1. Documentation

Administrator CLI Operations

Overview

This topic provides information on the administrator CLI operations and their syntax. You must setup and login with the CLI before you can perform these operations.

The oadm command is used for administrator CLI operations, which is a symlink that can be used on hosts that have the openshift binary, such as a master. If you are on a workstation that does not have the openshift binary, you can also use oc adm in place of oadm, if oc is available.

The administrator CLI differs from the normal set of commands under the developer CLI, which uses the oc command, and is used more for project-level operations.

Common Operations

The administrator CLI allows interaction with the various objects that are managed by OpenShift Origin. Many common oadm operations are invoked using the following syntax:

$ oadm <action> <option>

This specifies:

  • An <action> to perform, such as new-project or router.

  • An available <option> to perform the action on as well as a value for the option. Options include --output.

Basic CLI Operations

new-project

Creates a new project:

$ oadm new-project <project_name>

policy

Manages authorization policies:

$ oadm policy

groups

Manages groups:

$ oadm groups

Install CLI Operations

router

Installs a router:

$ oadm router <router_name>

ipfailover

Installs an IP failover group for a set of nodes:

$ oadm ipfailover <ipfailover_config>

registry

Installs an integrated container registry:

$ oadm registry

Maintenance CLI Operations

build-chain

Outputs the inputs and dependencies of any builds:

$ oadm build-chain <image_stream>[:<tag>]

manage-node

Manages nodes. For example, list or evacuate pods, or mark them ready:

$ oadm manage-node

prune

Removes older versions of resources from the server:

$ oadm prune

Settings CLI Operations

config

Changes kubelet configuration files:

$ oadm config <subcommand>

create-kubeconfig

Creates a basic .kubeconfig file from client certificates:

$ oadm create-kubeconfig

create-api-client-config

Creates a configuration file for connecting to the server as a user:

$ oadm create-api-client-config

Advanced CLI Operations

create-bootstrap-project-template

Creates a bootstrap project template:

$ oadm create-bootstrap-project-template

create-bootstrap-policy-file

Creates the default bootstrap policy:

$ oadm create-bootstrap-policy-file

create-login-template

Creates a login template:

$ oadm create-login-template

overwrite-policy

Resets the policy to the default values:

$ oadm overwrite-policy

create-node-config

Creates a configuration bundle for a node:

$ oadm create-node-config

ca

Manages certificates and keys:

$ oadm ca

Other CLI Operations

version

Displays the version of the indicated object:

$ oadm version

help

Displays help about any command:

$ oadm help <command>