IBM Cloud Kubernetes Service CLI 映射
此页面列示在 CLI 中构造的所有 ibmcloud ks 命令。 如需了解特定命令的详细信息,请点击该命令或参阅 IBM Cloud Kubernetes Service CLI参考。
api 命令
查看当前的 API 端点。
* [`ibmcloud ks api`](/docs/containers?topic=containers-kubernetes-service-cli#api-cli)
api-key 命令
查看有关集群的 API 密钥的信息或将其重置为新密钥。
* [`ibmcloud ks api-key info`](/docs/containers?topic=containers-kubernetes-service-cli#api-key-info-cli)
* [`ibmcloud ks api-key reset`](/docs/containers?topic=containers-kubernetes-service-cli#api-key-reset-cli)
cluster 命令
查看和修改集群和集群服务设置。
cluster addon: 查看、启用、更新和禁用集群附加组件。cluster ca: 管理集群的证书颁发机构(CA)证书。cluster create: 创建经典集群或 VPC 集群。cluster image-security: 管理集群中的镜像安全策略执行。cluster master: 查看和修改集群的主节点。cluster pull-secret: 管理集群用于从 IBM Cloud Container Registry 获取镜像的镜像拉取密钥。cluster service: 在集群上查看、绑定和解除绑定 IBM Cloud 服务。cluster subnet: 为经典集群添加并创建可移植子网。ibmcloud ks cluster addon disable acmibmcloud ks cluster addon disable alb-oauth-proxyibmcloud ks cluster addon disable cluster-autoscaleribmcloud ks cluster addon disable debug-tool- **Beta **
ibmcloud ks cluster addon disable headlamp ibmcloud ks cluster addon disable hpcs-router- **Beta **
ibmcloud ks cluster addon disable ibm-storage-operator ibmcloud ks cluster addon disable image-key-synchronizeribmcloud ks cluster addon disable istio- 不推荐
ibmcloud ks cluster addon disable istio-extras - 不推荐
ibmcloud ks cluster addon disable istio-sample-bookinfo ibmcloud ks cluster addon disable knativeibmcloud ks cluster addon disable kube-terminalibmcloud ks cluster addon disable openshift-data-foundationibmcloud ks cluster addon disable static-routeibmcloud ks cluster addon disable vpc-block-csi-driveribmcloud ks cluster addon enable acmibmcloud ks cluster addon enable alb-oauth-proxyibmcloud ks cluster addon enable cluster-autoscaleribmcloud ks cluster addon enable debug-tool- **Beta **
ibmcloud ks cluster addon enable headlamp ibmcloud ks cluster addon enable hpcs-router- **Beta **
ibmcloud ks cluster addon enable ibm-storage-operator ibmcloud ks cluster addon enable image-key-synchronizeribmcloud ks cluster addon enable istio- 不推荐
ibmcloud ks cluster addon enable istio-extras - 不推荐
ibmcloud ks cluster addon enable istio-sample-bookinfo ibmcloud ks cluster addon enable openshift-data-foundationibmcloud ks cluster addon enable static-routeibmcloud ks cluster addon enable vpc-block-csi-driveribmcloud ks cluster addon getibmcloud ks cluster addon lsibmcloud ks cluster addon optionsibmcloud ks cluster addon update acmibmcloud ks cluster addon update alb-oauth-proxyibmcloud ks cluster addon update cluster-autoscaleribmcloud ks cluster addon update debug-tool- **Beta **
ibmcloud ks cluster addon update headlamp ibmcloud ks cluster addon update hpcs-router- **Beta **
ibmcloud ks cluster addon update ibm-storage-operator ibmcloud ks cluster addon update image-key-synchronizeribmcloud ks cluster addon update istio- 不推荐
ibmcloud ks cluster addon update istio-extras - 不推荐
ibmcloud ks cluster addon update istio-sample-bookinfo ibmcloud ks cluster addon update knativeibmcloud ks cluster addon update kube-terminalibmcloud ks cluster addon update openshift-data-foundationibmcloud ks cluster addon update static-routeibmcloud ks cluster addon update vpc-block-csi-driveribmcloud ks cluster addon versionsibmcloud ks cluster ca createibmcloud ks cluster ca getibmcloud ks cluster ca rotateibmcloud ks cluster ca statusibmcloud ks cluster configibmcloud ks cluster create classicibmcloud ks