@@ -9328,6 +9328,68 @@ _oc_export()

     noun_aliases=()

 }

+_oc_extract()

+{

+    last_command="oc_extract"

+    commands=()

+

+    flags=()

+    two_word_flags=()

+    flags_with_completion=()

+    flags_completion=()

+

+    flags+=("--confirm")

+    flags+=("--filename=")

+    flags_with_completion+=("--filename")

+    flags_completion+=("_filedir")

+    two_word_flags+=("-f")

+    flags_with_completion+=("-f")

+    flags_completion+=("_filedir")

+    flags+=("--keys=")

+    flags+=("--no-headers")

+    flags+=("--output=")

+    two_word_flags+=("-o")

+    flags+=("--output-version=")

+    flags+=("--show-all")

+    flags+=("-a")

+    flags+=("--show-labels")

+    flags+=("--sort-by=")

+    flags+=("--template=")

+    flags_with_completion+=("--template")

+    flags_completion+=("_filedir")

+    flags+=("--to=")

+    flags+=("--api-version=")

+    flags+=("--as=")

+    flags+=("--certificate-authority=")

+    flags_with_completion+=("--certificate-authority")

+    flags_completion+=("_filedir")

+    flags+=("--client-certificate=")

+    flags_with_completion+=("--client-certificate")

+    flags_completion+=("_filedir")

+    flags+=("--client-key=")

+    flags_with_completion+=("--client-key")

+    flags_completion+=("_filedir")

+    flags+=("--cluster=")

+    flags+=("--config=")

+    flags_with_completion+=("--config")

+    flags_completion+=("_filedir")

+    flags+=("--context=")

+    flags+=("--insecure-skip-tls-verify")

+    flags+=("--log-flush-frequency=")

+    flags+=("--loglevel=")

+    flags+=("--logspec=")

+    flags+=("--match-server-version")

+    flags+=("--namespace=")

+    two_word_flags+=("-n")

+    flags+=("--server=")

+    flags+=("--token=")

+    flags+=("--user=")

+

+    must_have_one_flag=()

+    must_have_one_noun=()

+    noun_aliases=()

+}

+

 _oc_policy_who-can()

 {

     last_command="oc_policy_who-can"

@@ -10830,6 +10892,7 @@ _oc()

     commands+=("patch")

     commands+=("process")

     commands+=("export")

+    commands+=("extract")

     commands+=("policy")

     commands+=("convert")

     commands+=("import")

@@ -13634,6 +13634,69 @@ _openshift_cli_export()

     noun_aliases=()

 }

+_openshift_cli_extract()

+{

+    last_command="openshift_cli_extract"

+    commands=()

+

+    flags=()

+    two_word_flags=()

+    flags_with_completion=()

+    flags_completion=()

+

+    flags+=("--confirm")

+    flags+=("--filename=")

+    flags_with_completion+=("--filename")

+    flags_completion+=("_filedir")

+    two_word_flags+=("-f")

+    flags_with_completion+=("-f")

+    flags_completion+=("_filedir")

+    flags+=("--keys=")

+    flags+=("--no-headers")

+    flags+=("--output=")

+    two_word_flags+=("-o")

+    flags+=("--output-version=")

+    flags+=("--show-all")

+    flags+=("-a")

+    flags+=("--show-labels")

+    flags+=("--sort-by=")

+    flags+=("--template=")

+    flags_with_completion+=("--template")

+    flags_completion+=("_filedir")

+    flags+=("--to=")

+    flags+=("--api-version=")

+    flags+=("--as=")

+    flags+=("--certificate-authority=")

+    flags_with_completion+=("--certificate-authority")

+    flags_completion+=("_filedir")

+    flags+=("--client-certificate=")

+    flags_with_completion+=("--client-certificate")

+    flags_completion+=("_filedir")

+    flags+=("--client-key=")

+    flags_with_completion+=("--client-key")

+    flags_completion+=("_filedir")

+    flags+=("--cluster=")

+    flags+=("--config=")

+    flags_with_completion+=("--config")

+    flags_completion+=("_filedir")

+    flags+=("--context=")

+    flags+=("--google-json-key=")

+    flags+=("--insecure-skip-tls-verify")

+    flags+=("--log-flush-frequency=")

+    flags+=("--loglevel=")

+    flags+=("--logspec=")

+    flags+=("--match-server-version")

+    flags+=("--namespace=")

+    two_word_flags+=("-n")

+    flags+=("--server=")

+    flags+=("--token=")

+    flags+=("--user=")

+

+    must_have_one_flag=()

+    must_have_one_noun=()

+    noun_aliases=()

+}

+

 _openshift_cli_policy_who-can()

 {

     last_command="openshift_cli_policy_who-can"

@@ -15124,6 +15187,7 @@ _openshift_cli()

     commands+=("patch")

     commands+=("process")

     commands+=("export")

+    commands+=("extract")

     commands+=("policy")

     commands+=("convert")

     commands+=("import")

