

1.5. Getting help
링크 복사

You can get help with CLI commands and OpenShift Container Platform resources in the following ways.

  • Use oc help to get a list and description of all available CLI commands:

    Example: Get general help for the CLI

    $ oc help
OpenShift Client

This client helps you develop, build, deploy, and run your applications on any OpenShift or Kubernetes compatible
platform. It also includes the administrative commands for managing a cluster under the 'adm' subcommand.

Usage:
  oc [flags]

Basic Commands:
  login           Log in to a server
  new-project     Request a new project
  new-app         Create a new application

...
    Copy to Clipboard Toggle word wrap

  • Use the --help flag to get help about a specific CLI command:

    Example: Get help for the oc create command

    $ oc create --help
Create a resource by filename or stdin

JSON and YAML formats are accepted.

Usage:
  oc create -f FILENAME [flags]

...
    Copy to Clipboard Toggle word wrap

  • Use the oc explain command to view the description and fields for a particular resource:

    Example: View documentation for the Pod resource

    $ oc explain pods
KIND:     Pod
VERSION:  v1

DESCRIPTION:
     Pod is a collection of containers that can run on a host. This resource is
     created by clients and scheduled onto hosts.

FIELDS:
   apiVersion	<string>
     APIVersion defines the versioned schema of this representation of an
     object. Servers should convert recognized schemas to the latest internal
     value, and may reject unrecognized values. More info:
     https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

...
    Copy to Clipboard Toggle word wrap

1.6. Logging out of the CLI
링크 복사

You can log out the CLI to end your current session.

  • Use the oc logout command. 

    $ oc logout
Logged "user1" out on "https://openshift.example.com"
    Copy to Clipboard Toggle word wrap

This deletes the saved authentication token from the server and removes it from your configuration file.

Chapter 2. Configuring the CLI
링크 복사

2.1. Enabling tab completion
링크 복사

After you install the oc CLI tool, you can enable tab completion to automatically complete oc commands or suggest options when you press Tab.

Prerequisites

  • You must have the oc CLI tool installed.

Procedure

The following procedure enables tab completion for Bash.

  1. Save the Bash completion code to a file. 

    $ oc completion bash > oc_bash_completion
    Copy to Clipboard Toggle word wrap

  2. Copy the file to /etc/bash_completion.d/. 

    $ sudo cp oc_bash_completion /etc/bash_completion.d/
    Copy to Clipboard Toggle word wrap

    You can also save the file to a local directory and source it from your .bashrc file instead.

Tab completion is enabled when you open a new terminal.

Chapter 3. Extending the CLI with plug-ins
링크 복사

You can write and install plug-ins to build on the default oc commands, allowing you to perform new and more complex tasks with the OpenShift Container Platform CLI.

3.1. Writing CLI plug-ins
링크 복사

You can write a plug-in for the OpenShift Container Platform CLI in any programming language or script that allows you to write command-line commands. Note that you can not use a plug-in to overwrite an existing oc command.

Important

OpenShift CLI plug-ins are currently a Technology Preview feature. Technology Preview features are not supported with Red Hat production service level agreements (SLAs), might not be functionally complete, and Red Hat does not recommend to use them for production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

See the Red Hat Technology Preview features support scope for more information.

Procedure

This procedure creates a simple Bash plug-in that prints a message to the terminal when the oc foo command is issued.

  1. Create a file called oc-foo.

    When naming your plug-in file, keep the following in mind:

    • The file must begin with oc- or kubectl- in order to be recognized as a plug-in.
    • The file name determines the command that invokes the plug-in. For example, a plug-in with the file name oc-foo-bar can be invoked by a command of oc foo bar. You can also use underscores if you want the command to contain dashes. For example, a plug-in with the file name oc-foo_bar can be invoked by a command of oc foo-bar.

  2. Add the following contents to the file. 

    #!/bin/bash

# optional argument handling
if [[ "$1" == "version" ]]
then
    echo "1.0.0"
    exit 0
fi

# optional argument handling
if [[ "$1" == "config" ]]
then
    echo $KUBECONFIG
    exit 0
fi

echo "I am a plugin named kubectl-foo"
    Copy to Clipboard Toggle word wrap

After you install this plug-in for the OpenShift Container Platform CLI, it can be invoked using the oc foo command.

