OpenShift

oc login https://api.cluster.example.com:6443
oc login --token=<token> --server=https://api.cluster.example.com:6443
oc whoami
oc whoami --show-server
oc whoami --show-token

oc projects                         # daftar project yang bisa diakses
oc project my-project                # pindah project aktif
oc new-project my-project            # buat project baru
oc status                            # ringkasan resource project aktif
oc config current-context
oc config get-contexts

oc get all
oc get pods -o wide
oc get deploy,dc,sts,svc,route
oc describe pod/<pod>
oc describe deployment/<name>
oc get events --sort-by=.lastTimestamp

oc get deploy myapp -o yaml
oc get pod mypod -o json | jq '.status.containerStatuses'
oc get route myapp -o jsonpath='{.spec.host}'
oc explain deployment.spec.template.spec.containers

oc new-app nginx:latest --name web
oc new-app nodejs:20-ubi8~https://github.com/example/app.git --name api
oc expose svc/web                  # buat route dari service
oc get route web

oc scale deployment/myapp --replicas=3
oc rollout restart deployment/myapp
oc edit deployment/myapp
oc delete pod/<pod>                # controller akan membuat pod pengganti
oc delete all -l app=myapp

oc logs pod/<pod>
oc logs -f deployment/myapp
oc logs pod/<pod> -c <container>
oc logs pod/<pod> --previous        # log container sebelumnya setelah crash
oc logs --tail=100 -f deployment/myapp

oc exec -it pod/<pod> -- /bin/sh
oc exec pod/<pod> -- env
oc rsh pod/<pod>                   # shortcut shell OpenShift

oc debug deployment/myapp
oc debug pod/<pod>
oc debug node/<node-name>

# di debug node:
chroot /host
crictl ps
journalctl -u kubelet -n 100

oc expose deployment/myapp --port=8080
oc expose svc/myapp
oc get svc,route
oc describe route/myapp
oc delete route/myapp

oc create route edge myapp --service=myapp --port=8080
oc create route passthrough myapp --service=myapp
oc create route reencrypt myapp --service=myapp --dest-ca-cert=ca.crt
oc patch route/myapp -p '{"spec":{"tls":{"insecureEdgeTerminationPolicy":"Redirect"}}}'

oc run netshoot --rm -it --image=nicolaka/netshoot -- /bin/bash
curl -v http://myapp:8080/health
dig myapp.my-project.svc.cluster.local
nc -vz myapp 8080

oc create configmap app-config --from-literal=LOG_LEVEL=info
oc create configmap app-config --from-file=application.yaml

oc create secret generic app-secret --from-literal=DB_PASSWORD='secret'
oc create secret generic tls-secret --from-file=tls.crt --from-file=tls.key

oc set env deployment/myapp --from=configmap/app-config
oc set env deployment/myapp --from=secret/app-secret
oc set volume deployment/myapp --add --type=configmap --configmap-name=app-config --mount-path=/etc/app
oc rollout restart deployment/myapp

oc new-build nodejs:20-ubi8~https://github.com/example/app.git --name=myapp
oc start-build myapp
oc start-build myapp --follow
oc logs -f bc/myapp
oc get build,bc,is

oc new-build --binary --name=myapp -l app=myapp
oc start-build myapp --from-dir=. --follow
oc new-app myapp:latest
oc expose svc/myapp

oc registry info
oc get imagestream
oc import-image nginx:latest --from=docker.io/library/nginx:latest --confirm
oc tag myapp:latest myapp:stable
oc set image deployment/myapp myapp=image-registry.openshift-image-registry.svc:5000/project/myapp:stable

oc rollout status deployment/myapp
oc rollout history deployment/myapp
oc rollout undo deployment/myapp
oc rollout restart deployment/myapp

oc set image deployment/myapp myapp=quay.io/example/myapp:v2
oc set env deployment/myapp FEATURE_FLAG=true
oc set resources deployment/myapp --limits=cpu=500m,memory=512Mi --requests=cpu=100m,memory=128Mi
oc rollout status deployment/myapp

oc auth can-i get pods
oc auth can-i create deployments -n my-project
oc auth can-i --list
oc policy who-can get secrets

oc create serviceaccount deployer
oc adm policy add-role-to-user edit alice -n my-project
oc adm policy add-role-to-user view system:serviceaccount:my-project:deployer
oc set serviceaccount deployment/myapp deployer

oc get pod <pod> -o wide
oc describe pod/<pod>
oc logs pod/<pod> --all-containers
oc logs pod/<pod> --previous
oc get events --sort-by=.lastTimestamp | tail -30

oc describe pod/<pod> | grep -A5 -i image
oc get secret
oc create secret docker-registry regcred \
  --docker-server=registry.example.com \
  --docker-username=<user> \
  --docker-password=<password>
oc secrets link default regcred --for=pull

oc describe quota
oc describe limitrange
oc adm top pods
oc adm top nodes
oc get pod <pod> -o jsonpath='{.spec.containers[*].resources}'