@@ -9489,6 +9489,68 @@ _oc_export()

     noun_aliases=()

 }

+_oc_extract()

+{

+    last_command="oc_extract"

+    commands=()

+

+    flags=()

+    two_word_flags=()

+    flags_with_completion=()

+    flags_completion=()

+

+    flags+=("--confirm")

+    flags+=("--filename=")

+    flags_with_completion+=("--filename")

+    flags_completion+=("_filedir")

+    two_word_flags+=("-f")

+    flags_with_completion+=("-f")

+    flags_completion+=("_filedir")

+    flags+=("--keys=")

+    flags+=("--no-headers")

+    flags+=("--output=")

+    two_word_flags+=("-o")

+    flags+=("--output-version=")

+    flags+=("--show-all")

+    flags+=("-a")

+    flags+=("--show-labels")

+    flags+=("--sort-by=")

+    flags+=("--template=")

+    flags_with_completion+=("--template")

+    flags_completion+=("_filedir")

+    flags+=("--to=")

+    flags+=("--api-version=")

+    flags+=("--as=")

+    flags+=("--certificate-authority=")

+    flags_with_completion+=("--certificate-authority")

+    flags_completion+=("_filedir")

+    flags+=("--client-certificate=")

+    flags_with_completion+=("--client-certificate")

+    flags_completion+=("_filedir")

+    flags+=("--client-key=")

+    flags_with_completion+=("--client-key")

+    flags_completion+=("_filedir")

+    flags+=("--cluster=")

+    flags+=("--config=")

+    flags_with_completion+=("--config")

+    flags_completion+=("_filedir")

+    flags+=("--context=")

+    flags+=("--insecure-skip-tls-verify")

+    flags+=("--log-flush-frequency=")

+    flags+=("--loglevel=")

+    flags+=("--logspec=")

+    flags+=("--match-server-version")

+    flags+=("--namespace=")

+    two_word_flags+=("-n")

+    flags+=("--server=")

+    flags+=("--token=")

+    flags+=("--user=")

+

+    must_have_one_flag=()

+    must_have_one_noun=()

+    noun_aliases=()

+}

+

 _oc_policy_who-can()

 {

     last_command="oc_policy_who-can"

@@ -10991,6 +11053,7 @@ _oc()

     commands+=("patch")

     commands+=("process")

     commands+=("export")

+    commands+=("extract")

     commands+=("policy")

     commands+=("convert")

     commands+=("import")

@@ -13795,6 +13795,69 @@ _openshift_cli_export()

     noun_aliases=()

 }

+_openshift_cli_extract()

+{

+    last_command="openshift_cli_extract"

+    commands=()

+

+    flags=()

+    two_word_flags=()

+    flags_with_completion=()

+    flags_completion=()

+

+    flags+=("--confirm")

+    flags+=("--filename=")

+    flags_with_completion+=("--filename")

+    flags_completion+=("_filedir")

+    two_word_flags+=("-f")

+    flags_with_completion+=("-f")

+    flags_completion+=("_filedir")

+    flags+=("--keys=")

+    flags+=("--no-headers")

+    flags+=("--output=")

+    two_word_flags+=("-o")

+    flags+=("--output-version=")

+    flags+=("--show-all")

+    flags+=("-a")

+    flags+=("--show-labels")

+    flags+=("--sort-by=")

+    flags+=("--template=")

+    flags_with_completion+=("--template")

+    flags_completion+=("_filedir")

+    flags+=("--to=")

+    flags+=("--api-version=")

+    flags+=("--as=")

+    flags+=("--certificate-authority=")

+    flags_with_completion+=("--certificate-authority")

+    flags_completion+=("_filedir")

+    flags+=("--client-certificate=")

+    flags_with_completion+=("--client-certificate")

+    flags_completion+=("_filedir")

+    flags+=("--client-key=")

+    flags_with_completion+=("--client-key")

+    flags_completion+=("_filedir")

+    flags+=("--cluster=")

+    flags+=("--config=")

+    flags_with_completion+=("--config")

+    flags_completion+=("_filedir")

+    flags+=("--context=")

+    flags+=("--google-json-key=")

+    flags+=("--insecure-skip-tls-verify")

+    flags+=("--log-flush-frequency=")

+    flags+=("--loglevel=")

+    flags+=("--logspec=")

+    flags+=("--match-server-version")

+    flags+=("--namespace=")

+    two_word_flags+=("-n")

+    flags+=("--server=")

+    flags+=("--token=")

+    flags+=("--user=")

+

+    must_have_one_flag=()

+    must_have_one_noun=()

+    noun_aliases=()

+}

+

 _openshift_cli_policy_who-can()

 {

     last_command="openshift_cli_policy_who-can"

@@ -15285,6 +15348,7 @@ _openshift_cli()

     commands+=("patch")

     commands+=("process")

     commands+=("export")

+    commands+=("extract")

     commands+=("policy")

     commands+=("convert")

     commands+=("import")

