Red Hat OpenShift on IBM Cloud CLI 對映
此頁面會列出在 CLI 中建構的所有 ibmcloud oc 指令。 如需特定命令的詳細資訊，請按一下該命令或參閱 Red Hat OpenShift on IBM Cloud CLI 參考資料。
api 指令
檢視目前的 API 端點。
* [`ibmcloud oc api`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-cli)
api-key 指令
檢視有關叢集的 API 金鑰的資訊或將其重設為新金鑰。
* [`ibmcloud oc api-key info`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-key-info-cli)
* [`ibmcloud oc api-key reset`](/docs/openshift?topic=openshift-kubernetes-service-cli#api-key-reset-cli)
cluster 指令
檢視及修改叢集和叢集服務設定。
cluster addon: 檢視、啟用、更新及停用叢集附加元件。cluster ca: 管理叢集的憑證授權單位 (CA) 憑證。cluster create: 建立經典型或 VPC 叢集。cluster image-security: 管理叢集中的映像安全執行。cluster master: 檢視及修改叢集的主節點。cluster pull-secret: 管理叢集用於從 IBM Cloud Container Registry 存取映像檔的映像檔拉取密鑰。cluster service: 在叢集中檢視、綁定及解除綁定 IBM Cloud 服務。cluster subnet: 為經典叢集新增並建立可攜式子網。ibmcloud oc cluster addon disable acmibmcloud oc cluster addon disable alb-oauth-proxyibmcloud oc cluster addon disable cluster-autoscaleribmcloud oc cluster addon disable debug-tool- **Beta **
ibmcloud oc cluster addon disable headlamp ibmcloud oc cluster addon disable hpcs-router- **Beta **
ibmcloud oc cluster addon disable ibm-storage-operator ibmcloud oc cluster addon disable image-key-synchronizeribmcloud oc cluster addon disable istio- 已淘汰
ibmcloud oc cluster addon disable istio-extras - 已淘汰
ibmcloud oc cluster addon disable istio-sample-bookinfo ibmcloud oc cluster addon disable knativeibmcloud oc cluster addon disable kube-terminalibmcloud oc cluster addon disable openshift-data-foundationibmcloud oc cluster addon disable static-routeibmcloud oc cluster addon disable vpc-block-csi-driveribmcloud oc cluster addon enable acmibmcloud oc cluster addon enable alb-oauth-proxyibmcloud oc cluster addon enable cluster-autoscaleribmcloud oc cluster addon enable debug-tool- **Beta **
ibmcloud oc cluster addon enable headlamp ibmcloud oc cluster addon enable hpcs-router- **Beta **
ibmcloud oc cluster addon enable ibm-storage-operator ibmcloud oc cluster addon enable image-key-synchronizeribmcloud oc cluster addon enable istio- 已淘汰
ibmcloud oc cluster addon enable istio-extras - 已淘汰
ibmcloud oc cluster addon enable istio-sample-bookinfo ibmcloud oc cluster addon enable openshift-data-foundationibmcloud oc cluster addon enable static-routeibmcloud oc cluster addon enable vpc-block-csi-driveribmcloud oc cluster addon getibmcloud oc cluster addon lsibmcloud oc cluster addon optionsibmcloud oc cluster addon update acmibmcloud oc cluster addon update alb-oauth-proxyibmcloud oc cluster addon update cluster-autoscaleribmcloud oc cluster addon update debug-tool- **Beta **
ibmcloud oc cluster addon update headlamp ibmcloud oc cluster addon update hpcs-router- **Beta **
ibmcloud oc cluster addon update ibm-storage-operator ibmcloud oc cluster addon update image-key-synchronizeribmcloud oc cluster addon update istio- 已淘汰
ibmcloud oc cluster addon update istio-extras - 已淘汰
ibmcloud oc cluster addon update istio-sample-bookinfo ibmcloud oc cluster addon update knativeibmcloud oc cluster addon update kube-terminalibmcloud oc cluster addon update openshift-data-foundationibmcloud oc cluster addon update static-routeibmcloud oc cluster addon update vpc-block-csi-driveribmcloud oc cluster addon versionsibmcloud oc cluster ca createibmcloud oc cluster ca getibmcloud oc cluster ca rotateibmcloud oc cluster ca statusibmcloud oc cluster configibmcloud oc cluster create classicibmcloud oc