kubectl Cluster Health commands
22 commands in 4 groups: API Discovery, Quotas & Limits, Admission Webhooks, Certificates. Click or tap any command to copy it. Official documentation: kubernetes.io.
Open in the interactive cheat sheet search, stars and every other section
API Discovery
Explore supported API resource types, versions, and field-level documentation.
kubectl api-resources
List all available resource types
kubectl api-resources --namespaced=false
Cluster-scoped resources only
kubectl api-resources --namespaced=true
Namespaced resources only
kubectl api-versions
All API groups and versions supported
kubectl explain <resource>
API documentation for a resource type
kubectl explain <resource>.spec
Docs for a specific field path
Quotas & Limits
Inspect resource quotas, limit ranges, disruption budgets, and priority classes across the cluster.
kubectl describe limitrange <name> -n <namespace>
Limit range details and defaults
kubectl describe pdb <name> -n <namespace>
PDB details and disruption allowance
kubectl describe resourcequota <name> -n <namespace>
Quota details and current usage
kubectl get priorityclass
Pod priority classes
kubectl get limitrange -A
Container and pod limit ranges
kubectl get pdb -A
Pod disruption budgets cluster-wide
kubectl get resourcequota -A
Resource quotas across all namespaces
Admission Webhooks
List and inspect validating and mutating admission webhook configurations.
kubectl describe mutatingwebhookconfiguration <name>
Mutation rules, namespaces, and endpoint
kubectl describe validatingwebhookconfiguration <name>
Validation rules, namespaces, and endpoint
kubectl get mutatingwebhookconfigurations
Mutating admission webhooks
kubectl get validatingwebhookconfigurations
Validating admission webhooks
Certificates
Manage certificate signing requests (CSRs). Nodes and users submit CSRs to obtain signed certificates; a cluster admin approves or denies them.
kubectl certificate approve <name>
Approve a certificate signing request
kubectl certificate deny <name>
Deny a certificate signing request
kubectl delete csr <name>
Delete a processed CSR
kubectl describe csr <name>
Inspect CSR details and requestor
kubectl get csr
List all certificate signing requests