Search copy-ready DevOps commands

ansible --version

ansible --version

ansible --version

ansible --version

aws --version

aws cloudformation describe-stack-events --stack-name my-stack

aws cloudformation describe-stacks --stack-name my-stack

aws cloudformation list-stacks

aws cloudwatch get-metric-statistics

aws cloudwatch list-metrics --namespace AWS/EC2

aws ec2 describe-instance-status --instance-ids i-1234567890abcdef0

aws ec2 describe-instances

aws ec2 describe-instances

aws ec2 describe-instances

aws ec2 describe-instances --filters "Name=instance-state-name,Values=running"

aws ec2 describe-instances --filters "Name=tag:Environment,Values=production"

aws ec2 describe-instances --output table

aws ec2 describe-instances --output text

aws ec2 describe-instances --output yaml

aws ec2 describe-instances --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress]' --output table

aws ec2 describe-instances --query 'Reservations[*].Instances[*].InstanceId' --output text

aws ec2 describe-route-tables

aws ec2 describe-route-tables --query 'RouteTables[].{id:RouteTableId,routes:Routes}'

aws ec2 describe-security-groups

aws ec2 describe-security-groups --query 'SecurityGroups[].{name:GroupName,id:GroupId}' -o table

aws ec2 describe-security-groups -o table

aws ec2 describe-subnets

aws ec2 describe-vpcs

aws ecs list-clusters

aws ecs list-services --cluster my-cluster

aws ecs list-task-definitions

aws eks list-clusters

aws eks list-clusters

aws eks list-nodegroups --cluster-name my-cluster

aws iam get-account-summary > evidence/$(date +%Y-%m-%d)/aws-account-summary.json

aws iam get-credential-report --query Content --output text | base64 --decode > credential-report.csv

aws iam list-access-keys --user-name alice

aws iam list-access-keys --user-name john

aws iam list-attached-user-policies --user-name john

aws iam list-groups

aws iam list-policies

aws iam list-roles

aws iam list-users

aws iam list-users

aws lambda get-function-configuration --function-name my-function

aws lambda list-functions

aws logs describe-log-groups

aws logs filter-log-events

aws logs tail /aws/lambda/my-function --follow

aws rds describe-db-instances

aws route53 list-hosted-zones

aws route53 list-resource-record-sets --hosted-zone-id Z1234567890ABC

aws s3api get-bucket-policy --bucket my-bucket-name

aws sts get-caller-identity

aws sts get-caller-identity

az account list -o table

az account show

az account show --query '{name:name, tenant:tenantId, user:user.name}' -o table

az account show --query '{name:name,id:id,tenant:tenantId,user:user.name}' -o table

az account show -o table

az account show -o table

az acr repository list --name acrdemo12345 -o table

az acr repository list --name acrdemo12345 -o table

az aks get-credentials --resource-group rg-demo-eastus --name aks-demo

az aks get-credentials --resource-group rg-demo-eastus --name aks-demo

az aks get-credentials --resource-group rg-webapp-prod --name aks-webapp-prod

az aks get-credentials --resource-group rg-webapp-prod --name aks-webapp-prod

az aks show --resource-group rg-demo-eastus --name aks-demo --query '{version:kubernetesVersion,nodeRG:nodeResourceGroup}' -o table

az aks upgrade --resource-group rg-demo-eastus --name aks-demo --kubernetes-version VERSION

az cloud show -o table

az consumption budget list -o table

az disk list --query '[?managedBy==null].{name:name,rg:resourceGroup,sku:sku.name,size:diskSizeGb}' -o table

az disk list -o table

az functionapp function list --resource-group rg-demo-eastus --name func-demo-143it -o table

az group list --query '[].{name:name,location:location}' -o table

az group list -o json

az group list -o table

az group list -o table

az group show --name rg-demo-eastus -o json

az keyvault secret list --vault-name kv-demo-143it --query '[].name' -o table

az keyvault secret show --vault-name kv-demo-143it --name demo-token --query '{name:name,enabled:attributes.enabled,updated:attributes.updated}' -o table

