OS Manuals

/usr/bin/manager

Mutating webhook for Azure Workload Identity

From azure-workload-identity-webhook 1.6.3-r8 (enterprise-packages), captured 2026-11-08 by running manager --help (exit 0). permalink

Usage of /usr/bin/manager:
  -audience string
    	Audience for service account token
  -custom-token-endpoint-annotation-suffix string
    	Suffix to append to 'azure.workload.identity/use-' when defining a custom token endpoint annotation. When empty, custom token endpoint injection is disabled.
  -custom-token-endpoint-audience string
    	Audience to use when configuring service account tokens for custom token endpoints. When empty, custom token endpoint injection is disabled.
  -disable-cert-rotation
    	disable automatic generation and rotation of webhook TLS certificates/keys
  -health-addr string
    	The address the health endpoint binds to (default ":9440")
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -log-level string
    	In order of increasing verbosity: unset (empty string), info, debug, trace and all.
  -metrics-addr string
    	The address the metrics endpoint binds to (default ":8095")
  -metrics-backend string
    	Backend used for metrics (default "prometheus")
  -tls-min-version string
    	Minimum TLS version (default "1.3")
  -version
    	Print version information and exit
  -webhook-cert-dir string
    	Webhook certificates dir to use. Defaults to /certs (default "/certs")
Options (12)
OptionDescriptionSource
-audience stringAudience for service account tokenhelp
-custom-token-endpoint-annotation-suffix stringSuffix to append to 'azure.workload.identity/use-' when defining a custom token endpoint annotation.help
-custom-token-endpoint-audience stringAudience to use when configuring service account tokens for custom token endpoints.help
-disable-cert-rotationdisable automatic generation and rotation of webhook TLS certificates/keyshelp
-health-addr stringThe address the health endpoint binds to (default ":9440")help
-kubeconfig stringPaths to a kubeconfig.help
-log-level stringIn order of increasing verbosity: unset (empty string), info, debug, trace and all.help
-metrics-addr stringThe address the metrics endpoint binds to (default ":8095")help
-metrics-backend stringBackend used for metrics (default "prometheus")help
-tls-min-version stringMinimum TLS version (default "1.3")help
-versionPrint version information and exithelp
-webhook-cert-dir stringWebhook certificates dir to use.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.