Skip to content

ksail workload

Manage workload operations including resource inspection, GitOps reconciliation, and lifecycle management.
Read operations:
get - List resources with optional -o json for structured output including status/conditions
describe - Show detailed resource info including events, conditions, and error details
logs - Print container logs (use --tail=N, --previous for crash diagnostics)
explain - Show API documentation for a resource kind
forward - Forward one or more local ports to a pod
images - List container images required by cluster components
scan - Run security scans on Kubernetes manifests using Kubescape
wait - Wait for a specific condition on resources
Write operations:
apply, create, debug, delete, edit, exec, export, expose, import, install, push, reconcile, rollout, scale, watch
cipher - Manage SOPS-encrypted secret files (encrypt, decrypt, edit, import, rotate)
GitOps diagnostics: Use 'get' with Flux resources (kustomization, helmrelease, ocirepository -A -o json) or ArgoCD resources (application -A -o json) to check reconciliation status, health, and errors in a single call.
Usage:
ksail workload [flags]
ksail workload [command]
Resources:
apply Apply manifests
create Create resources
delete Delete resources
describe Describe resources
edit Edit a resource
explain Get documentation for a resource
expose Expose a resource as a service
gen Generate Kubernetes resource manifests
get Get resources
scale Scale resources
wait Wait for a specific condition on one or many resources
Images:
export Export container images from the cluster
images List container images required by cluster components
import Import container images to the cluster
GitOps:
install Install Helm charts
push Package and push an OCI artifact to a registry
reconcile Trigger reconciliation for GitOps workloads
scan Run security scans on Kubernetes manifests
validate Validate Kubernetes manifests and kustomizations
Dev loop:
debug Create debugging sessions for troubleshooting workloads and nodes
exec Execute a command in a container
forward Forward one or more local ports to a pod
intercept Intercept a Deployment's inbound traffic to a local process (reverse dev bridge)
logs Print container logs
mirror Mirror a Deployment's inbound traffic locally (read-only pcap capture)
network Inspect live network traffic flows via Cilium Hubble
rollout Manage the rollout of a resource
watch Watch for file changes and auto-apply workloads
Secrets:
cipher Manage encrypted files with SOPS
Global Flags:
--benchmark Show per-activity benchmark output
--config string Path to config file (default: ksail.yaml found via directory traversal)
--experimental Enable experimental (unstable) commands and features
Use "ksail workload [command] --help" for more information about a command.