Red Hat OpenShift on IBM Cloud CLI 映射
此页面列示在 CLI 中构造的所有 ibmcloud oc 命令。 如需了解特定命令的详细信息，请点击该命令或参阅 Red Hat OpenShift on IBM Cloud CLI 参考。
api 命令
查看当前的 API 端点。
* [`ibmcloud oc api`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-cli)
api-key 命令
查看有关集群的 API 密钥的信息或将其重置为新密钥。
* [`ibmcloud oc api-key info`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-key-info-cli)
* [`ibmcloud oc api-key reset`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-key-reset-cli)
cluster 命令
查看和修改集群和集群服务设置。
cluster addon: 查看、启用、更新和禁用集群附加组件。cluster ca: 管理集群的证书颁发机构（CA）证书。cluster create: 创建经典集群或 VPC 集群。cluster image-security: 管理集群中的镜像安全策略执行。cluster master: 查看和修改集群的主节点。cluster pull-secret: 管理集群用于从 IBM Cloud Container Registry 获取镜像的镜像拉取密钥。cluster service: 在集群上查看、绑定和解除绑定 IBM Cloud 服务。cluster subnet: 为经典集群添加并创建便携子网。ibmcloud oc cluster addon disable acmibmcloud oc cluster addon disable alb-oauth-proxyibmcloud oc cluster addon disable cluster-autoscaleribmcloud oc cluster addon disable debug-tool- **Beta **
ibmcloud oc cluster addon disable headlamp ibmcloud oc cluster addon disable hpcs-router- **Beta **
ibmcloud oc cluster addon disable ibm-storage-operator ibmcloud oc cluster addon disable image-key-synchronizeribmcloud oc cluster addon disable istio- 不推荐
ibmcloud oc cluster addon disable istio-extras - 不推荐
ibmcloud oc cluster addon disable istio-sample-bookinfo ibmcloud oc cluster addon disable knativeibmcloud oc cluster addon disable kube-terminalibmcloud oc cluster addon disable openshift-data-foundationibmcloud oc cluster addon disable static-routeibmcloud oc cluster addon disable vpc-block-csi-driveribmcloud oc cluster addon enable acmibmcloud oc cluster addon enable alb-oauth-proxyibmcloud oc cluster addon enable cluster-autoscaleribmcloud oc cluster addon enable debug-tool- **Beta **
ibmcloud oc cluster addon enable headlamp ibmcloud oc cluster addon enable hpcs-router- **Beta **
ibmcloud oc cluster addon enable ibm-storage-operator ibmcloud oc cluster addon enable image-key-synchronizeribmcloud oc cluster addon enable istio- 不推荐
ibmcloud oc cluster addon enable istio-extras - 不推荐
ibmcloud oc cluster addon enable istio-sample-bookinfo ibmcloud oc cluster addon enable openshift-data-foundationibmcloud oc cluster addon enable static-routeibmcloud oc cluster addon enable vpc-block-csi-driveribmcloud oc cluster addon getibmcloud oc cluster addon lsibmcloud oc cluster addon optionsibmcloud oc cluster addon update acmibmcloud oc cluster addon update alb-oauth-proxyibmcloud oc cluster addon update cluster-autoscaleribmcloud oc cluster addon update debug-tool- **Beta **
ibmcloud oc cluster addon update headlamp ibmcloud oc cluster addon update hpcs-router- **Beta **
ibmcloud oc cluster addon update ibm-storage-operator ibmcloud oc cluster addon update image-key-synchronizeribmcloud oc cluster addon update istio- 不推荐
ibmcloud oc cluster addon update istio-extras - 不推荐