az lock list -o table

az monitor log-analytics workspace list -o table

az monitor metrics list --resource RESOURCE_ID --metric "Percentage CPU"

az monitor metrics list --resource RESOURCE_ID --metric Percentage CPU --interval PT5M -o table

az monitor metrics list-definitions --resource RESOURCE_ID -o table

az network nic list-effective-nsg --resource-group rg-demo-eastus --name NIC_NAME -o table

az network nsg rule list --resource-group RESOURCE_GROUP --nsg-name NSG_NAME -o table

az network vnet list -o table

az network vnet list -o table

az network vnet list -o table

az network vnet list -o table

az pipelines list -o table

az policy assignment list --query '[].{name:name,scope:scope,policy:policyDefinitionId}' -o table

az repos list -o table

az resource list --resource-group rg-demo-eastus -o table

az resource list --resource-group rg-demo-eastus -o table

az resource list --tag environment=prod --query '[].{name:name,type:type,rg:resourceGroup}' -o table

az resource show --ids RESOURCE_ID --query properties.provisioningState -o tsv

az role assignment list --assignee PRINCIPAL_ID -o table

az role assignment list --assignee USER_OR_SERVICE_PRINCIPAL_ID -o table

az storage account list -o table

az storage account list -o table

az storage blob list

az storage blob list --account-name storagedemo12345 --container-name artifacts --auth-mode login -o table

az storage blob show

az version

az vm get-instance-view --resource-group rg-demo-eastus --name vm-demo-01 --query instanceView.statuses -o table

az vm list -d -o table

az vm list -d -o table

consul intention list

consul intention list

curl -I https://example.com/static/app.js | grep -iE 'cache-control|etag|age|cf-cache-status|x-cache'

Disconnect-ExchangeOnline -Confirm:$false

docker compose logs

docker compose logs --tail=100

docker compose logs -f web

docker cp my-container:/app/logs/app.log ./local-logs/

docker logs --tail 100 -f production-api

docker logs -f --timestamps my-app

docker logs container-id

docker logs container-id

docker logs container-id

docker logs container-name

docker logs my-container

docker ps --filter "status=running" --filter "name=prod-*"

docker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

Get-EXOMailbox -ResultSize 10 -PropertySets Minimum

Get-EXOMailbox -ResultSize 10 -PropertySets Minimum

Get-EXOMailbox -ResultSize 25 -Properties ForwardingSmtpAddress,DeliverToMailboxAndForward | Select-Object DisplayName,ForwardingSmtpAddress,DeliverToMailboxAndForward

Get-EXOMailbox -ResultSize 25 -PropertySets Minimum

Get-EXOMailboxPermission -Identity USER@DOMAIN.COM | Where-Object { -not $_.IsInherited }

Get-MgApplication -All -Property Id,AppId,DisplayName,SignInAudience

Get-MgAuditLogDirectoryAudit -Top 20

Get-MgAuditLogDirectoryAudit -Top 25

Get-MgAuditLogDirectoryAudit -Top 50

Get-MgAuditLogSignIn -Top 100 | Select-Object CreatedDateTime,UserPrincipalName,AppDisplayName,ConditionalAccessStatus

Get-MgAuditLogSignIn -Top 100 | Select-Object CreatedDateTime,UserPrincipalName,AppDisplayName,ConditionalAccessStatus,Status

Get-MgAuditLogSignIn -Top 100 | Select-Object UserPrincipalName,ConditionalAccessStatus,Status

Get-MgAuditLogSignIn -Top 100 | Where-Object { $_.ClientAppUsed -match 'Other|IMAP|POP|SMTP' }

Get-MgAuditLogSignIn -Top 20

Get-MgAuditLogSignIn -Top 20 | Select-Object CreatedDateTime,UserPrincipalName,AppDisplayName,ConditionalAccessStatus