Additional resources

3.2. Installing and using CLI plug-ins
링크 복사

After you write a custom plug-in for the OpenShift Container Platform CLI, you must install it to use the functionality that it provides.

Important

OpenShift CLI plug-ins are currently a Technology Preview feature. Technology Preview features are not supported with Red Hat production service level agreements (SLAs), might not be functionally complete, and Red Hat does not recommend to use them for production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

See the Red Hat Technology Preview features support scope for more information.

Prerequisites

  • You must have the oc CLI tool installed.
  • You must have a CLI plug-in file that begins with oc- or kubectl-.

Procedure

  1. If necessary, update the plug-in file to be executable. 

    $ chmod +x <plugin_file>
    Copy to Clipboard Toggle word wrap

  2. Place the file anywhere in your PATH, such as /usr/local/bin/. 

    $ sudo mv <plugin_file> /usr/local/bin/.
    Copy to Clipboard Toggle word wrap

  3. Run oc plugin list to make sure that the plug-in is listed. 

    $ oc plugin list
The following compatible plugins are available:

/usr/local/bin/<plugin_file>
    Copy to Clipboard Toggle word wrap

    If your plug-in is not listed here, verify that the file begins with oc- or kubectl-, is executable, and is on your PATH.

  4. Invoke the new command or option introduced by the plug-in.

    For example, if you built and installed the kubectl-ns plug-in from the Sample plug-in repository, you can use the following command to view the current namespace. 

    $ oc ns
    Copy to Clipboard Toggle word wrap

    Note that the command to invoke the plug-in depends on the plug-in file name. For example, a plug-in with the file name of oc-foo-bar is invoked by the oc foo bar command.

Chapter 4. Developer CLI commands
링크 복사

4.1. Basic CLI commands
링크 복사

4.1.1. explain
링크 복사

Display documentation for a certain resource.

Example: Display documentation for Pods

$ oc explain pods
Copy to Clipboard Toggle word wrap

4.1.2. login
링크 복사

Log in to the OpenShift Container Platform server and save login information for subsequent use.

Example: Interactive login

$ oc login
Copy to Clipboard Toggle word wrap

Example: Log in specifying a user name

$ oc login -u user1
Copy to Clipboard Toggle word wrap

4.1.3. new-app
링크 복사

Create a new application by specifying source code, a template, or an image.

Example: Create a new application from a local Git repository

$ oc new-app .
Copy to Clipboard Toggle word wrap

Example: Create a new application from a remote Git repository

$ oc new-app https://github.com/sclorg/cakephp-ex
Copy to Clipboard Toggle word wrap

Example: Create a new application from a private remote repository

$ oc new-app https://github.com/youruser/yourprivaterepo --source-secret=yoursecret
Copy to Clipboard Toggle word wrap

4.1.4. new-project
링크 복사

Create a new project and switch to it as the default project in your configuration.

Example: Create a new project

$ oc new-project myproject
Copy to Clipboard Toggle word wrap

4.1.5. project
링크 복사

Switch to another project and make it the default in your configuration.

Example: Switch to a different project

$ oc project test-project
Copy to Clipboard Toggle word wrap

4.1.6. projects
링크 복사

Display information about the current active project and existing projects on the server.

Example: List all projects

$ oc projects
Copy to Clipboard Toggle word wrap

4.1.7. status
링크 복사

Show a high-level overview of the current project.

Example: Show the status of the current project

$ oc status
Copy to Clipboard Toggle word wrap

4.2. Build and Deploy CLI commands
링크 복사

4.2.1. cancel-build
링크 복사

Cancel a running, pending, or new build.

Example: Cancel a build

$ oc cancel-build python-1
Copy to Clipboard Toggle word wrap

Example: Cancel all pending builds from the python BuildConfig

$ oc cancel-build buildconfig/python --state=pending
Copy to Clipboard Toggle word wrap

4.2.2. import-image
링크 복사

Import the latest tag and image information from an image repository.

