@@ -80,12 +80,12 @@ Deny a certificate signing request
80
80
81
81
82
82
== oc adm copy-to-node
83
- Copies specified files to the node.
83
+ Copy specified files to the node
84
84
85
85
.Example usage
86
86
[source,bash,options="nowrap"]
87
87
----
88
- # copy a new bootstrap kubeconfig file to node-0
88
+ # Copy a new bootstrap kubeconfig file to node-0
89
89
oc adm copy-to-node --copy=new-bootstrap-kubeconfig=/etc/kubernetes/kubeconfig node/node-0
90
90
----
91
91
@@ -340,31 +340,72 @@ Create a new project
340
340
341
341
342
342
343
+ == oc adm node-image create
344
+ Create an ISO image for booting the nodes to be added to the target cluster
345
+
346
+ .Example usage
347
+ [source,bash,options="nowrap"]
348
+ ----
349
+ # Create the ISO image and download it in the current folder
350
+ oc adm node-image create
351
+
352
+ # Use a different assets folder
353
+ oc adm node-image create --dir=/tmp/assets
354
+
355
+ # Specify a custom image name
356
+ oc adm node-image create -o=my-node.iso
357
+
358
+ # Create an ISO to add a single node without using the configuration file
359
+ oc adm node-image create --mac-address=00:d8:e7:c7:4b:bb
360
+
361
+ # Create an ISO to add a single node with a root device hint and without
362
+ # using the configuration file
363
+ oc adm node-image create --mac-address=00:d8:e7:c7:4b:bb --root-device-hint=deviceName:/dev/sda
364
+ ----
365
+
366
+
367
+
368
+ == oc adm node-image monitor
369
+ Monitor new nodes being added to an OpenShift cluster
370
+
371
+ .Example usage
372
+ [source,bash,options="nowrap"]
373
+ ----
374
+ # Monitor a single node being added to a cluster
375
+ oc adm node-image monitor --ip-addresses 192.168.111.83
376
+
377
+ # Monitor multiple nodes being added to a cluster by separating each
378
+ IP address with a comma
379
+ oc adm node-image monitor --ip-addresses 192.168.111.83,192.168.111.84
380
+ ----
381
+
382
+
383
+
343
384
== oc adm node-logs
344
385
Display and filter node logs
345
386
346
387
.Example usage
347
388
[source,bash,options="nowrap"]
348
389
----
349
- # Show kubelet logs from all masters
390
+ # Show kubelet logs from all control plane nodes
350
391
oc adm node-logs --role master -u kubelet
351
392
352
- # See what logs are available in masters in /var/log
393
+ # See what logs are available in control plane nodes in /var/log
353
394
oc adm node-logs --role master --path=/
354
395
355
- # Display cron log file from all masters
396
+ # Display cron log file from all control plane nodes
356
397
oc adm node-logs --role master --path=cron
357
398
----
358
399
359
400
360
401
361
402
== oc adm ocp-certificates monitor-certificates
362
- Watch platform certificates.
403
+ Watch platform certificates
363
404
364
405
.Example usage
365
406
[source,bash,options="nowrap"]
366
407
----
367
- # Watch platform certificates.
408
+ # Watch platform certificates
368
409
oc adm ocp-certificates monitor-certificates
369
410
----
370
411
@@ -376,7 +417,7 @@ Regenerate client and serving certificates of an OpenShift cluster
376
417
.Example usage
377
418
[source,bash,options="nowrap"]
378
419
----
379
- # Regenerate a leaf certificate contained in a particular secret.
420
+ # Regenerate a leaf certificate contained in a particular secret
380
421
oc adm ocp-certificates regenerate-leaf -n openshift-config-managed secret/kube-controller-manager-client-cert-key
381
422
----
382
423
@@ -403,7 +444,7 @@ Regenerate the top level certificates in an OpenShift cluster
403
444
.Example usage
404
445
[source,bash,options="nowrap"]
405
446
----
406
- # Regenerate the signing certificate contained in a particular secret.