Get-MgAuditLogSignIn -Top 50

Get-MgAuditLogSignIn -Top 50

Get-MgAuditLogSignIn -Top 50

Get-MgAuditLogSignIn -Top 50 | Select-Object CreatedDateTime,UserPrincipalName,ConditionalAccessStatus,Status

Get-MgAuditLogSignIn -Top 50 | Where-Object { $_.UserPrincipalName -like '*break*' }

Get-MgContext

Get-MgContext

Get-MgDirectoryRole -All

Get-MgDirectoryRole -All

Get-MgDirectoryRole -All | Select-Object Id,DisplayName

Get-MgDirectoryRole -All | Sort-Object DisplayName

Get-MgGroup -All -Property Id,DisplayName,GroupTypes,Visibility,SecurityEnabled,MailEnabled | Where-Object { $_.GroupTypes -contains 'Unified' }

Get-MgGroup -All -Property Id,DisplayName,SecurityEnabled,MailEnabled,GroupTypes

Get-MgGroup -All -Property Id,DisplayName,SecurityEnabled,MailEnabled,GroupTypes

Get-MgGroup -Filter "securityEnabled eq true" -Property Id,DisplayName

Get-MgIdentityConditionalAccessPolicy -All

Get-MgIdentityConditionalAccessPolicy -All

Get-MgIdentityConditionalAccessPolicy -All

Get-MgIdentityConditionalAccessPolicy -All

Get-MgIdentityConditionalAccessPolicy -All

Get-MgIdentityConditionalAccessPolicy -All | Select-Object DisplayName,State

Get-MgIdentityConditionalAccessPolicy -All | Select-Object DisplayName,State

Get-MgIdentityConditionalAccessPolicy -All | Select-Object DisplayName,State,ModifiedDateTime

Get-MgIdentityConditionalAccessPolicy -All | Select-Object Id,DisplayName,State,CreatedDateTime,ModifiedDateTime

Get-MgIdentityConditionalAccessPolicy -All | Select-Object Id,DisplayName,State,ModifiedDateTime

Get-MgIdentityConditionalAccessPolicy -All | Where-Object { $_.DisplayName -match 'legacy|basic' }

Get-MgIdentityConditionalAccessPolicy -All | Where-Object { $_.State -eq 'enabledForReportingButNotEnforced' }

Get-MgIdentityConditionalAccessPolicy -ConditionalAccessPolicyId "00000000-0000-0000-0000-000000000000"

Get-MgServicePrincipal -All -Property Id,AppId,DisplayName,AccountEnabled

Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,AccountEnabled

Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,AccountEnabled,UserType

Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,AccountEnabled,UserType

Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,AssignedLicenses

Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,UserType,AccountEnabled

Get-MgUser -Filter "accountEnabled eq false" -Property Id,DisplayName,UserPrincipalName,AccountEnabled

Get-MgUser -Filter "accountEnabled eq true" -Property Id,DisplayName,UserPrincipalName

Get-MgUser -Filter "accountEnabled eq true" -Property Id,DisplayName,UserPrincipalName

Get-MgUser -Filter "startsWith(displayName,'Break Glass')" -Property Id,DisplayName,UserPrincipalName,AccountEnabled

Get-MgUser -Filter "startsWith(displayName,'Break Glass')" -Property Id,DisplayName,UserPrincipalName,AccountEnabled

Get-MgUser -Filter "userType eq 'Guest'" -Property Id,DisplayName,UserPrincipalName,UserType