@@ -1428,6 +1428,25 @@ Expose a replicated application as a service or route

 ====

+== oc extract

+Extract secrets or config maps to disk

+

+====

+

+[options="nowrap"]

+----

+  # extract the secret "test" to the current directory

+  oc extract secret/test

+

+  # extract the config map "nginx" to the /tmp directory

+  oc extract configmap/nginx --to=/tmp

+

+  # extract only the key "nginx.conf" from config map "nginx" to the /tmp directory

+  oc extract configmap/nginx --to=/tmp --keys=nginx.conf

+----

+====

+

+

 == oc get

 Display one or many resources

@@ -125,6 +125,7 @@ oc-exec.1

 oc-explain.1

 oc-export.1

 oc-expose.1

+oc-extract.1

 oc-get.1

 oc-import-app.json.1

 oc-import-docker-compose.1

@@ -201,6 +201,7 @@ openshift-cli-exec.1

 openshift-cli-explain.1

 openshift-cli-export.1

 openshift-cli-expose.1

+openshift-cli-extract.1

 openshift-cli-get.1

 openshift-cli-import-app.json.1

 openshift-cli-import-docker-compose.1

@@ -52,7 +52,7 @@ to generate the API structure for a template to which you can add parameters and

 .PP

 \fB\-f\fP, \fB\-\-filename\fP=[]

-    Filename, directory, or URL to file to use to edit the resource.

+    Filename, directory, or URL to file for the resource to export.

 .PP

 \fB\-\-no\-headers\fP=false

new file mode 100644

@@ -0,0 +1,168 @@

+.TH "OC" "1" " Openshift CLI User Manuals" "Openshift" "June 2016"  ""

+

+

+.SH NAME

+.PP

+oc extract \- Extract secrets or config maps to disk

+

+

+.SH SYNOPSIS

+.PP

+\fBoc extract\fP [OPTIONS]

+

+

+.SH DESCRIPTION

+.PP

+Extract files out of secrets and config maps

+

+.PP

+The extract command makes it easy to download the contents of a config map or secret into a directory.

+Each key in the config map or secret is created as a separate file with the name of the key, as it

+is when you mount a secret or config map into a container.

+

+.PP

+You can limit which keys are extracted with the \-\-only=NAME flag, or set the directory to extract to

+with \-\-to=DIRECTORY.

+

+

+.SH OPTIONS

+.PP

+\fB\-\-confirm\fP=false

+    Overwrite files that already exist.

+

+.PP

+\fB\-f\fP, \fB\-\-filename\fP=[]

+    Filename, directory, or URL to file to identify to extract the resource.

+

+.PP

+\fB\-\-keys\fP=[]

+    An optional list of keys to extract (default is all keys).

+

+.PP

+\fB\-\-no\-headers\fP=false

+    When using the default output, don't print headers.

+

+.PP

+\fB\-o\fP, \fB\-\-output\fP=""

+    Output format. One of: json|yaml|wide|name|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See golang template [

+\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [

+\[la]http://releases.k8s.io/release-1.3/docs/user-guide/jsonpath.md\[ra]].

+

+.PP

+\fB\-\-output\-version\fP=""

+    Output the formatted object with the given group version (for ex: 'extensions/v1beta1').

+

+.PP

+\fB\-a\fP, \fB\-\-show\-all\fP=true

+    When printing, show all resources (false means hide terminated pods.)

+

+.PP

+\fB\-\-show\-labels\fP=false

+    When printing, show all labels as the last column (default hide labels column)

+

+.PP

+\fB\-\-sort\-by\fP=""

+    If non\-empty, sort list types using this field specification.  The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.

+

+.PP

+\fB\-\-template\fP=""

+    Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [

+\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].

+

+.PP

+\fB\-\-to\fP=""

+    Directory to extract files to.

+

+

+.SH OPTIONS INHERITED FROM PARENT COMMANDS

+.PP

+\fB\-\-api\-version\fP=""

+    DEPRECATED: The API version to use when talking to the server

+

+.PP

+\fB\-\-as\fP=""

+    Username to impersonate for the operation.

+

+.PP

+\fB\-\-certificate\-authority\fP=""

+    Path to a cert. file for the certificate authority.

+

+.PP

+\fB\-\-client\-certificate\fP=""

+    Path to a client certificate file for TLS.

+

+.PP

+\fB\-\-client\-key\fP=""

+    Path to a client key file for TLS.

+

+.PP

+\fB\-\-cluster\fP=""

+    The name of the kubeconfig cluster to use

+

+.PP

+\fB\-\-config\fP=""

+    Path to the config file to use for CLI requests.

+

+.PP

+\fB\-\-context\fP=""

+    The name of the kubeconfig context to use

+

+.PP

+\fB\-\-google\-json\-key\fP=""

+    The Google Cloud Platform Service Account JSON Key to use for authentication.

+

+.PP

+\fB\-\-insecure\-skip\-tls\-verify\fP=false

+    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure.

