OS Manuals

/usr/bin/flux-operator

Flux Operator creates and manages Flux instances running in Kubernetes

From flux-operator-fips 0.62.1-r0 (enterprise-packages), captured 2026-11-08 by running flux-operator --help (exit 0). permalink

Usage of /usr/bin/flux-operator:
      --authorized-web-ui-client-spiffe-id stringArray     SPIFFE ID or prefix of an authorized web UI client. Can be specified multiple times.
      --concurrent int                                     The number of concurrent resource reconciles. (default 10)
      --default-object-identity-service-account string     Default service account to use for object identity when not specified in resources.
      --default-service-account string                     Default service account used for impersonation.
      --default-workload-identity-service-account string   Legacy alias for --default-object-identity-service-account.
      --enable-leader-election                             Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --health-addr string                                 The address the health endpoint binds to. (default ":8081")
      --interval-jitter-percentage uint8                   Percentage of jitter to apply to interval durations. A value of 10 will apply a jitter of +/-10% to the interval duration. It cannot be negative, and must be less than 100. (default 5)
      --leader-election-lease-duration duration            Interval at which non-leader candidates will wait to force acquire leadership (duration string). (default 35s)
      --leader-election-release-on-cancel                  Defines if the leader should step down voluntarily on controller manager shutdown. (default true)
      --leader-election-renew-deadline duration            Duration that the leading controller manager will retry refreshing leadership before giving up (duration string). (default 30s)
      --leader-election-retry-period duration              Duration the LeaderElector clients should wait between tries of actions (duration string). (default 5s)
      --log-encoding string                                Log encoding format. Can be 'json' or 'console'. (default "json")
      --log-level string                                   Log verbosity level. Can be one of 'trace', 'debug', 'info', 'error'. (default "info")
      --max-retry-delay duration                           The maximum amount of time for which an object being reconciled will have to wait before a retry. (default 15m0s)
      --metrics-addr string                                The address the metric endpoint binds to. (default ":8080")
      --min-retry-delay duration                           The minimum amount of time for which an object being reconciled will have to wait before a retry. (default 750ms)
      --override-manager stringArray                       Field manager disallowed to perform changes on managed resources.
      --reporting-interval duration                        The interval at which the report is computed. (default 5m0s)
      --requeue-dependency duration                        The interval at which failing dependencies are reevaluated. (default 5s)
      --spiffe-broker-endpoint string                      The SPIFFE Broker API endpoint.
      --spiffe-broker-id stringArray                       SPIFFE ID or prefix of the SPIFFE Broker API endpoint. Can be specified multiple times.
      --storage-path string                                The local storage path. (default "/data")
      --token-cache-max-duration duration                  The maximum duration a token is cached. (default 1h0m0s)
      --token-cache-max-size int                           The maximum size of the cache in number of tokens. (default 100)
      --watch-configs-label-selector string                Watch for ConfigMaps and Secrets with matching labels. (default "reconcile.fluxcd.io/watch=Enabled")
      --web-config string                                  The path to the configuration file for the web server.
      --web-config-secret-name string                      The name of the Kubernetes Secret containing the web server configuration.
      --web-server-only                                    Run only the web server without starting the controllers.
      --web-server-port int                                The port for the web server to listen on. If set to 0, the web server is disabled. (default 9080)
Options (30)
OptionDescriptionSource
--authorized-web-ui-client-spiffe-id stringArraySPIFFE ID or prefix of an authorized web UI client.help
--concurrent intThe number of concurrent resource reconciles.help
--default-object-identity-service-account stringDefault service account to use for object identity when not specified in resources.help
--default-service-account stringDefault service account used for impersonation.help
--default-workload-identity-service-account stringLegacy alias for --default-object-identity-service-account.help
--enable-leader-electionEnable leader election for controller manager.help
--health-addr stringThe address the health endpoint binds to.help
--interval-jitter-percentage uint8Percentage of jitter to apply to interval durations.help
--leader-election-lease-duration durationInterval at which non-leader candidates will wait to force acquire leadership (duration string).help
--leader-election-release-on-cancelDefines if the leader should step down voluntarily on controller manager shutdown.help
--leader-election-renew-deadline durationDuration that the leading controller manager will retry refreshing leadership before giving up (duration string).help
--leader-election-retry-period durationDuration the LeaderElector clients should wait between tries of actions (duration string).help
--log-encoding stringLog encoding format.help
--log-level stringLog verbosity level.help
--max-retry-delay durationThe maximum amount of time for which an object being reconciled will have to wait before a retry.help
--metrics-addr stringThe address the metric endpoint binds to.help
--min-retry-delay durationThe minimum amount of time for which an object being reconciled will have to wait before a retry.help
--override-manager stringArrayField manager disallowed to perform changes on managed resources.help
--reporting-interval durationThe interval at which the report is computed.help
--requeue-dependency durationThe interval at which failing dependencies are reevaluated.help
--spiffe-broker-endpoint stringThe SPIFFE Broker API endpoint.help
--spiffe-broker-id stringArraySPIFFE ID or prefix of the SPIFFE Broker API endpoint.help
--storage-path stringThe local storage path.help
--token-cache-max-duration durationThe maximum duration a token is cached.help
--token-cache-max-size intThe maximum size of the cache in number of tokens.help
--watch-configs-label-selector stringWatch for ConfigMaps and Secrets with matching labels.help
--web-config stringThe path to the configuration file for the web server.help
--web-config-secret-name stringThe name of the Kubernetes Secret containing the web server configuration.help
--web-server-onlyRun only the web server without starting the controllers.help
--web-server-port intThe port for the web server to listen on.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.