k8s 集群管理（k8s集群管理平台）

kubectl cluster-info

kubectl config get-clusters

kubectl config get-contexts

env

env | grep KUBE

#上方路径cat /home/r00t/.kube/config

#节点列表kubectl get nodes
#node1地址ping node1 -c 1
#node2地址ping node2 -c 1

kubectl get all

kubectl get namespaces

#获取Podkubectl get pod

#Pod详细信息kubectl describe pod <PodName>

#yaml格式显示Pod的详细信息kubectl get pod <pod-name> -o yaml

#获取所有pod信息kubectl get pods --all-namespaces -o wide

kubectl get service

kubectl describe service <ServiceName>

#deployment基础信息kubectl get deployment

#deployment详细信息kubectl describe deployment <deploymentName>

#系统日志cat /var/log/messages

#组件日志journalctl -u kube-apiserverjournalctl -u kube-schedulerjournalctl -u kubelet |tail

#容器日志docker logs <容器ID>

ls -al ~/ls -al ~/.sshcat ~/.ssh/id_rsa

cat ~/.bash_history

#查看面板pod和service状态kubectl get pods,svc -n kubernetes-dashboard -o wide

#查看serviceaccount和secretskubectl get sa,secrets -n kubernetes-dashboard

#查看tokenkubectl describe secrets kubernetes-dashboard-token-8kxnh -n kubernetes-dashboard

#查看tokenkubectl describe secret admin-myuser-token-jcj9d -n kubernetes-dashboard

env

env | grep KUBERNETES

ls -al

kubectl get nodes -o jsonpath=\\\'{range .items[*]}{.metadata.name}{\\\"\\\\t\\\"}{.status.nodeInfo.kernelVersion}{\\\"\\\\n\\\"}{end}\\\'

cat /var/run/secrets/kuberenetes.io/serviceaccount/token

#命令格式./cdk run k8s-secret-dump (auto|<service-account-token-path>)    #使用实例./cdk run k8s-secret-dump auto

#命令格式./cdk run k8s-psp-dump (auto|<service-account-token-path>
#使用实例./cdk run k8s-psp-dump auto2021/03/24 22:15:58 getting K8s api-server API addr.  Find K8s api-server in ENV: https://ip:84432021/03/24 22:15:58 trying to dump K8s Pod Security Policies with local service-account: token2021/03/24 22:15:58 requesting  /apis/policy/v1beta1/podsecuritypolicies2021/03/24 22:15:58 dump Pod Security Policies success, saved in:  k8s_pod_security_policies.json2021/03/24 22:15:58 requesting  /api/v1/namespaces/default/pods2021/03/24 22:15:58 K8S Pod Security Policies rule list:2021/03/24 22:15:58 rule { securityContext.hostPID: true } is not allowed.2021/03/24 22:15:58 rule { securityContext.hostIPC: true } is not allowed.2021/03/24 22:15:58 rule { volumes[0].hostPath.pathPrefix: \\\\\\\"/proc\\\\\\\" } is not allowed.2021/03/24 22:15:58 rule { volumes[1].hostPath.pathPrefix: \\\\\\\"/dev\\\\\\\" } is not allowed.2021/03/24 22:15:58 rule { volumes[2].hostPath.pathPrefix: \\\\\\\"/sys\\\\\\\" } is not allowed.2021/03/24 22:15:58 rule { volumes[3].hostPath.pathPrefix: \\\\\\\"/\\\\\\\" } is not allowed.2021/03/24 22:15:58 rule { containers[0].securityContext.capabilities.add: \\\\\\\"SYS_ADMIN\\\\\\\" } is not allowed.2021/03/24 22:15:58 rule { containers[0].securityContext.capabilities.add: \\\\\\\"SYS_PTRACE\\\\\\\" } is not allowed.