+

+.PP

+\fB\-\-log\-flush\-frequency\fP=0

+    Maximum number of seconds between log flushes

+

+.PP

+\fB\-\-match\-server\-version\fP=false

+    Require server version to match client version

+

+.PP

+\fB\-n\fP, \fB\-\-namespace\fP=""

+    If present, the namespace scope for this CLI request.

+

+.PP

+\fB\-\-server\fP=""

+    The address and port of the Kubernetes API server

+

+.PP

+\fB\-\-token\fP=""

+    Bearer token for authentication to the API server.

+

+.PP

+\fB\-\-user\fP=""

+    The name of the kubeconfig user to use

+

+

+.SH EXAMPLE

+.PP

+.RS

+

+.nf

+  # extract the secret "test" to the current directory

+  oc extract secret/test

+

+  # extract the config map "nginx" to the /tmp directory

+  oc extract configmap/nginx \-\-to=/tmp

+

+  # extract only the key "nginx.conf" from config map "nginx" to the /tmp directory

+  oc extract configmap/nginx \-\-to=/tmp \-\-keys=nginx.conf

+

+.fi

+.RE

+

+

+.SH SEE ALSO

+.PP

+\fBoc(1)\fP,

+

+

+.SH HISTORY

+.PP

+June 2016, Ported from the Kubernetes man\-doc generator

@@ -89,7 +89,7 @@ cluster under the 'adm' subcommand.

 .SH SEE ALSO

 .PP

-\fBoc\-types(1)\fP, \fBoc\-login(1)\fP, \fBoc\-new\-project(1)\fP, \fBoc\-new\-app(1)\fP, \fBoc\-status(1)\fP, \fBoc\-project(1)\fP, \fBoc\-projects(1)\fP, \fBoc\-explain(1)\fP, \fBoc\-cluster(1)\fP, \fBoc\-rollout(1)\fP, \fBoc\-deploy(1)\fP, \fBoc\-rollback(1)\fP, \fBoc\-new\-build(1)\fP, \fBoc\-start\-build(1)\fP, \fBoc\-cancel\-build(1)\fP, \fBoc\-import\-image(1)\fP, \fBoc\-tag(1)\fP, \fBoc\-get(1)\fP, \fBoc\-describe(1)\fP, \fBoc\-edit(1)\fP, \fBoc\-set(1)\fP, \fBoc\-label(1)\fP, \fBoc\-annotate(1)\fP, \fBoc\-expose(1)\fP, \fBoc\-delete(1)\fP, \fBoc\-scale(1)\fP, \fBoc\-autoscale(1)\fP, \fBoc\-secrets(1)\fP, \fBoc\-serviceaccounts(1)\fP, \fBoc\-logs(1)\fP, \fBoc\-rsh(1)\fP, \fBoc\-rsync(1)\fP, \fBoc\-port\-forward(1)\fP, \fBoc\-debug(1)\fP, \fBoc\-exec(1)\fP, \fBoc\-proxy(1)\fP, \fBoc\-attach(1)\fP, \fBoc\-run(1)\fP, \fBoc\-adm(1)\fP, \fBoc\-create(1)\fP, \fBoc\-replace(1)\fP, \fBoc\-apply(1)\fP, \fBoc\-patch(1)\fP, \fBoc\-process(1)\fP, \fBoc\-export(1)\fP, \fBoc\-policy(1)\fP, \fBoc\-convert(1)\fP, \fBoc\-import(1)\fP, \fBoc\-logout(1)\fP, \fBoc\-config(1)\fP, \fBoc\-whoami(1)\fP, \fBoc\-completion(1)\fP, \fBoc\-env(1)\fP, \fBoc\-volumes(1)\fP, \fBoc\-build\-logs(1)\fP, \fBoc\-ex(1)\fP, \fBoc\-version(1)\fP, \fBoc\-options(1)\fP,