Example: Import the latest image information

$ oc import-image my-ruby
Copy to Clipboard Toggle word wrap

4.2.3. new-build
링크 복사

Create a new BuildConfig from source code.

Example: Create a BuildConfig from a local Git repository

$ oc new-build .
Copy to Clipboard Toggle word wrap

Example: Create a BuildConfig from a remote Git repository

$ oc new-build https://github.com/sclorg/cakephp-ex
Copy to Clipboard Toggle word wrap

4.2.4. rollback
링크 복사

Revert an application back to a previous Deployment.

Example: Roll back to the last successful Deployment

$ oc rollback php
Copy to Clipboard Toggle word wrap

Example: Roll back to a specific version

$ oc rollback php --to-version=3
Copy to Clipboard Toggle word wrap

4.2.5. rollout
링크 복사

Start a new rollout, view its status or history, or roll back to a previous revision of your application.

Example: Roll back to the last successful Deployment

$ oc rollout undo deploymentconfig/php
Copy to Clipboard Toggle word wrap

Example: Start a new rollout for a DeploymentConfig with its latest state

$ oc rollout latest deploymentconfig/php
Copy to Clipboard Toggle word wrap

4.2.6. start-build
링크 복사

Start a build from a BuildConfig or copy an existing build.

Example: Start a build from the specified BuildConfig

$ oc start-build python
Copy to Clipboard Toggle word wrap

Example: Start a build from a previous build

$ oc start-build --from-build=python-1
Copy to Clipboard Toggle word wrap

Example: Set an environment variable to use for the current build

$ oc start-build python --env=mykey=myvalue
Copy to Clipboard Toggle word wrap

4.2.7. tag
링크 복사

Tag existing images into imagestreams.

Example: Configure the ruby image’s latest tag to refer to the image for the 2.0 tag

$ oc tag ruby:latest ruby:2.0
Copy to Clipboard Toggle word wrap

4.3. Application management CLI commands
링크 복사

4.3.1. annotate
링크 복사

Update the annotations on one or more resources.

Example: Add an annotation to a Route

$ oc annotate route/test-route haproxy.router.openshift.io/ip_whitelist="192.168.1.10"
Copy to Clipboard Toggle word wrap

Example: Remove the annotation from the Route

$ oc annotate route/test-route haproxy.router.openshift.io/ip_whitelist-
Copy to Clipboard Toggle word wrap

4.3.2. apply
링크 복사

Apply a configuration to a resource by file name or standard in (stdin) in JSON or YAML format.

Example: Apply the configuration in pod.json to a Pod

$ oc apply -f pod.json
Copy to Clipboard Toggle word wrap

4.3.3. autoscale
링크 복사

Autoscale a DeploymentConfig or ReplicationController.

Example: Autoscale to a minimum of two and maximum of five Pods

$ oc autoscale deploymentconfig/parksmap-katacoda --min=2 --max=5
Copy to Clipboard Toggle word wrap

4.3.4. create
링크 복사

Create a resource by file name or standard in (stdin) in JSON or YAML format.

Example: Create a Pod using the content in pod.json

$ oc create -f pod.json
Copy to Clipboard Toggle word wrap

4.3.5. delete
링크 복사

Delete a resource.

Example: Delete a Pod named parksmap-katacoda-1-qfqz4

$ oc delete pod/parksmap-katacoda-1-qfqz4
Copy to Clipboard Toggle word wrap

Example: Delete all Pods with the app=parksmap-katacoda label

$ oc delete pods -l app=parksmap-katacoda
Copy to Clipboard Toggle word wrap

4.3.6. describe
링크 복사

Return detailed information about a specific object.

Example: Describe a Deployment named example

$ oc describe deployment/example
Copy to Clipboard Toggle word wrap

Example: Describe all Pods

$ oc describe pods
Copy to Clipboard Toggle word wrap

4.3.7. edit
링크 복사

Edit a resource.