447
+ # Regenerate the signing certificate contained in a particular secret
407
448
oc adm ocp-certificates regenerate-top-level -n openshift-kube-apiserver-operator secret/loadbalancer-serving-signer-key
408
449
----
409
450
@@ -484,6 +525,30 @@ Make project network global
484
525
485
526
486
527
528
+ == oc adm policy add-cluster-role-to-group
529
+ Add a role to groups for all projects in the cluster
530
+
531
+ .Example usage
532
+ [source,bash,options="nowrap"]
533
+ ----
534
+ # Add the 'cluster-admin' cluster role to the 'cluster-admins' group
535
+ oc adm policy add-cluster-role-to-group cluster-admin cluster-admins
536
+ ----
537
+
538
+
539
+
540
+ == oc adm policy add-cluster-role-to-user
541
+ Add a role to users for all projects in the cluster
542
+
543
+ .Example usage
544
+ [source,bash,options="nowrap"]
545
+ ----
546
+ # Add the 'system:build-strategy-docker' cluster role to the 'devuser' user
547
+ oc adm policy add-cluster-role-to-user system:build-strategy-docker devuser
548
+ ----
549
+
550
+
551
+
487
552
== oc adm policy add-role-to-user
488
553
Add a role to users or service accounts for the current project
489
554
@@ -526,6 +591,30 @@ Add a security context constraint to users or a service account
526
591
527
592
528
593
594
+ == oc adm policy remove-cluster-role-from-group
595
+ Remove a role from groups for all projects in the cluster
596
+
597
+ .Example usage
598
+ [source,bash,options="nowrap"]
599
+ ----
600
+ # Remove the 'cluster-admin' cluster role from the 'cluster-admins' group
601
+ oc adm policy remove-cluster-role-from-group cluster-admin cluster-admins
602
+ ----
603
+
604
+
605
+
606
+ == oc adm policy remove-cluster-role-from-user
607
+ Remove a role from users for all projects in the cluster
608
+
609
+ .Example usage
610
+ [source,bash,options="nowrap"]
611
+ ----
612
+ # Remove the 'system:build-strategy-docker' cluster role from the 'devuser' user
613
+ oc adm policy remove-cluster-role-from-user system:build-strategy-docker devuser
614
+ ----
615
+
616
+
617
+
529
618
== oc adm policy scc-review
530
619
Check which service account can create a pod
531
620
@@ -687,7 +776,7 @@ Lists rendered MachineConfigs in an OpenShift cluster
687
776
688
777
689
778
== oc adm reboot-machine-config-pool
690
- Initiate reboot of the specified MachineConfigPool.
779
+ Initiate reboot of the specified MachineConfigPool
691
780
692
781
.Example usage
693
782
[source,bash,options="nowrap"]
@@ -800,18 +889,18 @@ Create a new OpenShift release
800
889
801
890
802
891
== oc adm restart-kubelet
803
- Restarts kubelet on the specified nodes
892
+ Restart kubelet on the specified nodes
804
893
805
894
.Example usage
806
895
[source,bash,options="nowrap"]
807
896
----
808
- # Restart all the nodes, 10% at a time
897
+ # Restart all the nodes, 10% at a time
809
898
oc adm restart-kubelet nodes --all --directive=RemoveKubeletKubeconfig
810
899
811
- # Restart all the nodes, 20 nodes at a time
900
+ # Restart all the nodes, 20 nodes at a time
812
901
oc adm restart-kubelet nodes --all --parallelism=20 --directive=RemoveKubeletKubeconfig
813
902
814
- # Restart all the nodes, 15% at a time
903
+ # Restart all the nodes, 15% at a time
815
904
oc adm restart-kubelet nodes --all --parallelism=15% --directive=RemoveKubeletKubeconfig
816
905
817
906
# Restart all the masters at the same time
@@ -976,12 +1065,12 @@ Wait for nodes to reboot after running `oc adm reboot-machine-config-pool`
976
1065
977
1066
978
1067
== oc adm wait-for-stable-cluster
979
- wait for the platform operators to become stable
1068
+ Wait for the platform operators to become stable
980
1069
981
1070
.Example usage
982
1071
[source,bash,options="nowrap"]
983
1072
----
984
- # Wait for all clusteroperators to become stable
1073
+ # Wait for all cluster operators to become stable
985
1074
oc adm wait-for-stable-cluster
986
1075
987
1076
# Consider operators to be stable if they report as such for 5 minutes straight
0 commit comments