cluster create satelliteibmcloud ks cluster create vpc-classicibmcloud ks cluster create vpc-gen2ibmcloud ks cluster getibmcloud ks cluster image-security disableibmcloud ks cluster image-security enableibmcloud ks cluster lsibmcloud ks cluster master audit-webhook getibmcloud ks cluster master audit-webhook setibmcloud ks cluster master audit-webhook unsetibmcloud ks cluster master console-oauth-access getibmcloud ks cluster master console-oauth-access setibmcloud ks cluster master pod-security getibmcloud ks cluster master pod-security policy disableibmcloud ks cluster master pod-security policy enableibmcloud ks cluster master pod-security policy getibmcloud ks cluster master pod-security setibmcloud ks cluster master pod-security unset- 不推荐
ibmcloud ks cluster master private-service-endpoint allowlist add - 不推荐
ibmcloud ks cluster master private-service-endpoint allowlist disable - 不推荐
ibmcloud ks cluster master private-service-endpoint allowlist enable - 不推荐
ibmcloud ks cluster master private-service-endpoint allowlist get - 不推荐
ibmcloud ks cluster master private-service-endpoint allowlist rm ibmcloud ks cluster master private-service-endpoint enableibmcloud ks cluster master public-service-endpoint disableibmcloud ks cluster master public-service-endpoint enableibmcloud ks cluster master refreshibmcloud ks cluster master satellite-service-endpoint allowlist addibmcloud ks cluster master satellite-service-endpoint allowlist disableibmcloud ks cluster master satellite-service-endpoint allowlist enableibmcloud ks cluster master satellite-service-endpoint allowlist getibmcloud ks cluster master satellite-service-endpoint allowlist rmibmcloud ks cluster master updateibmcloud ks cluster pull-secret applyibmcloud ks cluster rmibmcloud ks cluster service bindibmcloud ks cluster service lsibmcloud ks cluster service unbindibmcloud ks cluster subnet addibmcloud ks cluster subnet createibmcloud ks cluster subnet detach
credential 命令
设置和取消设置允许您通过 IBM Cloud 帐户访问 IBM Cloud 经典基础架构产品服务组合的凭证。
credential set: 设置凭据,以便您通过 IBM Cloud 账户访问 IBM Cloud 经典基础设施组合。 此命令适用于指定的资源组;如果未指定资源组,则适用于默认资源组。
experimental 命令
[有效期至 2026-10-21] 尝试使用新命令。 重要提示:此处的命令将在其描述中指定的[日期]之后失效。
experimental trusted-profile: [有效期至 2026-10-21] 查看并设置集群的受信任配置文件,或设置在资源组中创建的集群的默认受信任配置文件。experimental vni: [已在 2026-05-20 上停用! 请改用ibmcloud ks vni而不是] 在工作节点上挂载、卸载和列出虚拟网络接口。ibmcloud ks experimental trusted-profile default getibmcloud ks experimental trusted-profile default setibmcloud ks experimental trusted-profile getibmcloud ks experimental trusted-profile setibmcloud ks experimental vni attach baremetalibmcloud ks experimental vni attach virtualibmcloud ks experimental vni detachibmcloud ks experimental vni ls
flavor 命令
正在获取与类型模板相关的信息。 类型将确定可供每个工作程序节点使用的虚拟 CPU、内存和磁盘空间。
* [`ibmcloud ks flavor get`](/docs/containers?topic=containers-kubernetes-service-cli#flavor-get-cli)
* [`ibmcloud ks flavor ls`](/docs/containers?topic=containers-kubernetes-service-cli#flavor-ls-cli)
infra-permissions 命令
查看有关基础架构许可权的信息,此许可权允许您通过 IBM Cloud 帐户访问 IBM Cloud 经典基础架构产品服务组合。
* [`ibmcloud ks infra-permissions get`](/docs/containers?topic=containers-kubernetes-service-cli#infra-permissions-get-cli)
ingress 命令
查看和修改 Ingress 服务和设置
