calicoctl apply

This sections describes the calicoctl apply command.

Read the calicoctl command line interface user reference for a full list of calicoctl commands.

calicoctl apply - 图1note

The available actions for a specific resource type may be limited based on the datastore used for Calico (etcdv3 / Kubernetes API). Please refer to the Resources section for details about each resource type.

Displaying the help text for ‘calicoctl apply’ command

Run calicoctl apply --help to display the following help menu for the command.

  1. Usage:
  2.   calicoctl apply --filename=<FILENAME> [--recursive] [--skip-empty] [--config=<CONFIG>] [--namespace=<NS>]
  4. Examples:
  5.   # Apply a policy using the data in policy.yaml.
  6.   calicoctl apply -f ./policy.yaml
  8.   # Apply a policy based on the JSON passed into stdin.
  9.   cat policy.json | calicoctl apply -f -
  11. Options:
  12.   -h --help                 Show this screen.
  13.   -f --filename=<FILENAME>  Filename to use to apply the resource.  If set to
  14.                             "-" loads from stdin. If filename is a directory, this command is
  15.                             invoked for each .json .yaml and .yml file within that directory,
  16.                             terminating after the first failure.
  17.   -R --recursive            Process the filename specified in -f or --filename recursively.
  18.      --skip-empty           Do not error if any files or directory specified using -f or --filename contain no
  19.                             data.
  20.   -c --config=<CONFIG>      Path to the file containing connection
  21.                             configuration in YAML or JSON format.
  22.                             [default: /etc/calico/calicoctl.cfg]
  23.   -n --namespace=<NS>       Namespace of the resource.
  24.                             Only applicable to NetworkPolicy and WorkloadEndpoint.
  25.                             Only applicable to NetworkPolicy, NetworkSet, and WorkloadEndpoint.
  26.                             Uses the default namespace if not specified.
  27.   --context=<context>       The name of the kubeconfig context to use.
  29. Description:
  30.   The apply command is used to create or replace a set of resources by filename
  31.   or stdin.  JSON and YAML formats are accepted.
  33.   Valid resource types are:
  35.     * bgpConfiguration
  36.     * bgpPeer
  37.     * felixConfiguration
  38.     * globalNetworkPolicy
  39.     * hostEndpoint
  40.     * ipPool
  41.     * networkPolicy
  42.     * networkSet
  43.     * node
  44.     * profile
  45.     * workloadEndpoint
  47.   When applying a resource:
  48.   -  if the resource does not already exist (as determined by it's primary
  49.      identifiers) then it is created
  50.   -  if the resource already exists then the specification for that resource is
  51.      replaced in it's entirety by the new resource specification.
  53.   The output of the command indicates how many resources were successfully
  54.   applied, and the error reason if an error occurred.
  56.   The resources are applied in the order they are specified.  In the event of a
  57.   failure applying a specific resource it is possible to work out which
  58.   resource failed based on the number of resources successfully applied
  60.   When applying a resource to perform an update, the complete resource spec
  61.   must be provided, it is not sufficient to supply only the fields that are
  62.   being updated.

Examples

  1. Apply a set of resources (of mixed type) using the data in resources.yaml.

    1. calicoctl apply -f ./resources.yaml

    Results indicate that 8 resources were successfully applied

    1. Successfully applied 8 resource(s)

  2. Apply two policy resources based on the JSON passed into stdin.

    1. cat policy.json | calicoctl apply -f -

    Results indicate success.

    1. Successfully applied 2 'policy' resource(s)

Options

  1. -f --filename=<FILENAME>  Filename to use to apply the resource.  If set to
  2.                           "-" loads from stdin.
  3. -n --namespace=<NS>       Namespace of the resource.
  4.                           Only applicable to NetworkPolicy and WorkloadEndpoint.
  5.                           Uses the default namespace if not specified.

General options

  1. -c --config=<CONFIG>      Path to the file containing connection
  2.                           configuration in YAML or JSON format.
  3.                           [default: /etc/calico/calicoctl.cfg]

See also