kubectl
kubectl <subcommand> --help
kubectl create -f <path/to_file.yml>
kubectl get sc
kubectl patch sc <class_name> -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"<true|false>"}}}'
kubectl create secret ...
kubectl create secret tls <tls_secret_name> --cert=<path/to_full_chain.crt> --key=<path/to.key>