View last applied configuration

Show the last-applied-configuration annotation; diff intent vs live state

kubectl apply view-last-applied deploy/<name> -n <ns> -o yaml
tool
kubectl73 commands
tags
kubectlgitopstroubleshooting

More kubectl commands

  • Warning events across all namespaces
    kubectl get events -A --field-selector type=Warning --sort-by=.lastTimestamp

    Cluster-wide Warning events newest last; fast triage of failing workloads

  • Find all failed pods cluster-wide
    kubectl get pods -A --field-selector status.phase=Failed

    List pods in Failed phase across namespaces for cleanup or investigation

  • Wait on a jsonpath condition
    kubectl wait --for=jsonpath='{.status.loadBalancer.ingress[0].ip}' svc/<name> -n <ns> --timeout=120s

    Block in CI until a Service gets its external IP; works on any jsonpath field

  • Impersonate a user and group
    kubectl auth can-i list secrets -n <ns> --as=<name> --as-group=system:serviceaccounts

    Test RBAC as another identity without their kubeconfig; needs impersonate verb

  • Sort pods by container restart count
    kubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"\t"}{.metadata.name}{"\t"}{.status.containerStatuses[0].restartCount}{"\n"}{end}' | sort -k3 -rn | head

    Surface the most-restarting pods to catch crashloops fast

all 73 kubectl commands