Example: Edit a DeploymentConfig using the default editor

$ oc edit deploymentconfig/parksmap-katacoda
Copy to Clipboard Toggle word wrap

Example: Edit a DeploymentConfig using a different editor

$ OC_EDITOR="nano" oc edit deploymentconfig/parksmap-katacoda
Copy to Clipboard Toggle word wrap

Example: Edit a DeploymentConfig in JSON format

$ oc edit deploymentconfig/parksmap-katacoda -o json
Copy to Clipboard Toggle word wrap

4.3.8. expose
링크 복사

Expose a Service externally as a Route.

Example: Expose a Service

$ oc expose service/parksmap-katacoda
Copy to Clipboard Toggle word wrap

Example: Expose a Service and specify the host name

$ oc expose service/parksmap-katacoda --hostname=www.my-host.com
Copy to Clipboard Toggle word wrap

4.3.9. get
링크 복사

Display one or more resources.

Example: List Pods in the default namespace

$ oc get pods -n default
Copy to Clipboard Toggle word wrap

Example: Get details about the python DeploymentConfig in JSON format

$ oc get deploymentconfig/python -o json
Copy to Clipboard Toggle word wrap

4.3.10. label
링크 복사

Update the labels on one or more resources.

Example: Update the python-1-mz2rf Pod with the label status set to unhealthy

$ oc label pod/python-1-mz2rf status=unhealthy
Copy to Clipboard Toggle word wrap

4.3.11. scale
링크 복사

Set the desired number of replicas for a ReplicationController or a DeploymentConfig.

Example: Scale the ruby-app DeploymentConfig to three Pods

$ oc scale deploymentconfig/ruby-app --replicas=3
Copy to Clipboard Toggle word wrap

4.3.12. secrets
링크 복사

Manage secrets in your project.

Example: Allow my-pull-secret to be used as an image pull secret by the default service account

$ oc secrets link default my-pull-secret --for=pull
Copy to Clipboard Toggle word wrap

4.3.13. serviceaccounts
링크 복사

Get a token assigned to a service account or create a new token or kubeconfig file for a service account.

Example: Get the token assigned to the default service account

$ oc serviceaccounts get-token default
Copy to Clipboard Toggle word wrap

4.3.14. set
링크 복사

Configure existing application resources.

Example: Sets the name of a secret on a BuildConfig

$ oc set build-secret --source buildconfig/mybc mysecret
Copy to Clipboard Toggle word wrap

4.4. Troubleshooting and debugging CLI commands
링크 복사

4.4.1. attach
링크 복사

Attach the shell to a running container.

Example: Get output from the python container from Pod python-1-mz2rf

$ oc attach python-1-mz2rf -c python
Copy to Clipboard Toggle word wrap

4.4.2. cp
링크 복사

Copy files and directories to and from containers.

Example: Copy a file from the python-1-mz2rf Pod to the local file system

$ oc cp default/python-1-mz2rf:/opt/app-root/src/README.md ~/mydirectory/.
Copy to Clipboard Toggle word wrap

4.4.3. debug
링크 복사

Launch a command shell to debug a running application.

Example: Debug the python Deployment

$ oc debug deploymentconfig/python
Copy to Clipboard Toggle word wrap

4.4.4. exec
링크 복사

Execute a command in a container.

Example: Execute the ls command in the python container from Pod python-1-mz2rf

$ oc exec python-1-mz2rf -c python ls
Copy to Clipboard Toggle word wrap

4.4.5. logs
링크 복사

Retrieve the log output for a specific build, BuildConfig, DeploymentConfig, or Pod.

Example: Stream the latest logs from the python DeploymentConfig

$ oc logs -f deploymentconfig/python
Copy to Clipboard Toggle word wrap

4.4.6. port-forward
링크 복사

Forward one or more local ports to a Pod.

Example: Listen on port 8888 locally and forward to port 5000 in the Pod

$ oc port-forward python-1-mz2rf 8888:5000
Copy to Clipboard Toggle word wrap

4.4.7. proxy
링크 복사

Run a proxy to the Kubernetes API server.

Example: Run a proxy to the API server on port 8011 serving static content from ./local/www/

$ oc proxy --port=8011 --www=./local/www/
Copy to Clipboard Toggle word wrap

4.4.8. rsh
링크 복사

Open a remote shell session to a container.