ibmcloud oc cluster addon update istio-sample-bookinfo ibmcloud oc cluster addon update knativeibmcloud oc cluster addon update kube-terminalibmcloud oc cluster addon update openshift-data-foundationibmcloud oc cluster addon update static-routeibmcloud oc cluster addon update vpc-block-csi-driveribmcloud oc cluster addon versionsibmcloud oc cluster ca createibmcloud oc cluster ca getibmcloud oc cluster ca rotateibmcloud oc cluster ca statusibmcloud oc cluster configibmcloud oc cluster create classicibmcloud oc cluster create satelliteibmcloud oc cluster create vpc-classicibmcloud oc cluster create vpc-gen2ibmcloud oc cluster getibmcloud oc cluster image-security disableibmcloud oc cluster image-security enableibmcloud oc cluster lsibmcloud oc cluster master audit-webhook getibmcloud oc cluster master audit-webhook setibmcloud oc cluster master audit-webhook unsetibmcloud oc cluster master console-oauth-access getibmcloud oc cluster master console-oauth-access setibmcloud oc cluster master pod-security getibmcloud oc cluster master pod-security policy disableibmcloud oc cluster master pod-security policy enableibmcloud oc cluster master pod-security policy getibmcloud oc cluster master pod-security setibmcloud oc cluster master pod-security unset- 不推荐
ibmcloud oc cluster master private-service-endpoint allowlist add - 不推荐
ibmcloud oc cluster master private-service-endpoint allowlist disable - 不推荐
ibmcloud oc cluster master private-service-endpoint allowlist enable - 不推荐
ibmcloud oc cluster master private-service-endpoint allowlist get - 不推荐
ibmcloud oc cluster master private-service-endpoint allowlist rm ibmcloud oc cluster master private-service-endpoint enableibmcloud oc cluster master public-service-endpoint disableibmcloud oc cluster master public-service-endpoint enableibmcloud oc cluster master refreshibmcloud oc cluster master satellite-service-endpoint allowlist addibmcloud ks cluster master satellite-service-endpoint allowlist disableibmcloud oc cluster master satellite-service-endpoint allowlist enableibmcloud oc cluster master satellite-service-endpoint allowlist getibmcloud oc cluster master satellite-service-endpoint allowlist rmibmcloud oc cluster master updateibmcloud oc cluster pull-secret applyibmcloud oc cluster rmibmcloud oc cluster service bindibmcloud oc cluster service lsibmcloud oc cluster service unbindibmcloud oc cluster subnet addibmcloud oc cluster subnet createibmcloud oc cluster subnet detach
credential 命令
设置和取消设置允许您通过 IBM Cloud 帐户访问 IBM Cloud 经典基础架构产品服务组合的凭证。
credential set: 设置凭据，以便您通过 IBM Cloud 账户访问 IBM Cloud 经典基础设施组合。 此命令适用于指定的资源组；如果未指定资源组，则适用于默认资源组。
experimental 命令
[有效期至 2026-10-21] 尝试使用新命令。 重要提示：此处的命令将在其描述中指定的[日期]之后失效。
experimental trusted-profile: [有效期至 2026-10-21] 查看并设置集群的受信任配置文件，或设置在资源组中创建的集群的默认受信任配置文件。experimental vni: [已在 2026-05-20 上停用！ 请改用ibmcloud ks vni而不是] 在工作节点上挂载、卸载和列出虚拟网络接口。ibmcloud oc experimental trusted-profile default getibmcloud oc experimental trusted-profile default setibmcloud oc experimental trusted-profile getibmcloud oc experimental trusted-profile setibmcloud oc experimental vni attach baremetalibmcloud oc experimental vni attach virtualibmcloud oc experimental vni detachibmcloud oc experimental vni ls
flavor 命令
正在获取与类型模板相关的信息。 类型将确定可供每个工作程序节点使用的虚拟 CPU、内存和磁盘空间。
* [`ibmcloud oc flavor get`](/docs/openshift?topic=openshift-kubernetes-service-cli#flavor-get-cli)
* [`ibmcloud oc flavor ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#flavor-ls-cli)
infra-permissions 命令
查看有关基础架构许可权的信息，此许可权允许您通过 IBM Cloud 帐户访问 IBM Cloud 经典基础架构产品服务组合。
* [`ibmcloud oc infra-permissions get`](/docs/openshift?topic=openshift-kubernetes-service-cli#infra-permissions-get-cli)
ingress 命令
查看和修改 Ingress 服务和设置
