OS Manuals

/usr/bin/manager

Kubernetes-native declarative infrastructure for vSphere.

From cluster-api-provider-vsphere 1.17.0-r8 (enterprise-packages), captured 2026-11-08 by running manager --help (exit 0). permalink

Usage of /usr/bin/manager:
      --clustercache-client-burst int            Maximum number of queries that should be allowed in one burst from the cluster cache clients to the Kubernetes API server of workload clusters. (default 30)
      --clustercache-client-qps float32          Maximum queries per second from the cluster cache clients to the Kubernetes API server of workload clusters. (default 20)
      --clustercache-concurrency int             Number of clusters to process simultaneously (default 100)
      --contention-profiling                     Enable block profiling.
      --credentials-file string                  path to CAPV's credentials file (default "/etc/capv/credentials.yaml")
      --diagnostics-address string               The address the diagnostics endpoint binds to. Per default metrics are served via https and withauthentication/authorization. To serve via http and without authentication/authorization set --insecure-diagnostics. If --insecure-diagnostics is not set the diagnostics endpoint also serves pprof endpoints and an endpoint to change the log level. (default ":8443")
      --feature-gates string                     A set of key=value pairs that describe feature gates for alpha/experimental features.
                                                 Common options are:
                                                   AllAlpha=true|false (ALPHA - default=false)
                                                   AllBeta=true|false (BETA - default=false)
                                                   PriorityQueue=true|false (BETA - default=true)
                                                   ReconcilerRateLimiting=true|false (BETA - default=true)
                                                 Options for govmomi mode are:
                                                   NodeAntiAffinity=true|false (ALPHA - default=false)
                                                 Options for supervisor mode when --vm-operator-api-version=v1alpha2 are:
                                                   MultiNetworks=true|false (ALPHA - default=false)
                                                   NamespaceScopedZones=true|false (ALPHA - default=false)
                                                   NodeAutoPlacement=true|false (ALPHA - default=false)
                                                 Options for supervisor mode when --vm-operator-api-version=v1alpha5 are:
                                                   InfrastructurePolicies=true|false (ALPHA - default=false)
                                                   MultiNetworks=true|false (ALPHA - default=false)
                                                   NamespaceScopedZones=true|false (ALPHA - default=false)
                                                   NodeAutoPlacement=true|false (ALPHA - default=false)
                                                 Options for supervisor mode when --vm-operator-api-version=v1alpha6 are:
                                                   IPv6DualStack=true|false (ALPHA - default=false)
                                                   InfrastructurePolicies=true|false (ALPHA - default=false)
                                                   MultiNetworks=true|false (ALPHA - default=false)
                                                   NamespaceScopedZones=true|false (ALPHA - default=false)
                                                   NodeAutoPlacement=true|false (ALPHA - default=false)
                                                   VLANSubinterface=true|false (ALPHA - default=false)