Example: Open a shell session on the first container in the python-1-mz2rf Pod

$ oc rsh python-1-mz2rf
Copy to Clipboard Toggle word wrap

4.4.9. rsync
링크 복사

Copy contents of a directory to or from a running Pod container. Only changed files are copied using the rsync command from your operating system.

Example: Synchronize files from a local directory with a Pod directory

$ oc rsync ~/mydirectory/ python-1-mz2rf:/opt/app-root/src/
Copy to Clipboard Toggle word wrap

4.4.10. run
링크 복사

Create and run a particular image. By default, this creates a DeploymentConfig to manage the created containers.

Example: Start an instance of the perl image with three replicas

$ oc run my-test --image=perl --replicas=3
Copy to Clipboard Toggle word wrap

4.4.11. wait
링크 복사

Wait for a specific condition on one or more resources.

Example: Wait for the python-1-mz2rf Pod to be deleted

$ oc wait --for=delete pod/python-1-mz2rf
Copy to Clipboard Toggle word wrap

4.5. Advanced developer CLI commands
링크 복사

4.5.1. api-resources
링크 복사

Display the full list of API resources that the server supports.

Example: List the supported API resources

$ oc api-resources
Copy to Clipboard Toggle word wrap

4.5.2. api-versions
링크 복사

Display the full list of API versions that the server supports.

Example: List the supported API versions

$ oc api-versions
Copy to Clipboard Toggle word wrap

4.5.3. auth
링크 복사

Inspect permissions and reconcile RBAC roles.

Example: Check whether the current user can read Pod logs

$ oc auth can-i get pods --subresource=log
Copy to Clipboard Toggle word wrap

Example: Reconcile RBAC roles and permissions from a file

$ oc auth reconcile -f policy.json
Copy to Clipboard Toggle word wrap

4.5.4. cluster-info
링크 복사

Display the address of the master and cluster services.

Example: Display cluster information

$ oc cluster-info
Copy to Clipboard Toggle word wrap

4.5.5. convert
링크 복사

Convert a YAML or JSON configuration file to a different API version and print to standard output (stdout).

Example: Convert pod.yaml to the latest version

$ oc convert -f pod.yaml
Copy to Clipboard Toggle word wrap

4.5.6. extract
링크 복사

Extract the contents of a ConfigMap or secret. Each key in the ConfigMap or secret is created as a separate file with the name of the key.

Example: Download the contents of the ruby-1-ca ConfigMap to the current directory

$ oc extract configmap/ruby-1-ca
Copy to Clipboard Toggle word wrap

Example: Print the contents of the ruby-1-ca ConfigMap to stdout

$ oc extract configmap/ruby-1-ca --to=-
Copy to Clipboard Toggle word wrap

4.5.7. idle
링크 복사

Idle scalable resources. An idled Service will automatically become unidled when it receives traffic or it can be manually unidled using the oc scale command.

Example: Idle the ruby-app Service

$ oc idle ruby-app
Copy to Clipboard Toggle word wrap

4.5.8. image
링크 복사

Manage images in your OpenShift Container Platform cluster.

Example: Copy an image to another tag

$ oc image mirror myregistry.com/myimage:latest myregistry.com/myimage:stable
Copy to Clipboard Toggle word wrap

4.5.9. observe
링크 복사

Observe changes to resources and take action on them.

Example: Observe changes to Services

$ oc observe services
Copy to Clipboard Toggle word wrap

4.5.10. patch
링크 복사

Updates one or more fields of an object using strategic merge patch in JSON or YAML format.

Example: Update the spec.unschedulable field for node node1 to true

$ oc patch node/node1 -p '{"spec":{"unschedulable":true}}'
Copy to Clipboard Toggle word wrap

Note

If you must patch a Custom Resource Definition, you must include the --type merge option in the command.

4.5.11. policy
링크 복사

Manage authorization policies.

Example: Add the edit role to user1 for the current project

$ oc policy add-role-to-user edit user1
Copy to Clipboard Toggle word wrap

4.5.12. process
링크 복사

Process a template into a list of resources.

