Kubernetes Networking, Storage, and Config Cheat Sheet

kubectl get services -A

# Show services across namespaces.

kubectl describe service web -n payments

# Inspect selectors, endpoints, ports, and type.

kubectl get endpoints -n payments

# Show service endpoint IPs.

kubectl get endpointslices -n payments

# Inspect EndpointSlice objects used for service discovery.

kubectl get ingress -A

# Show ingress resources across namespaces.

kubectl describe ingress web -n payments

# Inspect rules, backends, and events.

kubectl port-forward deployment/web 8080:8080 -n payments

# Forward to a selected pod from a deployment.

kubectl expose pod debug-shell --port=8080 --target-port=8080 --name=debug-shell-svc -n tools

# Create a service from an existing pod.

kubectl get networkpolicies -A

# Show NetworkPolicy resources.

kubectl describe networkpolicy default-deny -n payments

# Inspect ingress and egress rules.

kubectl apply -f networkpolicy.yaml

# Create or update a NetworkPolicy manifest.

kubectl delete networkpolicy allow-metrics -n observability

# Remove a NetworkPolicy.

kubectl get pvc -A

# Show PersistentVolumeClaims across namespaces.

kubectl describe pvc data-postgres-0 -n data

# Inspect requested storage, status, and bound PV.

kubectl get pv

# Show cluster-wide PersistentVolumes.

kubectl describe pv pvc-12345678

# Inspect reclaim policy, claim ref, and backing class.

kubectl get storageclass

# Show available StorageClasses.

kubectl describe storageclass gp3

# Inspect provisioner and mount options.

kubectl patch pvc data-postgres-0 -n data -p '{"spec":{"resources":{"requests":{"storage":"200Gi"}}}}'

# Request a larger PVC size when the class supports expansion.

kubectl delete pvc cache-data -n payments

# Remove a PVC; PV behavior depends on reclaim policy.

kubectl get configmaps -A

# Show ConfigMaps across namespaces.

kubectl describe configmap app-config -n payments

# Inspect key-value data and metadata.

kubectl edit configmap app-config -n payments

# Update a ConfigMap live.

kubectl get secrets -A

# Show Secrets across namespaces.

kubectl describe secret app-secret -n payments

# Inspect secret type and key names without dumping values.

kubectl get secret app-secret -n payments -o jsonpath='{.data.API_KEY}'

# Print a base64-encoded secret value.

kubectl get secret app-secret -n payments -o jsonpath='{.data.API_KEY}' | base64 --decode

# Print a decoded secret value locally.

kubectl create secret generic app-env --from-env-file=.env.production -n payments

# Create a secret from an env file.

kubectl get nodes -o wide

# Show node roles, versions, and internal IPs.

kubectl describe node worker-02

# Inspect capacity, allocatable, taints, and conditions.

kubectl taint nodes worker-02 dedicated=ml:NoSchedule

# Add a taint to influence scheduling.

kubectl taint nodes worker-02 dedicated=ml:NoSchedule-

# Remove a taint from a node.

kubectl label node worker-02 nodepool=general --overwrite

# Apply a scheduling label to a node.

kubectl get pods -A --field-selector spec.nodeName=worker-02 -o wide

# See what is scheduled on a node.