【k8s】命令configmap

1. 查看default空间的configmap

➜  ~ kubectl get configmap
NAME                 DATA   AGE
istio-ca-root-cert   1      35d

2. 查看指定namespace的configmap

➜  ~ kubectl get configmap -n istio-system
NAME                     DATA   AGE
istio                    2      19h
istio-ca-root-cert       1      19h
istio-sidecar-injector   2      19h
kiali                    1      19h
meshinfo                 1      19h

3. 查看指定namespace的指定名称的configmap

➜  ~ kubectl get configmap istio -n istio-system
NAME    DATA   AGE
istio   2      19h

4. 查看指定namespace的指定名称的configmap (以yaml格式展示)

➜  ~ kubectl get configmap  -n istio-system istio -o yaml
apiVersion: v1
data:
  mesh: |
    accessLogEncoding: JSON
    accessLogFile: /dev/stdout
    accessLogFormat: '{"authority":"%REQ(:AUTHORITY)%","bytes_received":"%BYTES_RECEIVED%","bytes_sent":"%BYTES_SENT%","downstream_local_address":"%DOWNSTREAM_LOCAL_ADDRESS%","downstream_remote_address":"%DOWNSTREAM_REMOTE_ADDRESS%","duration":"%DURATION%","istio_policy_status":"%DYNAMIC_METADATA(istio.mixer:status)%","method":"%REQ(:METHOD)%","path":"%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%","protocol":"%PROTOCOL%","request_id":"%REQ(X-REQUEST-ID)%","requested_server_name":"%REQUESTED_SERVER_NAME%","response_code":"%RESPONSE_CODE%","response_flags":"%RESPONSE_FLAGS%","route_name":"%ROUTE_NAME%","start_time":"%START_TIME%","trace_id":"%REQ(X-B3-TRACEID)%","upstream_cluster":"%UPSTREAM_CLUSTER%","upstream_host":"%UPSTREAM_HOST%","upstream_local_address":"%UPSTREAM_LOCAL_ADDRESS%","upstream_service_time":"%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%","upstream_transport_failure_reason":"%UPSTREAM_TRANSPORT_FAILURE_REASON%","user_agent":"%REQ(USER-AGENT)%","x_forwarded_for":"%REQ(X-FORWARDED-FOR)%"}'
    certificates: []
    defaultConfig:
      binaryPath: /usr/local/bin/envoy
      concurrency: 2
      configPath: /etc/istio/proxy
      controlPlaneAuthPolicy: MUTUAL_TLS
      discoveryAddress: istiod.istio-system.svc:15012
      drainDuration: 45s
      parentShutdownDuration: 1m0s
      proxyAdminPort: 15000
      proxyMetadata:
        DNS_AGENT: ""
      serviceCluster: istio-proxy
    disableMixerHttpReports: true
    disablePolicyChecks: true
    dnsRefreshRate: 300s
    enableAutoMtls: true
    enableEnvoyAccessLogService: false
    enablePrometheusMerge: false
    enableTracing: false
    mixerCheckServer: istio-policy.istio-system:15004
    mixerReportServer: istio-telemetry.istio-system:15004
    outboundTrafficPolicy:
      mode: ALLOW_ANY
    policyCheckFailOpen: true
    protocolDetectionTimeout: 100ms
    reportBatchMaxEntries: 0
    reportBatchMaxTime: 1s
    rootNamespace: istio-system
    sdsUdsPath: unix:/etc/istio/proxy/SDS
    sidecarToTelemetrySessionAffinity: false
    trustDomain: cluster.local
    trustDomainAliases: []
  meshNetworks: |
    null
kind: ConfigMap
metadata:
  annotations:
    servicemesh.alibabacloud.com/last-applied: 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
  creationTimestamp: "2021-05-24T07:06:57Z"
  labels:
    app: istio
    asm-system: "true"
    provider: asm
  name: istio
  namespace: istio-system
  ownerReferences:
  - apiVersion: istio.alibabacloud.com/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: Istio
    name: istio-config
    uid: 7987575b-2d41-4600-b3fe-30eb60e9be3c
  resourceVersion: "333076575"
  selfLink: /api/v1/namespaces/istio-system/configmaps/istio
  uid: eb5632a9-5dc4-418d-a5de-d80d0622092f

6. 根据关键字过滤

➜  ~ kubectl get configmap istio -n istio-system -o yaml | grep -o "mode: ALLOW_ANY"
mode: ALLOW_ANY

7. 替换mode

➜  ~ kubectl get configmap istio -n istio-system -o yaml | sed 's/mode: ALLOW_ANY/mode: REGISTRY_ONLY/g' | kubectl replace -n istio-system -f -

configmap/istio replaced

8. 恢复mode

kubectl get configmap istio -n istio-system -o yaml | sed 's/mode: REGISTRY_ONLY/mode: ALLOW_ANY/g' | kubectl replace -n istio-system -f -