Check who can do what (audit)

Show all permissions the current user has in a namespace

kubectl auth can-i --list -n <ns>
tool
kubectl73 commands
tags
rbacdebug

More kubectl commands

  • Delete all pods in namespace
    kubectl delete pods --all -n <ns>

    Force recreation of all pods — useful after ConfigMap changes

  • Get ingress list
    kubectl get ingress -A

    All Ingress resources with hosts and addresses

  • Dump all pod YAML to file
    kubectl get pods -n <ns> -o yaml > pods-dump.yaml

    Backup/inspect entire pod state in a namespace

  • Jsonpath — all container images
    kubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\t"}{range .spec.containers[*]}{.image}{"\n"}{end}{end}'

    Enumerate every container image running in the cluster

  • Switch kubeconfig context
    kubectl config use-context <context>

    Switch the active cluster context

all 73 kubectl commands