+\fBoc\-types(1)\fP, \fBoc\-login(1)\fP, \fBoc\-new\-project(1)\fP, \fBoc\-new\-app(1)\fP, \fBoc\-status(1)\fP, \fBoc\-project(1)\fP, \fBoc\-projects(1)\fP, \fBoc\-explain(1)\fP, \fBoc\-cluster(1)\fP, \fBoc\-rollout(1)\fP, \fBoc\-deploy(1)\fP, \fBoc\-rollback(1)\fP, \fBoc\-new\-build(1)\fP, \fBoc\-start\-build(1)\fP, \fBoc\-cancel\-build(1)\fP, \fBoc\-import\-image(1)\fP, \fBoc\-tag(1)\fP, \fBoc\-get(1)\fP, \fBoc\-describe(1)\fP, \fBoc\-edit(1)\fP, \fBoc\-set(1)\fP, \fBoc\-label(1)\fP, \fBoc\-annotate(1)\fP, \fBoc\-expose(1)\fP, \fBoc\-delete(1)\fP, \fBoc\-scale(1)\fP, \fBoc\-autoscale(1)\fP, \fBoc\-secrets(1)\fP, \fBoc\-serviceaccounts(1)\fP, \fBoc\-logs(1)\fP, \fBoc\-rsh(1)\fP, \fBoc\-rsync(1)\fP, \fBoc\-port\-forward(1)\fP, \fBoc\-debug(1)\fP, \fBoc\-exec(1)\fP, \fBoc\-proxy(1)\fP, \fBoc\-attach(1)\fP, \fBoc\-run(1)\fP, \fBoc\-adm(1)\fP, \fBoc\-create(1)\fP, \fBoc\-replace(1)\fP, \fBoc\-apply(1)\fP, \fBoc\-patch(1)\fP, \fBoc\-process(1)\fP, \fBoc\-export(1)\fP, \fBoc\-extract(1)\fP, \fBoc\-policy(1)\fP, \fBoc\-convert(1)\fP, \fBoc\-import(1)\fP, \fBoc\-logout(1)\fP, \fBoc\-config(1)\fP, \fBoc\-whoami(1)\fP, \fBoc\-completion(1)\fP, \fBoc\-env(1)\fP, \fBoc\-volumes(1)\fP, \fBoc\-build\-logs(1)\fP, \fBoc\-ex(1)\fP, \fBoc\-version(1)\fP, \fBoc\-options(1)\fP,

 .SH HISTORY

@@ -52,7 +52,7 @@ to generate the API structure for a template to which you can add parameters and

 .PP

 \fB\-f\fP, \fB\-\-filename\fP=[]

-    Filename, directory, or URL to file to use to edit the resource.

+    Filename, directory, or URL to file for the resource to export.

 .PP

 \fB\-\-no\-headers\fP=false

new file mode 100644

@@ -0,0 +1,168 @@

+.TH "OPENSHIFT CLI" "1" " Openshift CLI User Manuals" "Openshift" "June 2016"  ""

+

+

+.SH NAME

+.PP

+openshift cli extract \- Extract secrets or config maps to disk

+

+

+.SH SYNOPSIS

+.PP

+\fBopenshift cli extract\fP [OPTIONS]

+

+

+.SH DESCRIPTION

+.PP

+Extract files out of secrets and config maps

+

+.PP

+The extract command makes it easy to download the contents of a config map or secret into a directory.

+Each key in the config map or secret is created as a separate file with the name of the key, as it

+is when you mount a secret or config map into a container.

+

+.PP

+You can limit which keys are extracted with the \-\-only=NAME flag, or set the directory to extract to

+with \-\-to=DIRECTORY.

+

+

+.SH OPTIONS

+.PP

+\fB\-\-confirm\fP=false

+    Overwrite files that already exist.

+

+.PP

+\fB\-f\fP, \fB\-\-filename\fP=[]

+    Filename, directory, or URL to file to identify to extract the resource.

+

+.PP

+\fB\-\-keys\fP=[]

+    An optional list of keys to extract (default is all keys).

+

+.PP

+\fB\-\-no\-headers\fP=false

+    When using the default output, don't print headers.

+

+.PP

+\fB\-o\fP, \fB\-\-output\fP=""

+    Output format. One of: json|yaml|wide|name|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See golang template [

+\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [

+\[la]http://releases.k8s.io/release-1.3/docs/user-guide/jsonpath.md\[ra]].

+

+.PP

+\fB\-\-output\-version\fP=""

+    Output the formatted object with the given group version (for ex: 'extensions/v1beta1').

+

+.PP

+\fB\-a\fP, \fB\-\-show\-all\fP=true

+    When printing, show all resources (false means hide terminated pods.)

+

+.PP

+\fB\-\-show\-labels\fP=false

+    When printing, show all labels as the last column (default hide labels column)

+

+.PP

+\fB\-\-sort\-by\fP=""

+    If non\-empty, sort list types using this field specification.  The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.

+

+.PP

+\fB\-\-template\fP=""

+    Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [

+\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].

+

+.PP

+\fB\-\-to\fP=""

+    Directory to extract files to.

+

+

+.SH OPTIONS INHERITED FROM PARENT COMMANDS

+.PP

+\fB\-\-api\-version\fP=""

+    DEPRECATED: The API version to use when talking to the server

+

+.PP

+\fB\-\-as\fP=""

+    Username to impersonate for the operation.

+

+.PP

+\fB\-\-certificate\-authority\fP=""

+    Path to a cert. file for the certificate authority.

+

+.PP

+\fB\-\-client\-certificate\fP=""

+    Path to a client certificate file for TLS.

+

+.PP

+\fB\-\-client\-key\fP=""

+    Path to a client key file for TLS.

+

+.PP

+\fB\-\-cluster\fP=""

+    The name of the kubeconfig cluster to use

+

+.PP

+\fB\-\-config\fP=""

+    Path to the config file to use for CLI requests.

+

+.PP

+\fB\-\-context\fP=""

+    The name of the kubeconfig context to use

+

+.PP

+\fB\-\-google\-json\-key\fP=""

+    The Google Cloud Platform Service Account JSON Key to use for authentication.

