CINXE.COM

<!doctype html><html itemscope itemtype=http://schema.org/WebPage lang=en class=no-js><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=generator content="Hugo 0.133.0"><link rel=canonical type=text/html href=https://kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/><meta name=robots content="noindex, nofollow"><link rel="shortcut icon" type=image/png href=/images/kubernetes.png><link rel=icon type=image/png sizes=64x64 href=/icons/favicon-64.png><link rel=icon type=image/png sizes=32x32 href=/icons/favicon-32.png><link rel=icon type=image/png sizes=16x16 href=/icons/favicon-16.png><link rel=apple-touch-icon-256x256 href=/icons/apple-touch-icon-256x256.png><link rel=apple-touch-icon-196x196 href=/icons/apple-touch-icon-196x196.png><link rel=apple-touch-icon-192x192 href=/icons/apple-touch-icon-192x192.png><link rel=apple-touch-icon-180x180 href=/icons/apple-touch-icon-180x180.png><link rel=apple-touch-icon-167x167 href=/icons/apple-touch-icon-167x167.png><link rel=apple-touch-icon-160x160 href=/icons/apple-touch-icon-160x160.png><link rel=apple-touch-icon-152x152 href=/icons/apple-touch-icon-152x152.png><link rel=apple-touch-icon-120x120 href=/icons/apple-touch-icon-120x120.png><link rel=apple-touch-icon-76x76 href=/icons/apple-touch-icon-76x76.png><link rel=icon type=image/png href=/icons/icon-128x128.png sizes=128x128><meta name=theme-color content="#326de6"><title>kubectl exec | Kubernetes</title> <meta name=description content="Production-Grade Container Orchestration"><meta property="og:url" content="https://kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/"><meta property="og:site_name" content="Kubernetes"><meta property="og:title" content="kubectl exec"><meta property="og:description" content="Synopsis Execute a command in a container. kubectl exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] Examples # Get output from running the 'date' command from pod mypod, using the first container by default kubectl exec mypod -- date # Get output from running the 'date' command in ruby-container from pod mypod kubectl exec mypod -c ruby-container -- date # Switch to raw terminal mode; sends stdin to 'bash' in ruby-container from pod mypod # and sends stdout/stderr from 'bash' back to the client kubectl exec mypod -c ruby-container -i -t -- bash -il # List contents of /usr from the first container of pod mypod and sort by modification time # If the command you want to execute in the pod has any flags in common (e."><meta property="og:locale" content="en"><meta property="og:type" content="website"><meta itemprop=name content="kubectl exec"><meta itemprop=description content="Synopsis Execute a command in a container. kubectl exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] Examples # Get output from running the 'date' command from pod mypod, using the first container by default kubectl exec mypod -- date # Get output from running the 'date' command in ruby-container from pod mypod kubectl exec mypod -c ruby-container -- date # Switch to raw terminal mode; sends stdin to 'bash' in ruby-container from pod mypod # and sends stdout/stderr from 'bash' back to the client kubectl exec mypod -c ruby-container -i -t -- bash -il # List contents of /usr from the first container of pod mypod and sort by modification time # If the command you want to execute in the pod has any flags in common (e."><meta itemprop=dateModified content="2024-08-19T17:14:51+08:00"><meta itemprop=wordCount content="779"><meta name=twitter:card content="summary"><meta name=twitter:title content="kubectl exec"><meta name=twitter:description content="Synopsis Execute a command in a container. kubectl exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] Examples # Get output from running the 'date' command from pod mypod, using the first container by default kubectl exec mypod -- date # Get output from running the 'date' command in ruby-container from pod mypod kubectl exec mypod -c ruby-container -- date # Switch to raw terminal mode; sends stdin to 'bash' in ruby-container from pod mypod # and sends stdout/stderr from 'bash' back to the client kubectl exec mypod -c ruby-container -i -t -- bash -il # List contents of /usr from the first container of pod mypod and sort by modification time # If the command you want to execute in the pod has any flags in common (e."