ingress alb: 查看和配置 Ingress 应用程序负载均衡器 (ALB)。ingress domain: 管理集群的 Ingress 域名。ingress instance: 管理已注册的 IBM Cloud Secrets Manager 实例。ingress load-balancer: 修改集群中公开 Ingress ALB 的负载均衡器。ingress secret: 管理集群中的 Ingress 密钥。ingress security: 修改集群的入站安全配置。ingress status-report: 查看和配置 Ingress 状态报告。ibmcloud oc ingress alb autoscale getibmcloud oc ingress alb autoscale setibmcloud oc ingress alb autoscale unsetibmcloud oc ingress alb autoupdate disableibmcloud oc ingress alb autoupdate enableibmcloud oc ingress alb autoupdate getibmcloud oc ingress alb create classicibmcloud oc ingress alb create vpc-gen2ibmcloud oc ingress alb disableibmcloud oc ingress alb enable classicibmcloud oc ingress alb enable vpc-gen2ibmcloud oc ingress alb getibmcloud oc ingress alb health-checker disableibmcloud oc ingress alb health-checker enableibmcloud oc ingress alb health-checker getibmcloud oc ingress alb lsibmcloud oc ingress alb updateibmcloud oc ingress alb versionsibmcloud oc ingress domain createibmcloud oc ingress domain default replaceibmcloud oc ingress domain getibmcloud oc ingress domain lsibmcloud oc ingress domain rmibmcloud oc ingress domain secret regenerateibmcloud oc ingress domain secret rmibmcloud oc ingress domain updateibmcloud oc ingress instance default setibmcloud oc ingress instance default unsetibmcloud oc ingress instance getibmcloud oc ingress instance lsibmcloud oc ingress instance registeribmcloud oc ingress instance unregisteribmcloud oc ingress load-balancer backend setibmcloud oc ingress load-balancer getibmcloud oc ingress load-balancer proxy-protocol disableibmcloud oc ingress load-balancer proxy-protocol enableibmcloud oc ingress secret createibmcloud oc ingress secret field addibmcloud oc ingress secret field lsibmcloud oc ingress secret field rmibmcloud oc ingress secret getibmcloud oc ingress secret lsibmcloud oc ingress secret rmibmcloud oc ingress secret updateibmcloud oc ingress security port80 disableibmcloud oc ingress security port80 enableibmcloud oc ingress security port80 getibmcloud oc ingress status-report disableibmcloud oc ingress status-report enableibmcloud oc ingress status-report getibmcloud oc ingress status-report ignored-errors addibmcloud oc ingress status-report ignored-errors lsibmcloud oc ingress status-report ignored-errors rm
kms 命令
查看和配置密钥管理服务集成。
kms crk: 列出并配置密钥管理服务实例的根密钥。kms instance: 查看并配置可用的密钥管理服务实例。
locations 命令
列出受支持的 IBM Cloud Kubernetes Service 位置。
* [`ibmcloud oc locations`](/docs/openshift?topic=openshift-kubernetes-service-cli#locations-cli)
logging 命令
从集群转发日志。
logging autoupdate: 管理集群中 Fluentd 插件的自动更新。logging config: 查看或修改集群的日志转发配置。logging filter: 查看或修改集群的日志过滤器。ibmcloud oc logging autoupdate disableibmcloud oc logging autoupdate enableibmcloud oc logging autoupdate getibmcloud oc logging config createibmcloud oc logging config getibmcloud oc logging config rmibmcloud oc logging config updateibmcloud oc logging filter createibmcloud oc logging filter getibmcloud oc logging filter rmibmcloud oc logging filter updateibmcloud oc logging refresh
messages 命令
查看当前用户消息。
* [`ibmcloud oc messages`](/docs/openshift?topic=openshift-kubernetes-service-cli#messages-cli)
nlb-dns 命令
在集群中创建并管理网络负载均衡器 (NLB) IP 地址的主机名，并管理主机名的运行状况检查监视器。
nlb-dns create: 创建 DNS 主机名。nlb-dns monitor: 为集群中的网络负载均衡器（NLB）IP 地址和主机名创建并管理健康检查监视器nlb-dns rm: 从 NLB 主机名中移除一个 NLB IP 或负载均衡器主机名。nlb-dns secret: 管理 NLB 子域的密钥。ibmcloud oc nlb-dns addibmcloud oc nlb-dns create classicibmcloud oc nlb-dns create vpc-gen2ibmcloud oc nlb-dns getibmcloud oc nlb-dns lsibmcloud oc nlb-dns monitor configureibmcloud oc nlb-dns monitor disableibmcloud oc nlb-dns monitor enableibmcloud oc nlb-dns monitor getibmcloud oc nlb-dns monitor lsibmcloud oc nlb-dns replaceibmcloud oc nlb-dns rm classicibmcloud oc nlb-dns rm vpc-gen2ibmcloud oc nlb-dns secret regenerateibmcloud oc nlb-dns secret rm