+

+.PP

+\fB\-\-insecure\-skip\-tls\-verify\fP=false

+    If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure.

+

+.PP

+\fB\-\-log\-flush\-frequency\fP=0

+    Maximum number of seconds between log flushes

+

+.PP

+\fB\-\-match\-server\-version\fP=false

+    Require server version to match client version

+

+.PP

+\fB\-n\fP, \fB\-\-namespace\fP=""

+    If present, the namespace scope for this CLI request.

+

+.PP

+\fB\-\-server\fP=""

+    The address and port of the Kubernetes API server

+

+.PP

+\fB\-\-token\fP=""

+    Bearer token for authentication to the API server.

+

+.PP

+\fB\-\-user\fP=""

+    The name of the kubeconfig user to use

+

+

+.SH EXAMPLE

+.PP

+.RS

+

+.nf

+  # extract the secret "test" to the current directory

+  openshift cli extract secret/test

+

+  # extract the config map "nginx" to the /tmp directory

+  openshift cli extract configmap/nginx \-\-to=/tmp

+

+  # extract only the key "nginx.conf" from config map "nginx" to the /tmp directory

+  openshift cli extract configmap/nginx \-\-to=/tmp \-\-keys=nginx.conf

+

+.fi

+.RE

+

+

+.SH SEE ALSO

+.PP

+\fBopenshift\-cli(1)\fP,

+

+

+.SH HISTORY

+.PP

+June 2016, Ported from the Kubernetes man\-doc generator

@@ -91,7 +91,7 @@ cluster under the 'adm' subcommand.

 .SH SEE ALSO

 .PP

-\fBopenshift(1)\fP, \fBopenshift\-cli\-types(1)\fP, \fBopenshift\-cli\-login(1)\fP, \fBopenshift\-cli\-new\-project(1)\fP, \fBopenshift\-cli\-new\-app(1)\fP, \fBopenshift\-cli\-status(1)\fP, \fBopenshift\-cli\-project(1)\fP, \fBopenshift\-cli\-projects(1)\fP, \fBopenshift\-cli\-explain(1)\fP, \fBopenshift\-cli\-cluster(1)\fP, \fBopenshift\-cli\-rollout(1)\fP, \fBopenshift\-cli\-deploy(1)\fP, \fBopenshift\-cli\-rollback(1)\fP, \fBopenshift\-cli\-new\-build(1)\fP, \fBopenshift\-cli\-start\-build(1)\fP, \fBopenshift\-cli\-cancel\-build(1)\fP, \fBopenshift\-cli\-import\-image(1)\fP, \fBopenshift\-cli\-tag(1)\fP, \fBopenshift\-cli\-get(1)\fP, \fBopenshift\-cli\-describe(1)\fP, \fBopenshift\-cli\-edit(1)\fP, \fBopenshift\-cli\-set(1)\fP, \fBopenshift\-cli\-label(1)\fP, \fBopenshift\-cli\-annotate(1)\fP, \fBopenshift\-cli\-expose(1)\fP, \fBopenshift\-cli\-delete(1)\fP, \fBopenshift\-cli\-scale(1)\fP, \fBopenshift\-cli\-autoscale(1)\fP, \fBopenshift\-cli\-secrets(1)\fP, \fBopenshift\-cli\-serviceaccounts(1)\fP, \fBopenshift\-cli\-logs(1)\fP, \fBopenshift\-cli\-rsh(1)\fP, \fBopenshift\-cli\-rsync(1)\fP, \fBopenshift\-cli\-port\-forward(1)\fP, \fBopenshift\-cli\-debug(1)\fP, \fBopenshift\-cli\-exec(1)\fP, \fBopenshift\-cli\-proxy(1)\fP, \fBopenshift\-cli\-attach(1)\fP, \fBopenshift\-cli\-run(1)\fP, \fBopenshift\-cli\-adm(1)\fP, \fBopenshift\-cli\-create(1)\fP, \fBopenshift\-cli\-replace(1)\fP, \fBopenshift\-cli\-apply(1)\fP, \fBopenshift\-cli\-patch(1)\fP, \fBopenshift\-cli\-process(1)\fP, \fBopenshift\-cli\-export(1)\fP, \fBopenshift\-cli\-policy(1)\fP, \fBopenshift\-cli\-convert(1)\fP, \fBopenshift\-cli\-import(1)\fP, \fBopenshift\-cli\-logout(1)\fP, \fBopenshift\-cli\-config(1)\fP, \fBopenshift\-cli\-whoami(1)\fP, \fBopenshift\-cli\-completion(1)\fP, \fBopenshift\-cli\-env(1)\fP, \fBopenshift\-cli\-volumes(1)\fP, \fBopenshift\-cli\-build\-logs(1)\fP, \fBopenshift\-cli\-ex(1)\fP, \fBopenshift\-cli\-options(1)\fP,