><link rel=preload href=/scss/main.min.4c155a58c3ff6f4d79f638dc780823cc894c1618c496cc1be759b71161d8d39d.css as=style><link href=/scss/main.min.4c155a58c3ff6f4d79f638dc780823cc894c1618c496cc1be759b71161d8d39d.css rel=stylesheet integrity><script src=https://code.jquery.com/jquery-3.6.0.min.js integrity=sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK crossorigin=anonymous></script><meta property="og:image" content="/images/kubernetes-open-graph.png"><link rel=manifest href=/manifest.webmanifest><link rel=alternate hreflang=zh-cn href=https://kubernetes.io/zh-cn/docs/reference/kubectl/generated/kubectl_exec/><script type=application/ld+json>{"@context":"https://schema.org","@type":"Organization","url":"https://kubernetes.io","logo":"https://kubernetes.io/images/favicon.png","potentialAction":{"@type":"SearchAction","target":"https://kubernetes.io/search/?q={search_term_string}","query-input":"required name=search_term_string"}}</script><meta name=theme-color content="#326ce5"><link rel=manifest href=/manifest.webmanifest><script defer src=/js/banner-dismiss.min.bb5cb02169825d4a22f522c81742670e65425430e15ae13229e8123aabde39f5.js integrity="sha256-u1ywIWmCXUoi9SLIF0JnDmVCVDDhWuEyKegSOqveOfU=" crossorigin=anonymous></script><script async src="https://www.googletagmanager.com/gtag/js?id=G-JPP6RFM2BP"></script><script>var dnt,doNotTrack=!1;if(!1&&(dnt=navigator.doNotTrack||window.doNotTrack||navigator.msDoNotTrack,doNotTrack=dnt=="1"||dnt=="yes"),!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-JPP6RFM2BP")}</script></head><body class=td-section><header><nav class="js-navbar-scroll navbar navbar-expand navbar-dark flex-column flex-md-row td-navbar" data-auto-burger=primary><a class="navbar-brand img-fluid" href=/></a><div class="td-navbar-nav-scroll ml-md-auto" id=main_navbar><ul class="navbar-nav mt-2 mt-lg-0"><li class="nav-item mr-2 mb-lg-0"><a class="nav-link active" href=/docs/>Documentation</a></li><li class="nav-item mr-2 mb-lg-0"><a class=nav-link href=/blog/>Kubernetes Blog</a></li><li class="nav-item mr-2 mb-lg-0"><a class=nav-link href=/training/>Training</a></li><li class="nav-item mr-2 mb-lg-0"><a class=nav-link href=/partners/>Partners</a></li><li class="nav-item mr-2 mb-lg-0"><a class=nav-link href=/community/>Community</a></li><li class="nav-item mr-2 mb-lg-0"><a class=nav-link href=/case-studies/>Case Studies</a></li><li class="nav-item mr-n3 mr-lg-0 dropdown"><a class="nav-link dropdown-toggle" href=# id=navbarDropdown role=button data-toggle=dropdown aria-haspopup=true aria-expanded=false>Versions</a><div class="dropdown-menu dropdown-menu-right" aria-labelledby=navbarDropdownMenuLink><a class=dropdown-item href=/releases>Release Information</a> <a class=dropdown-item href=https://kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/>v1.32</a> <a class=dropdown-item href=https://v1-31.docs.kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/>v1.31</a> <a class=dropdown-item href=https://v1-30.docs.kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/>v1.30</a> <a class=dropdown-item href=https://v1-29.docs.kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/>v1.29</a> <a class=dropdown-item href=https://v1-28.docs.kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/>v1.28</a></div></li><li class="nav-item mr-n4 mr-lg-0 dropdown"><a class="nav-link dropdown-toggle" href=# id=navbarDropdownMenuLink role=button data-toggle=dropdown aria-haspopup=true aria-expanded=false>English</a><div class="dropdown-menu dropdown-menu-right" aria-labelledby=navbarDropdownMenuLink><a class=dropdown-item href=/zh-cn/docs/reference/kubectl/generated/kubectl_exec/>中文 (Chinese)</a></div></li><li class="search-item nav-item mr-n4 mr-lg-0"><div class=search-bar><i class="search-icon fa-solid fa-search"></i> <input type=search name=q data-search-page=/search/ class="search-input td-search-input" placeholder="Search this site" aria-label="Search this site" autocomplete=off></div></li></ul></div><button id=hamburger onclick=kub.toggleMenu() data-auto-burger-exclude><div></div></button></nav></header><div class="container-fluid td-outer"><div class=td-main><div class="row flex-xl-nowrap"><main class="col-12 col-md-9 col-xl-8 pl-md-5" role=main><div class=td-content><div class="pageinfo pageinfo-primary d-print-none"><p>This is the multi-page printable view of this section. <a href=# onclick="return print(),!1">Click here to print</a>.</p><p><a href=/docs/reference/kubectl/generated/kubectl_exec/>Return to the regular view of this page</a>.</p></div><h1 class=title>kubectl exec</h1><ul></ul><div class=content><h2 id=synopsis>Synopsis</h2><p>Execute a command in a container.</p><pre tabindex=0><code>kubectl exec (POD | TYPE/NAME) [-c CONTAINER] [flags] -- COMMAND [args...] </code></pre><h2 id=examples>Examples</h2><pre tabindex=0><code> # Get output from running the 'date' command from pod mypod, using the first container by default kubectl exec mypod -- date # Get output from running the 'date' command in ruby-container from pod mypod kubectl exec mypod -c ruby-container -- date # Switch to raw terminal mode; sends stdin to 'bash' in ruby-container from pod mypod # and sends stdout/stderr from 'bash' back to the client kubectl exec mypod -c ruby-container -i -t -- bash -il # List contents of /usr from the first container of pod mypod and sort by modification time # If the command you want to execute in the pod has any flags in common (e.g. -i), # you must use two dashes (--) to separate your command's flags/arguments # Also note, do not surround your command and its flags/arguments with quotes # unless that is how you would execute it normally (i.e., do ls -t /usr, not "ls -t /usr") kubectl exec mypod -i -t -- ls -t /usr # Get output from running 'date' command from the first pod of the deployment mydeployment, using the first container by default kubectl exec deploy/mydeployment -- date # Get output from running 'date' command from the first pod of the service myservice, using the first container by default kubectl exec svc/myservice -- date </code></pre><h2 id=options>Options</h2><table style=width:100%;table-layout:fixed><col span=1 style=width:10px><col span=1><tbody><tr><td colspan=2>-c, --container string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen</p></td></tr><tr><td colspan=2>-f, --filename strings</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>to use to exec into the resource</p></td></tr><tr><td colspan=2>-h, --help</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>help for exec</p></td></tr><tr><td colspan=2>--pod-running-timeout duration     Default: 1m0s</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running</p></td></tr><tr><td colspan=2>-q, --quiet</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Only print output from the remote session</p></td></tr><tr><td colspan=2>-i, --stdin</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Pass stdin to the container</p></td></tr><tr><td colspan=2>-t, --tty</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Stdin is a TTY</p></td></tr></tbody></table><h2 id=heading></h2><table style=width:100%;table-layout:fixed><col span=1 style=width:10px><col span=1><tbody><tr><td colspan=2>--as string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Username to impersonate for the operation. User could be a regular user or a service account in a namespace.</p></td></tr><tr><td colspan=2>--as-group strings</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Group to impersonate for the operation, this flag can be repeated to specify multiple groups.</p></td></tr><tr><td colspan=2>--as-uid string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>UID to impersonate for the operation.</p></td></tr><tr><td colspan=2>--cache-dir string     Default: "$HOME/.kube/cache"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Default cache directory</p></td></tr><tr><td colspan=2>--certificate-authority string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Path to a cert file for the certificate authority</p></td></tr><tr><td colspan=2>--client-certificate string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Path to a client certificate file for TLS</p></td></tr><tr><td colspan=2>--client-key string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Path to a client key file for TLS</p></td></tr><tr><td colspan=2>--cluster string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The name of the kubeconfig cluster to use</p></td></tr><tr><td colspan=2>--context string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The name of the kubeconfig context to use</p></td></tr><tr><td colspan=2>--default-not-ready-toleration-seconds int     Default: 300</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td></tr><tr><td colspan=2>--default-unreachable-toleration-seconds int     Default: 300</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td></tr><tr><td colspan=2>--disable-compression</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>If true, opt-out of response compression for all requests to the server</p></td></tr><tr><td colspan=2>--insecure-skip-tls-verify</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure</p></td></tr><tr><td colspan=2>--kubeconfig string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Path to the kubeconfig file to use for CLI requests.</p></td></tr><tr><td colspan=2>--match-server-version</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Require server version to match client version</p></td></tr><tr><td colspan=2>-n, --namespace string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>If present, the namespace scope for this CLI request</p></td></tr><tr><td colspan=2>--password string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Password for basic authentication to the API server</p></td></tr><tr><td colspan=2>--profile string     Default: "none"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)</p></td></tr><tr><td colspan=2>--profile-output string     Default: "profile.pprof"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Name of the file to write the profile to</p></td></tr><tr><td colspan=2>--request-timeout string     Default: "0"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.