ingress alb: 查看和配置 Ingress 应用程序负载均衡器 (ALB)。ingress domain: 管理集群的 Ingress 域名。ingress instance: 管理已注册的 IBM Cloud Secrets Manager 实例。ingress load-balancer: 修改集群中公开 Ingress ALB 的负载均衡器。ingress secret: 管理集群中的 Ingress 密钥。ingress security: 修改集群的入站安全配置。ingress status-report: 查看和配置 Ingress 状态报告。ibmcloud ks ingress alb autoscale getibmcloud ks ingress alb autoscale setibmcloud ks ingress alb autoscale unsetibmcloud ks ingress alb autoupdate disableibmcloud ks ingress alb autoupdate enableibmcloud ks ingress alb autoupdate getibmcloud ks ingress alb create classicibmcloud ks ingress alb create vpc-gen2ibmcloud ks ingress alb disableibmcloud ks ingress alb enable classicibmcloud ks ingress alb enable vpc-gen2ibmcloud ks ingress alb getibmcloud ks ingress alb health-checker disableibmcloud ks ingress alb health-checker enableibmcloud ks ingress alb health-checker getibmcloud ks ingress alb lsibmcloud ks ingress alb updateibmcloud ks ingress alb versionsibmcloud ks ingress domain createibmcloud ks ingress domain default replaceibmcloud ks ingress domain getibmcloud ks ingress domain lsibmcloud ks ingress domain rmibmcloud ks ingress domain secret regenerateibmcloud ks ingress domain secret rmibmcloud ks ingress domain updateibmcloud ks ingress instance default setibmcloud ks ingress instance default unsetibmcloud ks ingress instance getibmcloud ks ingress instance lsibmcloud ks ingress instance registeribmcloud ks ingress instance unregisteribmcloud ks ingress load-balancer backend setibmcloud ks ingress load-balancer getibmcloud ks ingress load-balancer proxy-protocol disableibmcloud ks ingress load-balancer proxy-protocol enableibmcloud ks ingress secret createibmcloud ks ingress secret field addibmcloud ks ingress secret field lsibmcloud ks ingress secret field rmibmcloud ks ingress secret getibmcloud ks ingress secret lsibmcloud ks ingress secret rmibmcloud ks ingress secret updateibmcloud ks ingress security port80 disableibmcloud ks ingress security port80 enableibmcloud ks ingress security port80 getibmcloud ks ingress status-report disableibmcloud ks ingress status-report enableibmcloud ks ingress status-report getibmcloud ks ingress status-report ignored-errors addibmcloud ks ingress status-report ignored-errors lsibmcloud ks ingress status-report ignored-errors rm
kms 命令
查看和配置密钥管理服务集成。
kms crk: 列出并配置密钥管理服务实例的根密钥。kms instance: 查看并配置可用的密钥管理服务实例。
locations 命令
列出受支持的 IBM Cloud Kubernetes Service 位置。
* [`ibmcloud ks locations`](/docs/containers?topic=containers-kubernetes-service-cli#locations-cli)
logging 命令
从集群转发日志。
logging autoupdate: 管理集群中 Fluentd 插件的自动更新。logging config: 查看或修改集群的日志转发配置。logging filter: 查看或修改集群的日志过滤器。ibmcloud ks logging autoupdate disableibmcloud ks logging autoupdate enableibmcloud ks logging autoupdate getibmcloud ks logging config createibmcloud ks logging config getibmcloud ks logging config rmibmcloud ks logging config updateibmcloud ks logging filter createibmcloud ks logging filter getibmcloud ks logging filter rmibmcloud ks logging filter updateibmcloud ks logging refresh
messages 命令
查看当前用户消息。
* [`ibmcloud ks messages`](/docs/containers?topic=containers-kubernetes-service-cli#messages-cli)
nlb-dns 命令
在集群中创建并管理网络负载均衡器 (NLB) IP 地址的主机名,并管理主机名的运行状况检查监视器。
nlb-dns create: 创建 DNS 主机名。nlb-dns monitor: 为集群中的网络负载均衡器(NLB)IP 地址和主机名创建并管理健康检查监视器nlb-dns rm: 从 NLB 主机名中移除一个 NLB IP 或负载均衡器主机名。nlb-dns secret: 管理 NLB 子域的密钥。ibmcloud ks nlb-dns addibmcloud ks nlb-dns create classicibmcloud ks nlb-dns create vpc-gen2ibmcloud ks nlb-dns getibmcloud ks nlb-dns lsibmcloud ks nlb-dns monitor configureibmcloud ks nlb-dns monitor disableibmcloud ks nlb-dns monitor enableibmcloud ks nlb-dns monitor getibmcloud ks nlb-dns monitor lsibmcloud ks nlb-dns replaceibmcloud ks nlb-dns rm classicibmcloud ks nlb-dns rm vpc-gen2ibmcloud ks nlb-dns secret regenerateibmcloud ks nlb-dns secret rm