Get-MgUser -Top 10 -Property Id,DisplayName,UserPrincipalName,AccountEnabled

git config --global alias.st status

git config --list

git remote show origin

git show v1.0.0

git stash list

git stash list

git stash show -p stash@{0}

git status

git status

git status

git status

git status

git status --ignored

git status -s

git status -sb

git tag -a v1.0.0 -m "Release version 1.0.0"

helm list

ip addr show

ip addr show

ip addr show eth0

ip link show

ip neigh show

ip neigh show

ip route get 203.0.113.10

ip route get 8.8.8.8

ip route get 8.8.8.8

ip route show

ip route show

ip route show

ip route show default

ip route show table main

istioctl proxy-status

istioctl proxy-status

kubectl auth can-i --list --namespace production

kubectl auth can-i --list -n production

kubectl auth can-i get pods --as system:serviceaccount:production:webapp -n production

kubectl config get-contexts

kubectl config get-contexts

kubectl cp my-pod:/logs/app.log ./app.log -c nginx

kubectl describe deployment nginx

kubectl describe deployment nginx

kubectl describe endpoints nginx-service

kubectl describe node worker-1

kubectl describe nodes

kubectl describe pod <name>

kubectl describe pod <name>

kubectl describe pod <pod-name>

kubectl describe pod <pod-name>

kubectl describe pod <pod-name>

kubectl describe pod my-pod

kubectl describe pod my-pod -n production

kubectl describe pod pod-name

kubectl describe pod pod-name

kubectl describe pod pod-name

kubectl describe pod pod-name

kubectl describe pod pod-name | grep -A 5 "Requests"

kubectl describe pod pod-name | grep Image

kubectl describe service <service-name>

kubectl describe service my-service

kubectl exec my-pod -- su - appuser -c "whoami"

kubectl get --raw /healthz

kubectl get $resource -n $NAMESPACE -o yaml > $BACKUP_DIR/$resource.yaml

kubectl get all

kubectl get all

kubectl get all

kubectl get all --all-namespaces -o yaml > cluster-backup.yaml

kubectl get all -n $NAMESPACE -o yaml > $BACKUP_DIR/all-resources.yaml

kubectl get endpoints

kubectl get endpoints -A

kubectl get endpoints <service-name>

kubectl get endpoints <service-name>

kubectl get endpoints nginx-service

kubectl get events --field-selector involvedObject.name=pod-name

kubectl get events --sort-by=.metadata.creationTimestamp

kubectl get events --sort-by=.metadata.creationTimestamp

kubectl get events --sort-by='.lastTimestamp'

kubectl get events --sort-by='.lastTimestamp'

kubectl get events -A --sort-by=.lastTimestamp > incident-k8s-events.txt

kubectl get events -n production --watch

kubectl get ingress -A

kubectl get ingress -A

kubectl get ingress -n webapp

kubectl get jobs

kubectl get namespaces

kubectl get networkpolicy -A

kubectl get networkpolicy -A

kubectl get networkpolicy -A

kubectl get networkpolicy -A -o yaml > evidence/$(date +%Y-%m-%d)/networkpolicies.yaml

kubectl get ns

kubectl get pod my-pod -o json

kubectl get pod my-pod -o yaml

kubectl get pod web-abc123 -n production -o jsonpath='{.spec.containers[*].name}'

kubectl get pods

kubectl get pods

kubectl get pods --all-namespaces

kubectl get pods --show-labels

kubectl get pods --sort-by=.metadata.creationTimestamp

kubectl get pods -A

kubectl get pods -A

kubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"/"}{.metadata.name}{" user="}{.spec.securityContext.runAsUser}{"\n"}{end}'

kubectl get pods -l app=nginx

kubectl get pods -n consul

kubectl get pods -n istio-system

kubectl get pods -n istio-system

kubectl get pods -n linkerd

kubectl get pods -n production -o jsonpath='{range .items[*]}{.metadata.name}{" containers="}{range .spec.containers[*]}{.name}{","}{end}{"\n"}{end}'

kubectl get pods -n webapp

kubectl get pods -o custom-columns=NAME:.metadata.name,STATUS:.status.phase

kubectl get pods -o wide

kubectl get pods -w

kubectl get rolebinding,role -n $NAMESPACE -o yaml > $BACKUP_DIR/rbac.yaml

kubectl get secrets

kubectl get svc

kubectl get svc

kubectl get svc -A

kubectl get svc -A

kubectl logs -f <pod>