quota 命令
查看 IBM Cloud 帐户中集群相关资源的配额和限制。
* [`ibmcloud oc quota ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#quota-ls-cli)
script 命令
重写调用 IBM Cloud Kubernetes Service 插件命令的脚本。 将旧结构的命令替换为 Beta 结构的命令。
* [`ibmcloud oc script update`](/docs/openshift?topic=openshift-kubernetes-service-cli#script-update-cli)
security-group 命令
对安全组运行操作。
* [`ibmcloud oc security-group ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-ls-cli)
* [`ibmcloud oc security-group reset`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-reset-cli)
* [`ibmcloud oc security-group sync`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-sync-cli)
storage 命令
查看和修改存储资源。
storage attachment: 查看和修改集群中工作节点的存储卷挂载情况。storage volume: 查看存储卷列表。- **Beta **
ibmcloud oc storage attachment create - **Beta **
ibmcloud oc storage attachment get - **Beta **
ibmcloud oc storage attachment ls - **Beta **
ibmcloud oc storage attachment rm - **Beta **
ibmcloud oc storage volume get - **Beta **
ibmcloud oc storage volume ls
- **Beta **
subnets 命令
列出 IBM Cloud 基础架构帐户中的可用便携式子网。
* [`ibmcloud oc subnets`](/docs/openshift?topic=openshift-kubernetes-service-cli#subnets-cli)
versions 命令
列出可用于 IBM Cloud Kubernetes Service 集群的所有容器平台版本。
* [`ibmcloud oc versions`](/docs/openshift?topic=openshift-kubernetes-service-cli#versions-cli)
vlan 命令
列出专区的公用和专用 VLAN，并查看 VLAN 生成状态。
vlan spanning: 查看您的 IBM Cloud 经典基础设施账户的VLAN跨域状态。
vni 命令
在工作节点上挂载、卸载和列出虚拟网络接口。
vni attach: 将虚拟网络接口连接到工作节点。
vpc 命令
了解有关 VPC 的信息并管理 VPC 集群。
vpc outbound-traffic-protection: 更改“默认安全”VPC 集群的出站流量保护设置。vpc secure-by-default: 修改 VPC 集群的“默认安全”网络设置。
webhook-create 命令
在集群中注册 Webhook。
* [`ibmcloud oc webhook-create`](/docs/openshift?topic=openshift-kubernetes-service-cli#webhook-create-cli)
worker 命令
查看和修改集群的工作程序节点。
* [`ibmcloud oc worker get`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-get-cli)
* [`ibmcloud oc worker ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-ls-cli)
* [`ibmcloud oc worker reboot`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-reboot-cli)
* [`ibmcloud oc worker reload`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-reload-cli)
* [`ibmcloud oc worker replace`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-replace-cli)
* [`ibmcloud oc worker rm`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-rm-cli)
* [`ibmcloud oc worker update`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-update-cli)
worker-pool 命令
查看和修改集群的工作程序池。
worker-pool create: 将一个工作节点池添加到集群中。 在将区域添加到工作程序池之前，不会创建任何工作程序节点。worker-pool label: 为工作池中的所有工作节点设置和移除自定义 Kubernetes 标签。worker-pool operating-system: 管理工作池的操作系统。worker-pool taint: 为工作池中的所有工作节点设置和移除 Kubernetes 污点。ibmcloud oc worker-pool create classicibmcloud oc worker-pool create satelliteibmcloud oc worker-pool create vpc-classicibmcloud oc worker-pool create vpc-gen2ibmcloud oc worker-pool getibmcloud oc worker-pool label rmibmcloud oc worker-pool label setibmcloud oc worker-pool lsibmcloud oc worker-pool operating-system setibmcloud oc worker-pool rebalanceibmcloud oc worker-pool resizeibmcloud oc worker-pool rmibmcloud oc worker-pool taint rmibmcloud oc worker-pool taint setibmcloud oc worker-pool zones
zone 命令
列出可用性区域并修改附加到工作程序池的区域。