Example: Convert template.json to a resource list and pass to oc create

$ oc process -f template.json | oc create -f -
Copy to Clipboard Toggle word wrap

4.5.13. registry
링크 복사

Manage the integrated registry on OpenShift Container Platform.

Example: Display information about the integrated registry

$ oc registry info
Copy to Clipboard Toggle word wrap

4.5.14. replace
링크 복사

Modify an existing object based on the contents of the specified configuration file.

Example: Update a Pod using the content in pod.json

$ oc replace -f pod.json
Copy to Clipboard Toggle word wrap

4.6. Settings CLI commands
링크 복사

4.6.1. completion
링크 복사

Output shell completion code for the specified shell.

Example: Display completion code for Bash

$ oc completion bash
Copy to Clipboard Toggle word wrap

4.6.2. config
링크 복사

Manage the client configuration files.

Example: Display the current configuration

$ oc config view
Copy to Clipboard Toggle word wrap

Example: Switch to a different context

$ oc config use-context test-context
Copy to Clipboard Toggle word wrap

4.6.3. logout
링크 복사

Log out of the current session.

Example: End the current session

$ oc logout
Copy to Clipboard Toggle word wrap

4.6.4. whoami
링크 복사

Display information about the current session.

Example: Display the currently authenticated user

$ oc whoami
Copy to Clipboard Toggle word wrap

4.7. Other developer CLI commands
링크 복사

4.7.1. help
링크 복사

Display general help information for the CLI and a list of available commands.

Example: Display available commands

$ oc help
Copy to Clipboard Toggle word wrap

Example: Display the help for the new-project command

$ oc help new-project
Copy to Clipboard Toggle word wrap

4.7.2. plugin
링크 복사

List the available plug-ins on the user’s PATH.

Example: List available plug-ins

$ oc plugin list
Copy to Clipboard Toggle word wrap

4.7.3. version
링크 복사

Display the oc client and server versions.

Example: Display version information

$ oc version
Copy to Clipboard Toggle word wrap

Chapter 5. Administrator CLI commands
링크 복사

5.1. Cluster management CLI commands
링크 복사

5.1.1. must-gather
링크 복사

Bulk collect data about the current state of your cluster to debug issues.

Example: Gather debugging information

$ oc adm must-gather
Copy to Clipboard Toggle word wrap

5.1.2. top
링크 복사

Show usage statistics of resources on the server.

Example: Show CPU and memory usage for Pods

$ oc adm top pods
Copy to Clipboard Toggle word wrap

Example: Show usage statistics for images

$ oc adm top images
Copy to Clipboard Toggle word wrap

5.2. Node management CLI commands
링크 복사

5.2.1. cordon
링크 복사

Mark a node as unschedulable. Manually marking a node as unschedulable blocks any new pods from being scheduled on the node, but does not affect existing pods on the node.

Example: Mark node1 as unschedulable

$ oc adm cordon node1
Copy to Clipboard Toggle word wrap

5.2.2. drain
링크 복사

Drain a node in preparation for maintenance.

Example: Drain node1

$ oc adm drain node1
Copy to Clipboard Toggle word wrap

5.2.3. node-logs
링크 복사

Display and filter node logs.

Example: Get logs for NetworkManager

$ oc adm node-logs --role master -u NetworkManager.service
Copy to Clipboard Toggle word wrap

5.2.4. taint
링크 복사

Update the taints on one or more nodes.

Example: Add a taint to dedicate a node for a set of users

$ oc adm taint nodes node1 dedicated=groupName:NoSchedule
Copy to Clipboard Toggle word wrap

Example: Remove the taints with key dedicated from node node1

$ oc adm taint nodes node1 dedicated-
Copy to Clipboard Toggle word wrap

5.2.5. uncordon
링크 복사

Mark a node as schedulable.

Example: Mark node1 as schedulable

$ oc adm uncordon node1
Copy to Clipboard Toggle word wrap

5.3. Security and policy CLI commands
링크 복사

5.3.1. certificate
링크 복사

Approve or reject certificate signing requests (CSRs).