</p></td></tr><tr><td colspan=2>-s, --server string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The address and port of the Kubernetes API server</p></td></tr><tr><td colspan=2>--storage-driver-buffer-duration duration     Default: 1m0s</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction</p></td></tr><tr><td colspan=2>--storage-driver-db string     Default: "cadvisor"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>database name</p></td></tr><tr><td colspan=2>--storage-driver-host string     Default: "localhost:8086"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>database host:port</p></td></tr><tr><td colspan=2>--storage-driver-password string     Default: "root"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>database password</p></td></tr><tr><td colspan=2>--storage-driver-secure</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>use secure connection with database</p></td></tr><tr><td colspan=2>--storage-driver-table string     Default: "stats"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>table name</p></td></tr><tr><td colspan=2>--storage-driver-user string     Default: "root"</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>database username</p></td></tr><tr><td colspan=2>--tls-server-name string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used</p></td></tr><tr><td colspan=2>--token string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Bearer token for authentication to the API server</p></td></tr><tr><td colspan=2>--user string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>The name of the kubeconfig user to use</p></td></tr><tr><td colspan=2>--username string</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Username for basic authentication to the API server</p></td></tr><tr><td colspan=2>--version version[=true]</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>--version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version</p></td></tr><tr><td colspan=2>--warnings-as-errors</td></tr><tr><td></td><td style=line-height:130%;word-wrap:break-word><p>Treat warnings received from the server as errors and exit with a non-zero exit code</p></td></tr></tbody></table><h2 id=see-also>See Also</h2><ul><li><a href=../kubectl/>kubectl</a> - kubectl controls the Kubernetes cluster manager</li></ul></div></div></main></div></div><footer class="bg-dark py-5 row d-print-none"><div class="container-fluid mx-sm-5"><div class=row><div class="col-5 col-sm-7 text-center order-2 footer-main"><p><span class=copyright-notice>© 2025 The Kubernetes Authors | Documentation Distributed under <a href=https://git.k8s.io/website/LICENSE class=light-text>CC BY 4.0</a></span></p><p><span class=copyright-notice>© 2025 The Linux Foundation ®. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href=https://www.linuxfoundation.org/trademark-usage class=light-text>Trademark Usage page</a></span></p><p><span class=certification-notice>ICP license: 京ICP备17074266号-3</span></p></div><div class="col col-sm-2 text-xs-center order-1"><ul class="list-inline mb-0 footer-icons"><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://youtube.com/kubernetescommunity aria-label><i class="fa-brands fa-youtube"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://discuss.kubernetes.io aria-label><i class="fa-solid fa-envelope"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://serverfault.com/questions/tagged/kubernetes aria-label><i class="fa-brands fa-stack-overflow"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://www.linkedin.com/company/kubernetes/ aria-label><i class="fa-brands fa-linkedin"></i></a></li></ul></div><div class="col col-sm-2 text-right text-xs-center order-3"><ul class="list-inline mb-0 footer-icons"><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://k8s.dev/ aria-label><i class="fa-solid fa-laptop-code"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://github.com/kubernetes/kubernetes aria-label><i class="fa-brands fa-github"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href=https://slack.k8s.io aria-label><i class="fa-brands fa-slack"></i></a></li><li class="list-inline-item mx-2 h3" data-toggle=tooltip data-placement=top title aria-label><a class=text-white target=_blank rel=noopener href="https://calendar.google.com/calendar/embed?src=calendar%40kubernetes.io" aria-label><i class="fa-solid fa-calendar-days"></i></a></li></ul></div></div></div></footer></div><script src=/js/script.js></script><script src=/js/main.min.031dd99c8ea4a3ac01c74e017d31d12a0764a2366ec05be9f67257af0c809cfe.js integrity="sha256-Ax3ZnI6ko6wBx04BfTHRKgdkojZuwFvp9nJXrwyAnP4=" crossorigin=anonymous></script><script src=/js/split-1.6.0.js integrity=sha384-0blL3GqHy6+9fw0cyY2Aoiwg4onHAtslAs4OkqZY7UQBrR65/K4gI+hxLdWDrjpz></script><script>let splitInstance=null;function enableSplitter(e){e.matches?splitInstance||(splitInstance=Split(["#sidebarnav","#maindoc"],{sizes:[20,80],minSize:100})):splitInstance&&(splitInstance.destroy(),splitInstance=null)}const screenWidthMediaQuery=window.matchMedia("(min-width: 768px)"),eleNav=document.getElementById("sidebarnav");eleNav!==null&&(enableSplitter(screenWidthMediaQuery),screenWidthMediaQuery.addListener(enableSplitter))</script><script defer src=/js/detect-js.min.01b26bef8719aa29fb17d861978451b8fbee4b6d1576627b1e1c94dba3084ecc.js integrity="sha256-AbJr74cZqin7F9hhl4RRuPvuS20VdmJ7HhyU26MITsw=" crossorigin=anonymous></script></body></html>