      --health-addr string                       The address the health endpoint binds to. (default ":9440")
      --insecure-diagnostics                     Enable insecure diagnostics serving. For more details see the description of --diagnostics-address.
      --kube-api-burst int                       Maximum number of queries that should be allowed in one burst from the controller client to the Kubernetes API server. (default 200)
      --kube-api-qps float32                     Maximum queries per second from the controller client to the Kubernetes API server. (default 100)
      --kubeconfig string                        Paths to a kubeconfig. Only required if out-of-cluster.
      --leader-elect                             Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager. (default true)
      --leader-elect-lease-duration duration     Interval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)
      --leader-elect-renew-deadline duration     Duration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)
      --leader-elect-retry-period duration       Duration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)
      --leader-election-id string                Name of the config map to use as the locking resource when configuring leader election. (default "capv-controller-manager-runtime")
      --log-flush-frequency duration             Maximum number of seconds between log flushes (default 5s)
      --log-json-info-buffer-size quantity       [Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-json-split-stream                    [Alpha] In JSON format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-info-buffer-size quantity       [Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-split-stream                    [Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --logging-format string                    Sets the log format. Permitted formats: "json" (gated by LoggingBetaOptions), "text". (default "text")
      --namespace string                         Namespace that the controller watches to reconcile cluster-api objects. If unspecified, the controller watches for cluster-api objects across all namespaces.
      --network-provider string                  network provider to be used by Supervisor based clusters.
      --pod-name string                          The name of the pod running the controller manager. (default "capv-controller-manager")
      --profiler-address string                  Bind address to expose the pprof profiler (e.g. localhost:6060)
      --providerserviceaccount-concurrency int   Number of provider service accounts to process simultaneously (default 50)
      --servicediscovery-concurrency int         Number of vSphere clusters for service discovery to process simultaneously (default 50)
      --skip-crd-migration-phases strings        List of CRD migration phases to skip. Valid values are: StorageVersionMigration, CleanupManagedFields.
      --sync-period duration                     The minimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)
      --tls-cipher-suites strings                Comma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true). If omitted, the default Go cipher suites will be used.
                                                 Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.
                                                 Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
      --tls-min-version string                   The minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).
                                                 Possible values are VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. (default "VersionTLS12")
  -v, --v Level                                  number for the log level verbosity
      --virtualmachinegroup-concurrency int      Number of virtual machine group to process simultaneously (default 50)
      --vm-operator-api-version string           the API version to use when reading and writing VM Operator resources in supervisor mode. Valid values are: v1alpha2, v1alpha5, v1alpha6 (default "v1alpha5")
      --vmodule pattern=N,...                    comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)
      --vspherecluster-concurrency int           Number of vSphere clusters to process simultaneously (default 50)
      --vsphereclusteridentity-concurrency int   Number of vSphere cluster identities to process simultaneously (default 10)
      --vspheredeploymentzone-concurrency int    Number of vSphere deployment zones to process simultaneously (default 10)
      --vspheremachine-concurrency int           Number of vSphere machines to process simultaneously (default 100)
      --vspheremachinetemplate-concurrency int   Number of vSphere machine templates to process simultaneously (default 10)
      --vspherevm-concurrency int                Number of vSphere vms to process simultaneously (default 100)
      --watch-filter string                      Label value that the controller watches to reconcile cluster-api objects. Label key is always cluster.x-k8s.io/watch-filter. If unspecified, the controller watches for all cluster-api objects.
      --webhook-cert-dir string                  Webhook cert dir. (default "/tmp/k8s-webhook-server/serving-certs/")
      --webhook-cert-name string                 Webhook cert name. (default "tls.crt")
      --webhook-key-name string                  Webhook key name. (default "tls.key")
      --webhook-port int                         Webhook Server port. (default 9443)
Options (48)
OptionDescriptionSource
--clustercache-client-burst intMaximum number of queries that should be allowed in one burst from the cluster cache clients to the Kubernetes API server of workload clusters.help
--clustercache-client-qps float32Maximum queries per second from the cluster cache clients to the Kubernetes API server of workload clusters.help
--clustercache-concurrency intNumber of clusters to process simultaneously (default 100)help
--contention-profilingEnable block profiling.help
--credentials-file stringpath to CAPV's credentials file (default "/etc/capv/credentials.yaml")help
--diagnostics-address stringThe address the diagnostics endpoint binds to.help
--feature-gates stringA set of key=value pairs that describe feature gates for alpha/experimental features.help
--health-addr stringThe address the health endpoint binds to.help
--insecure-diagnosticsEnable insecure diagnostics serving.help
--kube-api-burst intMaximum number of queries that should be allowed in one burst from the controller client to the Kubernetes API server.help
--kube-api-qps float32Maximum queries per second from the controller client to the Kubernetes API server.help
--kubeconfig stringPaths to a kubeconfig.help
--leader-electEnable leader election for controller manager.help
--leader-elect-lease-duration durationInterval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)help
--leader-elect-renew-deadline durationDuration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)help
--leader-elect-retry-period durationDuration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)help
--leader-election-id stringName of the config map to use as the locking resource when configuring leader election.help
--log-flush-frequency durationMaximum number of seconds between log flushes (default 5s)help
--log-json-info-buffer-size quantity[Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance.help
--log-json-split-stream[Alpha] In JSON format, write error messages to stderr and info messages to stdout.help
--log-text-info-buffer-size quantity[Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance.help
--log-text-split-stream[Alpha] In text format, write error messages to stderr and info messages to stdout.help
--logging-format stringSets the log format.help
--namespace stringNamespace that the controller watches to reconcile cluster-api objects.help
--network-provider stringnetwork provider to be used by Supervisor based clusters.help
--pod-name stringThe name of the pod running the controller manager.help
--profiler-address stringBind address to expose the pprof profiler (e.g. localhost:6060)help
--providerserviceaccount-concurrency intNumber of provider service accounts to process simultaneously (default 50)help
--servicediscovery-concurrency intNumber of vSphere clusters for service discovery to process simultaneously (default 50)help
--skip-crd-migration-phases stringsList of CRD migration phases to skip.help
--sync-period durationThe minimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)help
--tls-cipher-suites stringsComma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
--tls-min-version stringThe minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
-v, --v Levelnumber for the log level verbosityhelp
--virtualmachinegroup-concurrency intNumber of virtual machine group to process simultaneously (default 50)help
--vm-operator-api-version stringthe API version to use when reading and writing VM Operator resources in supervisor mode.help
--vmodule pattern=Ncomma-separated list of pattern=N settings for file-filtered logging (only works for text log format)help
--vspherecluster-concurrency intNumber of vSphere clusters to process simultaneously (default 50)help
--vsphereclusteridentity-concurrency intNumber of vSphere cluster identities to process simultaneously (default 10)help
--vspheredeploymentzone-concurrency intNumber of vSphere deployment zones to process simultaneously (default 10)help
--vspheremachine-concurrency intNumber of vSphere machines to process simultaneously (default 100)help
--vspheremachinetemplate-concurrency intNumber of vSphere machine templates to process simultaneously (default 10)help
--vspherevm-concurrency intNumber of vSphere vms to process simultaneously (default 100)help
--watch-filter stringLabel value that the controller watches to reconcile cluster-api objects.help
--webhook-cert-dir stringWebhook cert dir.help
--webhook-cert-name stringWebhook cert name.help
--webhook-key-name stringWebhook key name.help
--webhook-port intWebhook Server port.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.