Example: Approve a CSR

$ oc adm certificate approve csr-sqgzp
Copy to Clipboard Toggle word wrap

5.3.2. groups
링크 복사

Manage groups in your cluster.

Example: Create a new group

$ oc adm groups new my-group
Copy to Clipboard Toggle word wrap

5.3.3. new-project
링크 복사

Create a new project and specify administrative options.

Example: Create a new project using a node selector

$ oc adm new-project myproject --node-selector='type=user-node,region=east'
Copy to Clipboard Toggle word wrap

5.3.4. pod-network
링크 복사

Manage Pod networks in the cluster.

Example: Isolate project1 and project2 from other non-global projects

$ oc adm pod-network isolate-projects project1 project2
Copy to Clipboard Toggle word wrap

5.3.5. policy
링크 복사

Manage roles and policies on the cluster.

Example: Add the edit role to user1 for all projects

$ oc adm policy add-cluster-role-to-user edit user1
Copy to Clipboard Toggle word wrap

Example: Add the privileged security context constraint to a service account

$ oc adm policy add-scc-to-user privileged -z myserviceaccount
Copy to Clipboard Toggle word wrap

5.4. Maintenance CLI commands
링크 복사

5.4.1. migrate
링크 복사

Migrate resources on the cluster to a new version or format depending on the subcommand used.

Example: Perform an update of all stored objects

$ oc adm migrate storage
Copy to Clipboard Toggle word wrap

Example: Perform an update of only Pods

$ oc adm migrate storage --include=pods
Copy to Clipboard Toggle word wrap

5.4.2. prune
링크 복사

Remove older versions of resources from the server.

Example: Prune older builds including those whose BuildConfigs no longer exist

$ oc adm prune builds --orphans
Copy to Clipboard Toggle word wrap

5.5. Configuration CLI commands
링크 복사

5.5.1. create-api-client-config
링크 복사

Create a client configuration for connecting to the server. This creates a folder containing a client certificate, a client key, a server certificate authority, and a kubeconfig file for connecting to the master as the provided user.

Example: Generate a client certificate for a proxy

$ oc adm create-api-client-config \
  --certificate-authority='/etc/origin/master/proxyca.crt' \
  --client-dir='/etc/origin/master/proxy' \
  --signer-cert='/etc/origin/master/proxyca.crt' \
  --signer-key='/etc/origin/master/proxyca.key' \
  --signer-serial='/etc/origin/master/proxyca.serial.txt' \
  --user='system:proxy'
Copy to Clipboard Toggle word wrap

5.5.2. create-bootstrap-policy-file
링크 복사

Create the default bootstrap policy.

Example: Create a file called policy.json with the default bootstrap policy

$ oc adm create-bootstrap-policy-file --filename=policy.json
Copy to Clipboard Toggle word wrap

5.5.3. create-bootstrap-project-template
링크 복사

Create a bootstrap project template.

Example: Output a bootstrap project template in YAML format to stdout

$ oc adm create-bootstrap-project-template -o yaml
Copy to Clipboard Toggle word wrap

5.5.4. create-error-template
링크 복사

Create a template for customizing the error page.

Example: Output a template for the error page to stdout

$ oc adm create-error-template
Copy to Clipboard Toggle word wrap

5.5.5. create-kubeconfig
링크 복사

Creates a basic .kubeconfig file from client certificates.

Example: Create a .kubeconfig file with the provided client certificates

$ oc adm create-kubeconfig \
  --client-certificate=/path/to/client.crt \
  --client-key=/path/to/client.key \
  --certificate-authority=/path/to/ca.crt
Copy to Clipboard Toggle word wrap

5.5.6. create-login-template
링크 복사

Create a template for customizing the login page.

Example: Output a template for the login page to stdout

$ oc adm create-login-template
Copy to Clipboard Toggle word wrap

5.5.7. create-provider-selection-template
링크 복사

Create a template for customizing the provider selection page.

Example: Output a template for the provider selection page to stdout

$ oc adm create-provider-selection-template
Copy to Clipboard Toggle word wrap

5.6. Other Administrator CLI commands
링크 복사

5.6.1. build-chain
링크 복사

Output the inputs and dependencies of any builds.

