/usr/local/bin/image-automation-controller

Usage of /usr/local/bin/image-automation-controller:
      --authorized-event-server-spiffe-id stringArray   SPIFFE ID of an event server authorized to receive events. Can be repeated.
      --concurrent int                                  The number of concurrent resource reconciles. (default 4)
      --default-service-account string                  Default service account to use for workload identity when not specified in resources.
      --enable-leader-election                          Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --events-addr string                              The address of the events receiver.
      --feature-gates mapStringBool                     A comma separated list of key=value pairs defining the state of experimental features.
      --health-addr string                              The address the health endpoint binds to. (default ":9440")
      --kube-api-burst int                              The maximum burst queries-per-second of requests sent to the Kubernetes API. (default 300)
      --kube-api-qps float32                            The maximum queries-per-second of requests sent to the Kubernetes API. (default 50)
      --leader-election-lease-duration duration         Interval at which non-leader candidates will wait to force acquire leadership (duration string). (default 35s)
      --leader-election-release-on-cancel               Defines if the leader should step down voluntarily on controller manager shutdown. (default true)
      --leader-election-renew-deadline duration         Duration that the leading controller manager will retry refreshing leadership before giving up (duration string). (default 30s)
      --leader-election-retry-period duration           Duration the LeaderElector clients should wait between tries of actions (duration string). (default 5s)
      --log-encoding string                             Log encoding format. Can be 'json' or 'console'. (default "json")
      --log-level string                                Log verbosity level. Can be one of 'trace', 'debug', 'info', 'error'. (default "info")
      --max-retry-delay duration                        The maximum amount of time for which an object being reconciled will have to wait before a retry. (default 15m0s)
      --metrics-addr string                             The address the metric endpoint binds to. (default ":8080")
      --min-retry-delay duration                        The minimum amount of time for which an object being reconciled will have to wait before a retry. (default 750ms)
      --no-cross-namespace-refs                         When set to true, references between custom resources are allowed only if the reference and the referee are in the same namespace.
      --spiffe-broker-endpoint string                   The gRPC URL of the SPIFFE Broker endpoint.
      --spiffe-broker-id stringArray                    SPIFFE ID of the SPIFFE Broker endpoint. Can be repeated.
      --ssh-hostkey-algos strings                       The list of hostkey algorithms to use for ssh connections, arranged from most preferred to the least.
      --ssh-kex-algos strings                           The list of key exchange algorithms to use for ssh connections, arranged from most preferred to the least.
      --token-cache-max-duration duration               The maximum duration a token is cached. (default 1h0m0s)
      --token-cache-max-size int                        The maximum size of the cache in number of tokens. (default 100)
      --watch-all-namespaces                            Watch for resources in all namespaces, if set to false it will only watch the runtime namespace. (default true)
      --watch-configs-label-selector string             Watch for ConfigMaps and Secrets with matching labels. (default "reconcile.fluxcd.io/watch=Enabled")
      --watch-label-selector string                     Watch for resources with matching labels e.g. 'sharding.fluxcd.io/shard=shard1'.