IBM Cloud Kubernetes Service CLI Map

This page lists all ibmcloud ks commands as they are structured in the CLI. For more details on a specific command, click the command or see the IBM Cloud Kubernetes Service CLI reference.

`api` commands

View the current API endpoint.

* [`ibmcloud ks api`](/docs/containers?topic=containers-kubernetes-service-cli#api-cli)

`api-key` commands

View information about the API key for a cluster or reset it to a new key.

* [`ibmcloud ks api-key info`](/docs/containers?topic=containers-kubernetes-service-cli#api-key-info-cli)
* [`ibmcloud ks api-key reset`](/docs/containers?topic=containers-kubernetes-service-cli#api-key-reset-cli)

`cluster` commands

View and modify cluster and cluster service settings.

cluster addon: View, enable, update, and disable cluster add-ons.
cluster ca: Manage the Certificate Authority (CA) certificates of a cluster.
cluster create: Create a classic or VPC cluster.
cluster image-security: Manage image security enforcement in your cluster.
cluster master: View and modify the master for a cluster.
cluster pull-secret: Manage image pull secrets for the cluster to access images in IBM Cloud Container Registry.
cluster service: View, bind, and unbind IBM Cloud services on a cluster.
cluster subnet: Add and create portable subnets for a classic cluster.

`credential` commands

Set and unset credentials that allow you to access the IBM Cloud classic infrastructure portfolio through your IBM Cloud account.

credential set: Set credentials that allow you to access the IBM Cloud classic infrastructure portfolio through your IBM Cloud account. This command applies to the targeted resource group, or to the default resource group if no resource group is targeted.

`experimental` commands

[Expires on 2026-10-21] Experiment with new commands. IMPORTANT: Commands here will retire after the [date] in their description.

experimental trusted-profile: [Expires on 2026-10-21] View and set the trusted profile on a cluster or the default trusted profile for clusters created in a resource-group.
experimental vni: [Deactivated on 2026-05-20! Use ibmcloud ks vni instead] Attach, detach, and list Virtual Network Interfaces on worker nodes.

`flavor` commands

Getting flavor related information. Flavors determine how much virtual CPU, memory, and disk space is available to each worker node.

* [`ibmcloud ks flavor get`](/docs/containers?topic=containers-kubernetes-service-cli#flavor-get-cli)
* [`ibmcloud ks flavor ls`](/docs/containers?topic=containers-kubernetes-service-cli#flavor-ls-cli)

`infra-permissions` commands

View information about infrastructure permissions that allow you to access the IBM Cloud classic infrastructure portfolio through your IBM Cloud account.

* [`ibmcloud ks infra-permissions get`](/docs/containers?topic=containers-kubernetes-service-cli#infra-permissions-get-cli)

`ingress` commands

View and modify Ingress services and settings

ingress alb: View and configure an Ingress application load balancer (ALB).
ingress domain: Manage a cluster's Ingress domains.
ingress instance: Manage registered instances of the IBM Cloud Secrets Manager.
ingress load-balancer: Modify load balancers that expose Ingress ALBs in your cluster.
ingress secret: Manage Ingress secrets in a cluster.
ingress security: Modify the ingress security configuration for your cluster.
ingress status-report: View and configure Ingress status reports.

`kms` commands

View and configure Key Management Service integrations.

kms crk: List and configure the root keys for a Key Management Service instance.
kms instance: View and configure available Key Management Service instances.

`locations` commands

List supported IBM Cloud Kubernetes Service locations.

* [`ibmcloud ks locations`](/docs/containers?topic=containers-kubernetes-service-cli#locations-cli)

`logging` commands

Forward logs from your cluster.

logging autoupdate: Manage automatic updates of the Fluentd add-on in a cluster.
logging config: View or modify log forwarding configurations for a cluster.
logging filter: View or modify log filters for a cluster.

`messages` commands

View the current user messages.

* [`ibmcloud ks messages`](/docs/containers?topic=containers-kubernetes-service-cli#messages-cli)

`nlb-dns` commands

Create and manage host names for network load balancer (NLB) IP addresses in a cluster and health check monitors for host names.

nlb-dns create: Create a DNS host name.
nlb-dns monitor: Create and manage health check monitors for network load balancer (NLB) IP addresses and host names in a cluster
nlb-dns rm: Remove an NLB IP or load balancer host name from an NLB host name.
nlb-dns secret: Manage the secret for an NLB subdomain.

`quota` commands

View the quota and limits for cluster-related resources in your IBM Cloud account.

* [`ibmcloud ks quota ls`](/docs/containers?topic=containers-kubernetes-service-cli#quota-ls-cli)

`script` commands

Rewrite scripts that call IBM Cloud Kubernetes Service plug-in commands. Legacy-structured commands are replaced with beta-structured commands.

