OS Manuals

/usr/bin/sentry

Dapr Sentry service manages mTLS between services and acts as a certificate authority

From dapr-sentry-1.15 1.15.14-r24 (enterprise-packages), captured 2026-11-08 by running sentry --help (exit 2). permalink

Usage of sentry:
      --config string                        Path to config file, or name of a configuration object (default "daprsystem")
      --enable-metrics                       Enable prometheus metric (default true)
      --healthz-listen-address string        The listening address for the healthz server
      --healthz-port int                     The port for the healthz server to listen on (default 8080)
      --issuer-ca-filename string            Certificate Authority certificate filename (default "ca.crt")
      --issuer-certificate-filename string   Issuer certificate filename (default "issuer.crt")
      --issuer-credentials string            Path to the credentials directory holding the issuer data (default "/var/run/secrets/dapr.io/credentials")
      --issuer-key-filename string           Issuer private key filename (default "issuer.key")
      --kubeconfig string                    (optional) absolute path to the kubeconfig file (default "/tmp/.kube/config")
      --listen-address string                The listen address for the sentry server
      --log-as-json                          print log as JSON (default false)
      --log-level string                     Options are debug, info, warn, error, or fatal (default info) (default "info")
      --metrics-listen-address string        The address for the metrics server (default "0.0.0.0")
      --metrics-port string                  The port for the metrics server (default "9090")
      --mode string                          Runtime mode for Dapr Sentry (default "standalone")
      --port int                             The port for the sentry server to listen on (default 50001)
      --trust-domain string                  The CA trust domain (default "localhost")
pflag: help requested
Options (17)
OptionDescriptionSource
--config stringPath to config file, or name of a configuration object (default "daprsystem")help
--enable-metricsEnable prometheus metric (default true)help
--healthz-listen-address stringThe listening address for the healthz serverhelp
--healthz-port intThe port for the healthz server to listen on (default 8080)help
--issuer-ca-filename stringCertificate Authority certificate filename (default "ca.crt")help
--issuer-certificate-filename stringIssuer certificate filename (default "issuer.crt")help
--issuer-credentials stringPath to the credentials directory holding the issuer data (default "/var/run/secrets/dapr.io/credentials")help
--issuer-key-filename stringIssuer private key filename (default "issuer.key")help
--kubeconfig string(optional) absolute path to the kubeconfig file (default "/tmp/.kube/config")help
--listen-address stringThe listen address for the sentry serverhelp
--log-as-jsonprint log as JSON (default false)help
--log-level stringOptions are debug, info, warn, error, or fatal (default info) (default "info")help
--metrics-listen-address stringThe address for the metrics server (default "0.0.0.0")help
--metrics-port stringThe port for the metrics server (default "9090")help
--mode stringRuntime mode for Dapr Sentry (default "standalone")help
--port intThe port for the sentry server to listen on (default 50001)help
--trust-domain stringThe CA trust domain (default "localhost")help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.