如何通过Shell脚本结合sed编辑Kubernetes Deployment资源

Hey there! The problem with using kubectl edit directly for automation is that it launches an interactive text editor by default—so it can't handle scripted, non-interactive changes like you're trying to do with sed. Let's break down a few reliable, automated approaches to get this done:

1. Use kubectl patch (Recommended) #

This is the Kubernetes-native way to modify specific fields without dealing with the entire YAML file. It's safer and more precise than editing the full manifest.

Example: Replace a boolean field #

Suppose you need to change the privileged flag (from true to false) in a container's security context for a deployment named my-deploy:

• JSON Patch (most precise for nested fields):

  kubectl patch deployment my-deploy --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/securityContext/privileged", "value": false}]'
  

• Merge Patch (simpler for flatter structures):

  kubectl patch deployment my-deploy -p '{"spec": {"template": {"spec": {"containers": [{"name": "my-container", "securityContext": {"privileged": false}}]}}}'
  

Just adjust the path or YAML structure to match the exact field you need to modify.

2. Export, Modify with sed, then Apply #

If you prefer working with the full YAML manifest, you can export it, edit it with sed, and re-apply it:

# Export the deployment YAML, replace the target value, then apply the changes
kubectl get deployment my-deploy -o yaml | sed '/^\s*targetField:/ s/true/false/' | kubectl apply -f -

• Replace targetField with the actual field name you're modifying (e.g., privileged, enabled).
• The ^\s* ensures you only match lines with that field (avoiding accidental replacements in comments or other fields).

3. Force kubectl edit to Use sed (Non-Interactive) #

You can temporarily override the default editor to run sed automatically when you execute kubectl edit:

• Linux/macOS (GNU sed):

  EDITOR="sed -i 's/true/false/g'" kubectl edit deployment my-deploy
  

• macOS (BSD sed):

  EDITOR="sed -i '' 's/true/false/g'" kubectl edit deployment my-deploy
  

⚠️ Caution: This will replace all instances of true in the manifest, so make sure there are no other boolean fields you don't want to modify. Use more specific sed patterns (like the one in method 2) if needed.

Final Note #

Stick with kubectl patch whenever possible—it's designed for this exact use case, minimizes the risk of accidental changes, and works reliably in scripts.

内容的提问来源于stack exchange，提问作者ambikanair