* [`ibmcloud ks script update`](/docs/containers?topic=containers-kubernetes-service-cli#script-update-cli)

`security-group` commands

Run operations against a security group.

* [`ibmcloud ks security-group ls`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-ls-cli)
* [`ibmcloud ks security-group reset`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-reset-cli)
* [`ibmcloud ks security-group sync`](/docs/containers?topic=containers-kubernetes-service-cli#security-group-sync-cli)

`storage` commands

View and modify storage resources.

storage attachment: View and modify storage volume attachments of worker nodes in your cluster.
storage volume: View a list of storage volumes.
- Beta ibmcloud ks storage attachment create
- Beta ibmcloud ks storage attachment get
- Beta ibmcloud ks storage attachment ls
- Beta ibmcloud ks storage attachment rm
- Beta ibmcloud ks storage volume get
- Beta ibmcloud ks storage volume ls

`subnets` commands

List available portable subnets in your IBM Cloud infrastructure account.

* [`ibmcloud ks subnets`](/docs/containers?topic=containers-kubernetes-service-cli#subnets-cli)

`versions` commands

List all the container platform versions that are available for IBM Cloud Kubernetes Service clusters.

* [`ibmcloud ks versions`](/docs/containers?topic=containers-kubernetes-service-cli#versions-cli)

`vlan` commands

List public and private VLANs for a zone and view the VLAN spanning status.

vlan spanning: View the VLAN spanning status for your IBM Cloud classic infrastructure account.
- ibmcloud ks vlan ls
- ibmcloud ks vlan spanning get

`vni` commands

Attach, detach, and list Virtual Network Interfaces on worker nodes.

vni attach: Attach a Virtual Network Interface to a worker node.

`vpc` commands

Get information about VPCs and manage VPC clusters.

vpc outbound-traffic-protection: Change the outbound traffic protection for a Secure By Default VPC cluster.
vpc secure-by-default: Modify Secure By Default Network settings for a VPC cluster.

`webhook-create` commands

* [`ibmcloud ks webhook-create`](/docs/containers?topic=containers-kubernetes-service-cli#webhook-create-cli)

`worker` commands

View and modify worker nodes for a cluster.

* [`ibmcloud ks worker get`](/docs/containers?topic=containers-kubernetes-service-cli#worker-get-cli)
* [`ibmcloud ks worker ls`](/docs/containers?topic=containers-kubernetes-service-cli#worker-ls-cli)
* [`ibmcloud ks worker reboot`](/docs/containers?topic=containers-kubernetes-service-cli#worker-reboot-cli)
* [`ibmcloud ks worker reload`](/docs/containers?topic=containers-kubernetes-service-cli#worker-reload-cli)
* [`ibmcloud ks worker replace`](/docs/containers?topic=containers-kubernetes-service-cli#worker-replace-cli)
* [`ibmcloud ks worker rm`](/docs/containers?topic=containers-kubernetes-service-cli#worker-rm-cli)
* [`ibmcloud ks worker update`](/docs/containers?topic=containers-kubernetes-service-cli#worker-update-cli)

`worker-pool` commands

View and modify worker pools for a cluster.

worker-pool create: Add a worker pool to a cluster. No worker nodes are created until zones are added to the worker pool.
worker-pool label: Set and remove custom Kubernetes labels for all worker nodes in a worker pool.
worker-pool operating-system: Manage the operating system of a worker pool.
worker-pool taint: Set and remove Kubernetes taints for all worker nodes in a worker pool.

`zone` commands

List availability zones and modify the zones attached to a worker pool.

zone add: Add a zone to one or more worker pools in a cluster.

IBM Cloud Kubernetes Service CLI Map

IBM Cloud Kubernetes Service CLI Map

api commands

api-key commands

cluster commands

credential commands

experimental commands

flavor commands

infra-permissions commands

ingress commands

kms commands

locations commands

logging commands

messages commands

nlb-dns commands

quota commands

script commands

security-group commands

storage commands

subnets commands

versions commands

vlan commands

vni commands

vpc commands

webhook-create commands

worker commands

worker-pool commands

zone commands

`api` commands

`api-key` commands

`cluster` commands

`credential` commands

`experimental` commands

`flavor` commands

`infra-permissions` commands

`ingress` commands

`kms` commands

`locations` commands

`logging` commands

`messages` commands

`nlb-dns` commands

`quota` commands

`script` commands

`security-group` commands

`storage` commands

`subnets` commands

`versions` commands

`vlan` commands

`vni` commands

`vpc` commands

`webhook-create` commands

`worker` commands

`worker-pool` commands

`zone` commands