OS Manuals

/usr/local/bin/jetstream-controller

Kubernetes controller that reconciles NATS JetStream Stream/Consumer/KeyValue/ObjectStore/Account CRDs against a NATS server

From jetstream-controller-fips 0.25.0-r0 (enterprise-packages), captured 2026-11-08 by running jetstream-controller --help (exit 0). permalink

Usage of /usr/local/bin/jetstream-controller:
  -add_dir_header
    	If true, adds the file directory to the header of the log messages
  -alsologtostderr
    	log to standard error as well as files (no effect when -logtostderr=true)
  -alsologtostderrthreshold value
    	logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)
  -cache-dir string
    	Directory to store cached credential and TLS files
  -cleanup-period duration
    	Period to run object cleanup (default 30s)
  -control-loop
    	Experimental: Run controller with a full reconciliation control loop
  -crd-connect
    	If true, then NATS connections will be made from CRD config, not global config. Ignored if running with control loop, CRD options will always override global config
  -creds string
    	NATS Credentials
  -health-probe-bind-address string
    	The address the probe endpoint binds to (default ":8081")
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -legacy_stderr_threshold_behavior
    	If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). If false, stderrthreshold is honored even when logtostderr=true (default true)
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory (no effect when -logtostderr=true)
  -log_file string
    	If non-empty, use this log file (no effect when -logtostderr=true)
  -log_file_max_size uint
    	Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
  -logtostderr
    	log to standard error instead of files (default true)
  -namespace string
    	Restrict to a namespace
  -nkey string
    	NATS NKey
  -one_output
    	If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
  -read-only
    	Starts the controller without causing changes to the NATS resources
  -s string
    	NATS Server URL
  -skip_headers
    	If true, avoid header prefixes in the log messages
  -skip_log_headers
    	If true, avoid headers when opening log files (no effect when -logtostderr=true)
  -stderrthreshold value
    	logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)
  -sync-interval duration
    	Interval to perform scheduled reconcile (default 1m0s)
  -tlsca string
    	NATS TLS certificate authority chain
  -tlscert string
    	NATS TLS public certificate
  -tlsfirst
    	If enabled, forces explicit TLS without waiting for Server INFO
  -tlskey string
    	NATS TLS private key
  -v value
    	number for the log level verbosity
  -version
    	Print the version and exit
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
Options (32)
OptionDescriptionSource
-add_dir_headerIf true, adds the file directory to the header of the log messageshelp
-alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
-alsologtostderrthreshold valuelogs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)help
-cache-dir stringDirectory to store cached credential and TLS fileshelp
-cleanup-period durationPeriod to run object cleanup (default 30s)help
-control-loopExperimental: Run controller with a full reconciliation control loophelp
-crd-connectIf true, then NATS connections will be made from CRD config, not global config.help
-creds stringNATS Credentialshelp
-health-probe-bind-address stringThe address the probe endpoint binds to (default ":8081")help
-kubeconfig stringPaths to a kubeconfig.help
-legacy_stderr_threshold_behaviorIf true, stderrthreshold is ignored when logtostderr=true (legacy behavior).help
-log_backtrace_at valuewhen logging hits line file:N, emit a stack tracehelp
-log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
-log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
-log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
-logtostderrlog to standard error instead of files (default true)help
-namespace stringRestrict to a namespacehelp
-nkey stringNATS NKeyhelp
-one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
-read-onlyStarts the controller without causing changes to the NATS resourceshelp
-s stringNATS Server URLhelp
-skip_headersIf true, avoid header prefixes in the log messageshelp
-skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
-stderrthreshold valuelogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)help
-sync-interval durationInterval to perform scheduled reconcile (default 1m0s)help
-tlsca stringNATS TLS certificate authority chainhelp
-tlscert stringNATS TLS public certificatehelp
-tlsfirstIf enabled, forces explicit TLS without waiting for Server INFOhelp
-tlskey stringNATS TLS private keyhelp
-v valuenumber for the log level verbosityhelp
-versionPrint the version and exithelp
-vmodule valuecomma-separated list of pattern=N settings for file-filtered logginghelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.