cluster create satelliteibmcloud oc cluster create vpc-classicibmcloud oc cluster create vpc-gen2ibmcloud oc cluster getibmcloud oc cluster image-security disableibmcloud oc cluster image-security enableibmcloud oc cluster lsibmcloud oc cluster master audit-webhook getibmcloud oc cluster master audit-webhook setibmcloud oc cluster master audit-webhook unsetibmcloud oc cluster master console-oauth-access getibmcloud oc cluster master console-oauth-access setibmcloud oc cluster master pod-security getibmcloud oc cluster master pod-security policy disableibmcloud oc cluster master pod-security policy enableibmcloud oc cluster master pod-security policy getibmcloud oc cluster master pod-security setibmcloud oc cluster master pod-security unset- 已淘汰
ibmcloud oc cluster master private-service-endpoint allowlist add - 已淘汰
ibmcloud oc cluster master private-service-endpoint allowlist disable - 已淘汰
ibmcloud oc cluster master private-service-endpoint allowlist enable - 已淘汰
ibmcloud oc cluster master private-service-endpoint allowlist get - 已淘汰
ibmcloud oc cluster master private-service-endpoint allowlist rm ibmcloud oc cluster master private-service-endpoint enableibmcloud oc cluster master public-service-endpoint disableibmcloud oc cluster master public-service-endpoint enableibmcloud oc cluster master refreshibmcloud oc cluster master satellite-service-endpoint allowlist addibmcloud ks cluster master satellite-service-endpoint allowlist disableibmcloud oc cluster master satellite-service-endpoint allowlist enableibmcloud oc cluster master satellite-service-endpoint allowlist getibmcloud oc cluster master satellite-service-endpoint allowlist rmibmcloud oc cluster master updateibmcloud oc cluster pull-secret applyibmcloud oc cluster rmibmcloud oc cluster service bindibmcloud oc cluster service lsibmcloud oc cluster service unbindibmcloud oc cluster subnet addibmcloud oc cluster subnet createibmcloud oc cluster subnet detach
credential 指令
設定並取消設定認證，以容許您透過 IBM Cloud 帳戶存取 IBM Cloud 標準基礎架構組合。
credential set: 設定憑證，以便您能透過 IBM Cloud 帳戶存取 IBM Cloud 的經典基礎架構組合。 此指令適用於指定的資源群組；若未指定資源群組，則適用於預設資源群組。
experimental 指令
[有效期至 2026-10-21] 試試看新的指令。 重要：此處列出的指令將於其說明中所載的[日期]後停止使用。
experimental trusted-profile: [有效期限至 2026-10-21] 檢視並設定叢集上的受信任設定檔，或資源群組中建立之叢集的預設受信任設定檔。experimental vni: [已於 2026-05-20 停用！ 請改用ibmcloud ks vni取代] 在工作節點上附加、解除附加及列出虛擬網路介面。ibmcloud oc experimental trusted-profile default getibmcloud oc experimental trusted-profile default setibmcloud oc experimental trusted-profile getibmcloud oc experimental trusted-profile setibmcloud oc experimental vni attach baremetalibmcloud oc experimental vni attach virtualibmcloud oc experimental vni detachibmcloud oc experimental vni ls
flavor 指令
正在取得特性相關的資訊。 特性會決定每一個工作程式節點有多少可用的虛擬 CPU、記憶體和磁碟空間。
* [`ibmcloud oc flavor get`](/docs/openshift?topic=openshift-kubernetes-service-cli#flavor-get-cli)
* [`ibmcloud oc flavor ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#flavor-ls-cli)
infra-permissions 指令
針對容許您透過 IBM Cloud 帳戶存取 IBM Cloud 標準基礎架構組合的基礎架構許可權，檢視其相關資訊。
* [`ibmcloud oc infra-permissions get`](/docs/openshift?topic=openshift-kubernetes-service-cli#infra-permissions-get-cli)
ingress 指令
檢視及修改 Ingress 服務和設定
