# Context and namespace
kubectl config get-contexts
kubectl config use-context <name>
kubectl config set-context --current --namespace=<ns>

# Pods
kubectl get pods -A                          # all namespaces
kubectl get pods -o wide                     # with node/IP info
kubectl describe pod <name>                  # events + spec
kubectl logs <pod> -c <container>            # container logs
kubectl logs <pod> --previous               # previous crash logs
kubectl exec -it <pod> -- /bin/bash         # shell into pod
kubectl port-forward pod/<name> 8080:80     # local port forward

# Deployments
kubectl rollout status deployment/<name>
kubectl rollout history deployment/<name>
kubectl rollout undo deployment/<name>
kubectl rollout undo deployment/<name> --to-revision=2
kubectl scale deployment/<name> --replicas=5
kubectl set image deployment/<name> <container>=<image>:<tag>

# Services
kubectl get svc
kubectl expose deployment <name> --port=80 --target-port=8080

# Debugging
kubectl get events --sort-by='.lastTimestamp' -n <ns>
kubectl top nodes
kubectl top pods -n <ns>
kubectl debug node/<node> -it --image=busybox   # busybox lacks most diagnostic tools -- for a
                                                  # genuinely useful node shell, use a real toolbox
                                                  # image instead, e.g. --image=nicolaka/netshoot

# RBAC
kubectl auth can-i create pods --as=<user>
kubectl auth can-i '*' '*'                   # check cluster-admin

# Apply and delete
kubectl apply -f manifest.yaml
kubectl delete -f manifest.yaml
kubectl apply -k ./overlays/production       # Kustomize

# Drain and cordon
kubectl cordon <node>                        # stop new pods
kubectl drain <node> --ignore-daemonsets --delete-emptydir-data
kubectl uncordon <node>