Example: Output dependencies for the perl imagestream

$ oc adm build-chain perl
Copy to Clipboard Toggle word wrap

5.6.2. completion
링크 복사

Output shell completion code for the oc adm commands for the specified shell.

Example: Display oc adm completion code for Bash

$ oc adm completion bash
Copy to Clipboard Toggle word wrap

5.6.3. config
링크 복사

Manage the client configuration files. This command has the same behavior as the oc config command.

Example: Display the current configuration

$ oc adm config view
Copy to Clipboard Toggle word wrap

Example: Switch to a different context

$ oc adm config use-context test-context
Copy to Clipboard Toggle word wrap

5.6.4. release
링크 복사

Manage various aspects of the OpenShift Container Platform release process, such as viewing information about a release or inspecting the contents of a release.

Example: Generate a changelog between two releases and save to changelog.md

$ oc adm release info --changelog=/tmp/git \
    quay.io/openshift-release-dev/ocp-release:4.1.0-rc.7 \
    quay.io/openshift-release-dev/ocp-release:4.1.0 \
    > changelog.md
Copy to Clipboard Toggle word wrap

5.6.5. verify-image-signature
링크 복사

Verify the image signature of an image imported to the internal registry using the local public GPG key.

Example: Verify the nodejs image signature

$ oc adm verify-image-signature \
    sha256:2bba968aedb7dd2aafe5fa8c7453f5ac36a0b9639f1bf5b03f95de325238b288 \
    --expected-identity 172.30.1.1:5000/openshift/nodejs:latest \
    --public-key /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release \
    --save
Copy to Clipboard Toggle word wrap

Chapter 6. Usage of oc and kubectl commands
링크 복사

Kubernetes' command line interface (CLI), kubectl, can be used to run commands against a Kubernetes cluster. Because OpenShift Container Platform is a certified Kubernetes distribution, you can use the supported kubectl binaries that ship with OpenShift Container Platform, or you can gain extended functionality by using the oc binary.

6.1. The oc binary
링크 복사

The oc binary offers the same capabilities as the kubectl binary, but it extends to natively support additional OpenShift Container Platform features, including:

  • Full support for OpenShift Container Platform resources

    Resources such as DeploymentConfigs, BuildConfigs, Routes, ImageStreams, and ImageStreamTags are specific to OpenShift Container Platform distributions, and build upon standard Kubernetes primitives.

  • Authentication

    The oc binary offers a built-in login command that allows authentication and enables you to work with OpenShift Container Platform projects, which map Kubernetes namespaces to authenticated users. See Understanding authentication for more information.

  • Additional commands

    The additional command oc new-app, for example, makes it easier to get new applications started using existing source code or pre-built images. Similarly, the additional command oc new-project makes it easier to start a project that you can switch to as your default.

6.2. The kubectl binary
링크 복사

The kubectl binary is provided as a means to support existing workflows and scripts for new OpenShift Container Platform users coming from a standard Kubernetes environment, or for those who prefer to use the kubectl CLI. Existing users of kubectl can continue to use the binary to interact with Kubernetes primitives, with no changes required to the OpenShift Container Platform cluster.

For more information, see the kubectl docs.

------------------------ Last updated: 2020-02-28 ------------------------

Legal Notice
링크 복사

Copyright © 2025 Red Hat

OpenShift documentation is licensed under the Apache License 2.0 (https://www.apache.org/licenses/LICENSE-2.0).

Modified versions must remove all Red Hat trademarks.

Portions adapted from https://github.com/kubernetes-incubator/service-catalog/ with modifications by Red Hat.

Red Hat, Red Hat Enterprise Linux, the Red Hat logo, the Shadowman logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries.

Linux® is the registered trademark of Linus Torvalds in the United States and other countries.

Java® is a registered trademark of Oracle and/or its affiliates.

XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries.

MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries.

Node.js® is an official trademark of Joyent. Red Hat Software Collections is not formally related to or endorsed by the official Joyent Node.js open source or commercial project.

The OpenStack® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation’s permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community.

All other trademarks are the property of their respective owners.

맨 위로 이동
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2025 Red Hat