quota 命令
查看 IBM Cloud 帐户中集群相关资源的配额和限制。
* [`ibmcloud ks quota ls`](/docs/containers?topic=containers-kubernetes-service-cli#quota-ls-cli)
script 命令
重写调用 IBM Cloud Kubernetes Service 插件命令的脚本。 将旧结构的命令替换为 Beta 结构的命令。
* [`ibmcloud ks script update`](/docs/containers?topic=containers-kubernetes-service-cli#script-update-cli)
security-group 命令
对安全组运行操作。
* [`ibmcloud ks security-group ls`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-ls-cli)
* [`ibmcloud ks security-group reset`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-reset-cli)
* [`ibmcloud ks security-group sync`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-sync-cli)
storage 命令
查看和修改存储资源。
storage attachment: 查看和修改集群中工作节点的存储卷挂载情况。storage volume: 查看存储卷列表。- **Beta **
ibmcloud ks storage attachment create - **Beta **
ibmcloud ks storage attachment get - **Beta **
ibmcloud ks storage attachment ls - **Beta **
ibmcloud ks storage attachment rm - **Beta **
ibmcloud ks storage volume get - **Beta **
ibmcloud ks storage volume ls
- **Beta **
subnets 命令
列出 IBM Cloud 基础架构帐户中的可用便携式子网。
* [`ibmcloud ks subnets`](/docs/containers?topic=containers-kubernetes-service-cli#subnets-cli)
versions 命令
列出可用于 IBM Cloud Kubernetes Service 集群的所有容器平台版本。
* [`ibmcloud ks versions`](/docs/containers?topic=containers-kubernetes-service-cli#versions-cli)
vlan 命令
列出专区的公用和专用 VLAN,并查看 VLAN 生成状态。
vlan spanning: 查看您的 IBM Cloud 经典基础设施账户的VLAN跨域状态。
vni 命令
在工作节点上挂载、卸载和列出虚拟网络接口。
vni attach: 将一个虚拟网络接口连接到工作节点。
vpc 命令
了解有关 VPC 的信息并管理 VPC 集群。
vpc outbound-traffic-protection: 更改“默认安全”VPC 集群的出站流量保护设置。vpc secure-by-default: 修改 VPC 集群的“默认安全”网络设置。
webhook-create 命令
在集群中注册 Webhook。
* [`ibmcloud ks webhook-create`](/docs/containers?topic=containers-kubernetes-service-cli#webhook-create-cli)
worker 命令
查看和修改集群的工作程序节点。
* [`ibmcloud ks worker get`](/docs/containers?topic=containers-kubernetes-service-cli#worker-get-cli)
* [`ibmcloud ks worker ls`](/docs/containers?topic=containers-kubernetes-service-cli#worker-ls-cli)
* [`ibmcloud ks worker reboot`](/docs/containers?topic=containers-kubernetes-service-cli#worker-reboot-cli)
* [`ibmcloud ks worker reload`](/docs/containers?topic=containers-kubernetes-service-cli#worker-reload-cli)
* [`ibmcloud ks worker replace`](/docs/containers?topic=containers-kubernetes-service-cli#worker-replace-cli)
* [`ibmcloud ks worker rm`](/docs/containers?topic=containers-kubernetes-service-cli#worker-rm-cli)
* [`ibmcloud ks worker update`](/docs/containers?topic=containers-kubernetes-service-cli#worker-update-cli)
worker-pool 命令
查看和修改集群的工作程序池。
worker-pool create: 将一个工作节点池添加到集群中。 在将区域添加到工作程序池之前,不会创建任何工作程序节点。worker-pool label: 为工作池中的所有工作节点设置和移除自定义 Kubernetes 标签。worker-pool operating-system: 管理工作池的操作系统。worker-pool taint: 为工作池中的所有工作节点设置和移除 Kubernetes 污点。ibmcloud ks worker-pool create classicibmcloud ks worker-pool create satelliteibmcloud ks worker-pool create vpc-classicibmcloud ks worker-pool create vpc-gen2ibmcloud ks worker-pool getibmcloud ks worker-pool label rmibmcloud ks worker-pool label setibmcloud ks worker-pool lsibmcloud ks worker-pool operating-system setibmcloud ks worker-pool rebalanceibmcloud ks worker-pool resizeibmcloud ks worker-pool rmibmcloud ks worker-pool taint rmibmcloud ks worker-pool taint setibmcloud ks worker-pool zones
zone 命令
列出可用性区域并修改附加到工作程序池的区域。