ingress alb: 檢視並設定 Ingress 應用程式負載平衡器 (ALB)。ingress domain: 管理叢集的 Ingress 網域。ingress instance: 管理已註冊的「IBM Cloud Secrets Manager」實例。ingress load-balancer: 修改您叢集中公開 Ingress ALB 的負載平衡器。ingress secret: 管理叢集中的 Ingress 機密。ingress security: 修改您叢集的入站安全性設定。ingress status-report: 檢視並設定 Ingress 狀態報告。ibmcloud oc ingress alb autoscale getibmcloud oc ingress alb autoscale setibmcloud oc ingress alb autoscale unsetibmcloud oc ingress alb autoupdate disableibmcloud oc ingress alb autoupdate enableibmcloud oc ingress alb autoupdate getibmcloud oc ingress alb create classicibmcloud oc ingress alb create vpc-gen2ibmcloud oc ingress alb disableibmcloud oc ingress alb enable classicibmcloud oc ingress alb enable vpc-gen2ibmcloud oc ingress alb getibmcloud oc ingress alb health-checker disableibmcloud oc ingress alb health-checker enableibmcloud oc ingress alb health-checker getibmcloud oc ingress alb lsibmcloud oc ingress alb updateibmcloud oc ingress alb versionsibmcloud oc ingress domain createibmcloud oc ingress domain default replaceibmcloud oc ingress domain getibmcloud oc ingress domain lsibmcloud oc ingress domain rmibmcloud oc ingress domain secret regenerateibmcloud oc ingress domain secret rmibmcloud oc ingress domain updateibmcloud oc ingress instance default setibmcloud oc ingress instance default unsetibmcloud oc ingress instance getibmcloud oc ingress instance lsibmcloud oc ingress instance registeribmcloud oc ingress instance unregisteribmcloud oc ingress load-balancer backend setibmcloud oc ingress load-balancer getibmcloud oc ingress load-balancer proxy-protocol disableibmcloud oc ingress load-balancer proxy-protocol enableibmcloud oc ingress secret createibmcloud oc ingress secret field addibmcloud oc ingress secret field lsibmcloud oc ingress secret field rmibmcloud oc ingress secret getibmcloud oc ingress secret lsibmcloud oc ingress secret rmibmcloud oc ingress secret updateibmcloud oc ingress security port80 disableibmcloud oc ingress security port80 enableibmcloud oc ingress security port80 getibmcloud oc ingress status-report disableibmcloud oc ingress status-report enableibmcloud oc ingress status-report getibmcloud oc ingress status-report ignored-errors addibmcloud oc ingress status-report ignored-errors lsibmcloud oc ingress status-report ignored-errors rm
kms 指令
檢視並配置「金鑰管理服務」整合。
kms crk: 列出並設定 Key Management Service 實例的根金鑰。kms instance: 檢視並設定可用的金鑰管理服務實例。
locations 指令
列出支援的 IBM Cloud Kubernetes Service 位置。
* [`ibmcloud oc locations`](/docs/openshift?topic=openshift-kubernetes-service-cli#locations-cli)
logging 指令
從叢集轉遞日誌。
logging autoupdate: 管理叢集中「Fluentd」附加元件的自動更新。logging config: 檢視或修改叢集的日誌轉發設定。logging filter: 檢視或修改叢集的日誌篩選器。ibmcloud oc logging autoupdate disableibmcloud oc logging autoupdate enableibmcloud oc logging autoupdate getibmcloud oc logging config createibmcloud oc logging config getibmcloud oc logging config rmibmcloud oc logging config updateibmcloud oc logging filter createibmcloud oc logging filter getibmcloud oc logging filter rmibmcloud oc logging filter updateibmcloud oc logging refresh
messages 指令
檢視現行使用者訊息。
* [`ibmcloud oc messages`](/docs/openshift?topic=openshift-kubernetes-service-cli#messages-cli)
nlb-dns 指令
為叢集中的網路負載平衡器 (NLB) IP 位址建立及管理主機名稱，並為主機名稱建立及管理性能檢查監視器。
nlb-dns create: 建立 DNS 主機名稱。nlb-dns monitor: 為叢集中的網路負載平衡器 (NLB) IP 位址及主機名稱建立並管理健康檢查監控器nlb-dns rm: 從 NLB 主機名稱中移除一個 NLB IP 或負載平衡主機名稱。nlb-dns secret: 管理 NLB 子網域的機密。ibmcloud oc nlb-dns addibmcloud oc nlb-dns create classicibmcloud oc nlb-dns create vpc-gen2ibmcloud oc nlb-dns getibmcloud oc nlb-dns lsibmcloud oc nlb-dns monitor configureibmcloud oc nlb-dns monitor disableibmcloud oc nlb-dns monitor enableibmcloud oc nlb-dns monitor getibmcloud oc nlb-dns monitor lsibmcloud oc nlb-dns replaceibmcloud oc nlb-dns rm classicibmcloud oc nlb-dns rm vpc-gen2ibmcloud oc nlb-dns secret regenerateibmcloud oc nlb-dns secret rm
