`kubectl patch` each element of array

user_215640 0
Viewed 4521

I would like to patch all container templates in a Kubernetes deployment with a single kubectl patch command, without having to know their name. Is that possible?

I know I am able to achieve the replacement through awk, sed, jq and kubectl replace, but I would favour something like a [*] in the expression...

Patch command for a certain container spec

kubectl patch deployment mydeployment -p '{"spec":{"template":{"spec":{"containers":[{"name":"myname","imagePullPolicy":"Always"}]}}}}'

Example Deployment

apiVersion: extensions/v1beta1
kind: Deployment
spec:
  replicas: 1
  template:
    spec:
      containers:
      - image: example.com/my/fancyimage:latest
        imagePullPolicy: Never
        name: myname
      dnsPolicy: ClusterFirst
      restartPolicy: Always
json-patch kubectl
2 Answers

It's not exactly what you asked, since i use here command line tools, but if it would appear here, it would save me some time. So i post it for others, who come here from search engines.

kubectl \
  --username=USERNAME \
  --password=PASSWORD \
  --server="https://EXAMPLE.COM" \
  --insecure-skip-tls-verify=true \
  --namespace=MY_NAMESPACE \
  get deployments | \
  grep -v NAME | cut -f1 -d" " | \
  xargs kubectl \
    --username=USERNAME \
    --password=PASSWORD \
    --server="https://EXAMPLE.COM" \
    --insecure-skip-tls-verify=true \
    --namespace=MY_NAMESPACE \
    patch deployment \
      -p='{"spec":{"template":{"spec":{"containers":[{"name":"myname","imagePullPolicy":"Always"}]}}}}'
user_12243890

The best practice way of achieving this, assuming you want this to be an ongoing requirement, would be to use the AlwaysPullImages AdmissionController

AlwaysPullImages

This admission controller modifies every new Pod to force the image pull policy to Always...

You would apply this to your api controller by appending it to the --enable-admission-plugins argument

user_11554500
Related