+\fBopenshift(1)\fP, \fBopenshift\-cli\-types(1)\fP, \fBopenshift\-cli\-login(1)\fP, \fBopenshift\-cli\-new\-project(1)\fP, \fBopenshift\-cli\-new\-app(1)\fP, \fBopenshift\-cli\-status(1)\fP, \fBopenshift\-cli\-project(1)\fP, \fBopenshift\-cli\-projects(1)\fP, \fBopenshift\-cli\-explain(1)\fP, \fBopenshift\-cli\-cluster(1)\fP, \fBopenshift\-cli\-rollout(1)\fP, \fBopenshift\-cli\-deploy(1)\fP, \fBopenshift\-cli\-rollback(1)\fP, \fBopenshift\-cli\-new\-build(1)\fP, \fBopenshift\-cli\-start\-build(1)\fP, \fBopenshift\-cli\-cancel\-build(1)\fP, \fBopenshift\-cli\-import\-image(1)\fP, \fBopenshift\-cli\-tag(1)\fP, \fBopenshift\-cli\-get(1)\fP, \fBopenshift\-cli\-describe(1)\fP, \fBopenshift\-cli\-edit(1)\fP, \fBopenshift\-cli\-set(1)\fP, \fBopenshift\-cli\-label(1)\fP, \fBopenshift\-cli\-annotate(1)\fP, \fBopenshift\-cli\-expose(1)\fP, \fBopenshift\-cli\-delete(1)\fP, \fBopenshift\-cli\-scale(1)\fP, \fBopenshift\-cli\-autoscale(1)\fP, \fBopenshift\-cli\-secrets(1)\fP, \fBopenshift\-cli\-serviceaccounts(1)\fP, \fBopenshift\-cli\-logs(1)\fP, \fBopenshift\-cli\-rsh(1)\fP, \fBopenshift\-cli\-rsync(1)\fP, \fBopenshift\-cli\-port\-forward(1)\fP, \fBopenshift\-cli\-debug(1)\fP, \fBopenshift\-cli\-exec(1)\fP, \fBopenshift\-cli\-proxy(1)\fP, \fBopenshift\-cli\-attach(1)\fP, \fBopenshift\-cli\-run(1)\fP, \fBopenshift\-cli\-adm(1)\fP, \fBopenshift\-cli\-create(1)\fP, \fBopenshift\-cli\-replace(1)\fP, \fBopenshift\-cli\-apply(1)\fP, \fBopenshift\-cli\-patch(1)\fP, \fBopenshift\-cli\-process(1)\fP, \fBopenshift\-cli\-export(1)\fP, \fBopenshift\-cli\-extract(1)\fP, \fBopenshift\-cli\-policy(1)\fP, \fBopenshift\-cli\-convert(1)\fP, \fBopenshift\-cli\-import(1)\fP, \fBopenshift\-cli\-logout(1)\fP, \fBopenshift\-cli\-config(1)\fP, \fBopenshift\-cli\-whoami(1)\fP, \fBopenshift\-cli\-completion(1)\fP, \fBopenshift\-cli\-env(1)\fP, \fBopenshift\-cli\-volumes(1)\fP, \fBopenshift\-cli\-build\-logs(1)\fP, \fBopenshift\-cli\-ex(1)\fP, \fBopenshift\-cli\-options(1)\fP,

 .SH HISTORY

@@ -9,6 +9,8 @@ set -o pipefail

 OS_ROOT=$(dirname "${BASH_SOURCE}")/..

 source "${OS_ROOT}/hack/lib/init.sh"

+cd ${OS_ROOT}

+

 # ensure we have the latest compiled binaries

 "${OS_ROOT}/hack/build-go.sh"

@@ -17,8 +19,6 @@ if [[ "${platform}" != "linux/amd64" ]]; then

   echo "WARNING: Generating completions on ${platform} may not be identical to running on linux/amd64 due to conditional compilation."

 fi

-#"${OS_ROOT}/hack/build-go.sh" tools/genbashcomp

-

 OUTPUT_REL_DIR=${1:-""}

 OUTPUT_DIR_ROOT="${OS_ROOT}/${OUTPUT_REL_DIR}/contrib/completions"

@@ -157,6 +157,7 @@ func NewCommandCLI(name, fullName string, in io.Reader, out, errout io.Writer) *

 				cmd.NewCmdPatch(fullName, f, out),

 				cmd.NewCmdProcess(fullName, f, out),

 				cmd.NewCmdExport(fullName, f, in, out),

+				cmd.NewCmdExtract(fullName, f, in, out, errout),

 				policy.NewCmdPolicy(policy.PolicyRecommendedName, fullName+" "+policy.PolicyRecommendedName, f, out),

 				cmd.NewCmdConvert(fullName, f, out),

 				importer.NewCmdImport(fullName, f, in, out, errout),

@@ -68,7 +68,7 @@ func NewCmdExport(fullName string, f *clientcmd.Factory, in io.Reader, out io.Wr

 	cmd.Flags().Bool("raw", false, "If true, do not alter the resources in any way after they are loaded.")

 	cmd.Flags().StringP("selector", "l", "", "Selector (label query) to filter on")

 	cmd.Flags().Bool("all-namespaces", false, "If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.")

