Manage workload operations including resource inspection, GitOps reconciliation, and lifecycle management.
get - List resources with optional -o json for structured output including status/conditions
describe - Show detailed resource info including events, conditions, and error details
logs - Print container logs (use --tail=N, --previous for crash diagnostics)
explain - Show API documentation for a resource kind
forward - Forward one or more local ports to a pod
images - List container images required by cluster components
scan - Run security scans on Kubernetes manifests using Kubescape
wait - Wait for a specific condition on resources
apply, create, debug, delete, edit, exec, export, expose, import, install, push, reconcile, rollout, scale, watch
cipher - Manage SOPS-encrypted secret files (encrypt, decrypt, edit, import, rotate)
GitOps diagnostics: Use 'get' with Flux resources (kustomization, helmrelease, ocirepository -A -o json) or ArgoCD resources (application -A -o json) to check reconciliation status, health, and errors in a single call.
describe Describe resources
explain Get documentation for a resource
expose Expose a resource as a service
gen Generate Kubernetes resource manifests
wait Wait for a specific condition on one or many resources
export Export container images from the cluster
images List container images required by cluster components
import Import container images to the cluster
install Install Helm charts
push Package and push an OCI artifact to a registry
reconcile Trigger reconciliation for GitOps workloads
scan Run security scans on Kubernetes manifests
validate Validate Kubernetes manifests and kustomizations
debug Create debugging sessions for troubleshooting workloads and nodes
exec Execute a command in a container
forward Forward one or more local ports to a pod
intercept Intercept a Deployment's inbound traffic to a local process (reverse dev bridge)
logs Print container logs
mirror Mirror a Deployment's inbound traffic locally (read-only pcap capture)
network Inspect live network traffic flows via Cilium Hubble
rollout Manage the rollout of a resource
watch Watch for file changes and auto-apply workloads
cipher Manage encrypted files with SOPS
--benchmark Show per-activity benchmark output
--config string Path to config file (default: ksail.yaml found via directory traversal)
--experimental Enable experimental (unstable) commands and features
Use "ksail workload [command] --help" for more information about a command.