Usage of /usr/bin/notification-controller:
      --authorized-notifier-spiffe-id stringArray   SPIFFE ID of a notifier authorized to send events. Can be repeated.
      --authorized-receiver-spiffe-id stringArray   SPIFFE ID of a receiver authorized to send requests. Can be repeated.
      --concurrent int                              The number of concurrent notification reconciles. (default 4)
      --default-service-account string              Default service account to use for workload identity when not specified in resources.
      --enable-leader-election                      Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --events-addr string                          The address the event endpoint binds to. (default ":9090")
      --export-http-path-metrics                    When enabled, the requests full path is included in the HTTP server metrics (risk as high cardinality
      --feature-gates mapStringBool                 A comma separated list of key=value pairs defining the state of experimental features.
      --health-addr string                          The address the health endpoint binds to. (default ":9440")
      --kube-api-burst int                          The maximum burst queries-per-second of requests sent to the Kubernetes API. (default 300)
      --kube-api-qps float32                        The maximum queries-per-second of requests sent to the Kubernetes API. (default 50)
      --leader-election-lease-duration duration     Interval at which non-leader candidates will wait to force acquire leadership (duration string). (default 35s)
      --leader-election-release-on-cancel           Defines if the leader should step down voluntarily on controller manager shutdown. (default true)
      --leader-election-renew-deadline duration     Duration that the leading controller manager will retry refreshing leadership before giving up (duration string). (default 30s)
      --leader-election-retry-period duration       Duration the LeaderElector clients should wait between tries of actions (duration string). (default 5s)
      --log-encoding string                         Log encoding format. Can be 'json' or 'console'. (default "json")
      --log-level string                            Log verbosity level. Can be one of 'trace', 'debug', 'info', 'error'. (default "info")
      --max-retry-delay duration                    The maximum amount of time for which an object being reconciled will have to wait before a retry. (default 15m0s)
      --metrics-addr string                         The address the metric endpoint binds to. (default ":8080")
      --min-retry-delay duration                    The minimum amount of time for which an object being reconciled will have to wait before a retry. (default 750ms)
      --no-cross-namespace-refs                     When set to true, references between custom resources are allowed only if the reference and the referee are in the same namespace.
      --rate-limit-interval duration                Interval in which rate limit has effect. (default 5m0s)
      --receiverAddr string                         The address the webhook receiver endpoint binds to. (default ":9292")
      --spiffe-broker-endpoint string               The gRPC URL of the SPIFFE Broker endpoint.
      --spiffe-broker-id stringArray                SPIFFE ID of the SPIFFE Broker endpoint. Can be repeated.
      --token-cache-max-duration duration           The maximum duration a token is cached. (default 1h0m0s)
      --token-cache-max-size int                    The maximum size of the cache in number of tokens. (default 100)
      --watch-all-namespaces                        Watch for custom resources in all namespaces, if set to false it will only watch the runtime namespace. (default true)
      --watch-configs-label-selector string         Watch for ConfigMaps and Secrets with matching labels. (default "reconcile.fluxcd.io/watch=Enabled")