-	cmd.Flags().StringSliceVarP(&filenames, "filename", "f", filenames, "Filename, directory, or URL to file to use to edit the resource.")

+	cmd.Flags().StringSliceVarP(&filenames, "filename", "f", filenames, "Filename, directory, or URL to file for the resource to export.")

 	cmd.MarkFlagFilename("filename")

 	cmd.Flags().Bool("all", true, "DEPRECATED: all is ignored, specifying a resource without a name selects all the instances of that resource")

 	cmd.Flags().MarkDeprecated("all", "all is ignored because specifying a resource without a name selects all the instances of that resource")

new file mode 100644

@@ -0,0 +1,174 @@

+package cmd

+

+import (

+	"bytes"

+	"fmt"

+	"io"

+	"io/ioutil"

+	"os"

+	"path/filepath"

+

+	"github.com/spf13/cobra"

+

+	kapi "k8s.io/kubernetes/pkg/api"

+	kcmdutil "k8s.io/kubernetes/pkg/kubectl/cmd/util"

+	"k8s.io/kubernetes/pkg/kubectl/resource"

+	"k8s.io/kubernetes/pkg/runtime"

+	"k8s.io/kubernetes/pkg/util/sets"

+

+	cmdutil "github.com/openshift/origin/pkg/cmd/util"

+	"github.com/openshift/origin/pkg/cmd/util/clientcmd"

+)

+

+const (

+	extractLong = `

+Extract files out of secrets and config maps

+

+The extract command makes it easy to download the contents of a config map or secret into a directory.

+Each key in the config map or secret is created as a separate file with the name of the key, as it

+is when you mount a secret or config map into a container.

+

+You can limit which keys are extracted with the --only=NAME flag, or set the directory to extract to

+with --to=DIRECTORY.`

+

+	extractExample = `  # extract the secret "test" to the current directory

+  %[1]s extract secret/test

+

+  # extract the config map "nginx" to the /tmp directory

+  %[1]s extract configmap/nginx --to=/tmp

+

+  # extract only the key "nginx.conf" from config map "nginx" to the /tmp directory

+  %[1]s extract configmap/nginx --to=/tmp --keys=nginx.conf`

+)

+

+type ExtractOptions struct {

+	Out, Err        io.Writer

+	Filenames       []string

+	OnlyKeys        []string

+	TargetDirectory string

+	Overwrite       bool

+

+	VisitorFn             func(resource.VisitorFunc) error

+	ExtractFileContentsFn func(runtime.Object) (map[string][]byte, bool, error)

+}

+

+func NewCmdExtract(fullName string, f *clientcmd.Factory, in io.Reader, out, errOut io.Writer) *cobra.Command {

+	options := &ExtractOptions{

+		Out: out,

+		Err: errOut,

+	}

+	cmd := &cobra.Command{

+		Use:     "extract RESOURCE/NAME [--to=DIRECTORY] [--keys=KEY ...]",

+		Short:   "Extract secrets or config maps to disk",

+		Long:    extractLong,

+		Example: fmt.Sprintf(extractExample, fullName),

+		Run: func(cmd *cobra.Command, args []string) {

+			kcmdutil.CheckErr(options.Complete(f, in, out, cmd, args))

+			kcmdutil.CheckErr(options.Validate())

+			err := options.Run()

+			if err == cmdutil.ErrExit {

+				os.Exit(1)

+			}

+			kcmdutil.CheckErr(err)

+		},

+	}

+	cmd.Flags().BoolVar(&options.Overwrite, "confirm", options.Overwrite, "Overwrite files that already exist.")

+	cmd.Flags().StringVar(&options.TargetDirectory, "to", options.TargetDirectory, "Directory to extract files to.")

+	cmd.Flags().StringSliceVarP(&options.Filenames, "filename", "f", options.Filenames, "Filename, directory, or URL to file to identify to extract the resource.")

+	cmd.MarkFlagFilename("filename")

+	cmd.Flags().StringSliceVar(&options.OnlyKeys, "keys", options.OnlyKeys, "An optional list of keys to extract (default is all keys).")

+	kcmdutil.AddPrinterFlags(cmd)

+	return cmd

+}

+

+func (o *ExtractOptions) Complete(f *clientcmd.Factory, in io.Reader, out io.Writer, cmd *cobra.Command, args []string) error {

+	o.ExtractFileContentsFn = f.ExtractFileContents

+

+	cmdNamespace, explicit, err := f.DefaultNamespace()

+	if err != nil {

+		return err

+	}

+

+	mapper, typer := f.Object(false)

+	b := resource.NewBuilder(mapper, typer, resource.ClientMapperFunc(f.ClientForMapping), kapi.Codecs.UniversalDecoder()).

+		NamespaceParam(cmdNamespace).DefaultNamespace().

+		FilenameParam(explicit, false, o.Filenames...).