Troubleshooting

# Verify ArgoCD pods are running
kubectl get pods -n argocd

# Port-forward to access the UI
kubectl port-forward svc/argocd-server -n argocd 8080:443

kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d ; echo

argocd app sync <app-name> --force

kubectl get pods --all-namespaces

kubectl get pods -n <namespace>

kubectl describe pod <pod-name> -n <namespace>

# Current logs
kubectl logs <pod-name> -n <namespace>

# Previous container logs (after crash)
kubectl logs <pod-name> -n <namespace> --previous

# List containers in pod
kubectl get pod <pod-name> -n <namespace> -o jsonpath='{.spec.containers[*].name}'

# View specific container logs
kubectl logs <pod-name> -n <namespace> -c <container-name>

kubectl logs -f <pod-name> -n <namespace>

kubectl get service <service-name> -n <namespace>
kubectl get endpoints <service-name> -n <namespace>

kubectl describe service <service-name> -n <namespace>
kubectl get pods -n <namespace> --show-labels

kubectl run test-pod --rm -i --tty --image=nicolaka/netshoot -- /bin/bash

# Test DNS resolution
nslookup <service-name>.<namespace>.svc.cluster.local

# Test HTTP endpoint
curl http://<service-name>.<namespace>.svc.cluster.local:<port>

# Check connectivity
ping <service-name>.<namespace>.svc.cluster.local

kubectl get ingress -n <namespace>
kubectl describe ingress <ingress-name> -n <namespace>

kubectl get pods -n ingress-nginx
kubectl logs -n ingress-nginx deployment/ingress-nginx-controller

kubectl get networkpolicies -n <namespace>
kubectl describe networkpolicy <policy-name> -n <namespace>

# Check certificate status
kubectl get certificate -n <namespace>
kubectl describe certificate <cert-name> -n <namespace>

# Check certificate request
kubectl get certificaterequest -n <namespace>
kubectl describe certificaterequest <request-name> -n <namespace>

kubectl get challenges --all-namespaces
kubectl describe challenge <challenge-name> -n <namespace>

kubectl logs -n cert-manager deployment/cert-manager

kubectl get certificate --all-namespaces -o custom-columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,READY:.status.conditions[0].status,SECRET:.spec.secretName

kubectl get secret <secret-name> -n <namespace> -o jsonpath='{.data.tls\.crt}' | base64 --decode | openssl x509 -noout -dates

kubectl get pvc -n <namespace>
kubectl describe pvc <pvc-name> -n <namespace>

kubectl get pv

kubectl get storageclass
kubectl describe storageclass <storageclass-name>

kubectl top nodes
kubectl describe node <node-name>

kubectl top pods -n <namespace>
kubectl describe pod <pod-name> -n <namespace> | grep -A 5 "Limits\|Requests"

kubectl get nodes
kubectl describe node <node-name>

journalctl -u kubelet -f

kubectl get secret <secret-name> -n <namespace>
kubectl describe secret <secret-name> -n <namespace>

kubectl get pods -n kube-system | grep sealed-secrets
kubectl logs -n kube-system -l app.kubernetes.io/name=sealed-secrets

kubectl get sealedsecrets -n <namespace>
kubectl describe sealedsecret <sealedsecret-name> -n <namespace>

kubectl exec -it <pod-name> -n <namespace> -- /bin/sh

# Copy from pod
kubectl cp <namespace>/<pod-name>:/path/to/file ./local-file

# Copy to pod
kubectl cp ./local-file <namespace>/<pod-name>:/path/to/file

kubectl get events --sort-by='.lastTimestamp' -n <namespace>

kubectl cluster-info
kubectl version

kubectl auth can-i create pods -n <namespace>
kubectl auth can-i "*" "*" --all-namespaces

# Port-forward to Grafana
kubectl port-forward -n monitoring svc/prometheus-grafana 3000:80

# Port-forward to Prometheus
kubectl port-forward -n monitoring svc/prometheus-kube-prometheus-prometheus 9090:9090