quota 指令
檢視 IBM Cloud 帳戶中叢集相關資源的配額和限制。
* [`ibmcloud oc quota ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#quota-ls-cli)
script 指令
重寫用於呼叫 IBM Cloud Kubernetes Service 外掛程式指令的 Script。 舊式結構的指令會取代為測試版結構的指令。
* [`ibmcloud oc script update`](/docs/openshift?topic=openshift-kubernetes-service-cli#script-update-cli)
security-group 指令
對安全群組執行作業。
* [`ibmcloud oc security-group ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-ls-cli)
* [`ibmcloud oc security-group reset`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-reset-cli)
* [`ibmcloud oc security-group sync`](/docs/openshift?topic=openshift-kubernetes-service-cli#security-group-sync-cli)
storage 指令
檢視及修改儲存體資源。
storage attachment: 檢視及修改叢集內工作節點的儲存卷宗附加設定。storage volume: 檢視儲存卷清單。- **Beta **
ibmcloud oc storage attachment create - **Beta **
ibmcloud oc storage attachment get - **Beta **
ibmcloud oc storage attachment ls - **Beta **
ibmcloud oc storage attachment rm - **Beta **
ibmcloud oc storage volume get - **Beta **
ibmcloud oc storage volume ls
- **Beta **
subnets 指令
列出 IBM Cloud 基礎架構帳戶中可用的可攜式子網路。
* [`ibmcloud oc subnets`](/docs/openshift?topic=openshift-kubernetes-service-cli#subnets-cli)
versions 指令
列出可用於 IBM Cloud Kubernetes Service 叢集的所有儲存器平台版本。
* [`ibmcloud oc versions`](/docs/openshift?topic=openshift-kubernetes-service-cli#versions-cli)
vlan 指令
列出區域的公用和專用 VLAN，並檢視 VLAN Spanning 狀態。
vlan spanning: 檢視您的 IBM Cloud 經典基礎架構帳戶的VLAN跨域狀態。
vni 指令
在工作節點上附加、解除附加及列出虛擬網路介面。
vni attach: 將虛擬網路介面連接到工作節點。
vpc 指令
了解 VPC 的相關資訊，並管理 VPC 叢集。
vpc outbound-traffic-protection: 變更「預設安全」VPC 叢集的外發流量保護設定。vpc secure-by-default: 修改 VPC 叢集的「預設安全」網路設定。
webhook-create 指令
在叢集中登錄 Webhook。
* [`ibmcloud oc webhook-create`](/docs/openshift?topic=openshift-kubernetes-service-cli#webhook-create-cli)
worker 指令
檢視及修改叢集的工作者節點。
* [`ibmcloud oc worker get`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-get-cli)
* [`ibmcloud oc worker ls`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-ls-cli)
* [`ibmcloud oc worker reboot`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-reboot-cli)
* [`ibmcloud oc worker reload`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-reload-cli)
* [`ibmcloud oc worker replace`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-replace-cli)
* [`ibmcloud oc worker rm`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-rm-cli)
* [`ibmcloud oc worker update`](/docs/openshift?topic=openshift-kubernetes-service-cli#worker-update-cli)
worker-pool 指令
檢視及修改叢集的工作者儲存區。
worker-pool create: 將工作節點池新增至叢集。 將區域新增至工作程式儲存區之前，不會建立任何工作程式節點。worker-pool label: 為工作節點池中的所有工作節點設定及移除自訂的「Kubernetes」標籤。worker-pool operating-system: 管理工作池的作業系統。worker-pool taint: 為工作節點池中的所有工作節點設定及移除 Kubernetes 污點。ibmcloud oc worker-pool create classicibmcloud oc worker-pool create satelliteibmcloud oc worker-pool create vpc-classicibmcloud oc worker-pool create vpc-gen2ibmcloud oc worker-pool getibmcloud oc worker-pool label rmibmcloud oc worker-pool label setibmcloud oc worker-pool lsibmcloud oc worker-pool operating-system setibmcloud oc worker-pool rebalanceibmcloud oc worker-pool resizeibmcloud oc worker-pool rmibmcloud oc worker-pool taint rmibmcloud oc worker-pool taint setibmcloud oc worker-pool zones
zone 指令
列出可用性區域並修改連接到工作者儲存區的區域。