kubectl ate commands

The plugin is the binary kubectl-ate. It finds ate-api-server through your kubeconfig and opens a port-forward for each command, unless you pass --endpoint. Section 2.2 shows how to install and use it. In our runs we built it from the checkout with go install ./cmd/kubectl-ate.

Three kinds of command do more or less than one call. logs actor also reads the logs of the worker pod through the Kubernetes API. proxy actor sends its traffic through atenet-router and not through ate-api-server. The admin commands write Kubernetes Secrets and call no Substrate API.

Global flags

Error: unknown flag "-A"

Usage:
  kubectl-ate get worker [worker-name ...] [flags]

Aliases:
  worker, workers

Flags:
  -a, --atespace string        filter worker pods hosting actors in a specific atespace
  -h, --help                   help for worker
  -n, --namespace string       scope output to a specific Kubernetes namespace
      --sandbox-class string   filter by sandbox class (e.g. gvisor, microvm)
  -l, --selector string        filter by worker pool labels

Global Flags:
      --context string      kubeconfig context to use
      --endpoint string     manual override for the gRPC target (e.g., localhost:8080); if omitted, automatically port-forwards
      --kubeconfig string   path to the kubeconfig file
  -o, --output string       output format: table, json, or yaml (default "table")
      --preview             allow the use of preview features enabled on the server
      --token-file string   path to a bearer token for ate-api authentication, or - for stdin (defaults to a Kubernetes ServiceAccount token)
      --trace               enable tracing for the request
  -v, --verbose count       output verbosity; may be repeated (e.g. -v, -vv, -vvvvv)

Actors

Templates, tags, and atespaces

The CLI has no command that updates a template. To change one, create a template with a new name and point actors at it with update actor --template.

Egress policies and access policies

Workers

Workers have no atespace. get workers lists the workers of all Kubernetes namespaces by default, and get workers -A fails with unknown flag "-A". The -n and -l flags narrow the list, and -a keeps only the workers that host an actor of that atespace.

Admin commands

These commands read and write Kubernetes Secrets directly. They take --name and --secret-namespace.

Section 5.3 explains the tokens, and section 8.5 notes that the rotation is manual.

Commands that older text names and v1.0.0 does not have

kubectl ate pause actor and the flag --template-ref do not exist at v1.0.0. Section 8.4 lists the replacements.