Usage of /usr/bin/controller:
      --allow-unsafe-aws-endpoint-urls                        Allow an unsafe AWS endpoint URL over http
      --aws-endpoint-url string                               The AWS endpoint URL the service controller will use to create its resources. This is an optional flag that can be used to override the default behaviour of aws-sdk-go that constructs endpoint URLs automatically based on service and region
      --aws-endpoint-use-path-style                           Force path-style URLs for S3 API calls (e.g. http://host/bucket/key instead of http://bucket.host/key).
      --aws-identity-endpoint-url string                      The AWS endpoint URL the service controller will use to gather information from STS. This is an optional flag that can be used to override the default behaviour of aws-sdk-go that constructs endpoint URLs automatically based on service and region
      --aws-region string                                     The AWS Region in which the service controller will create its resources
      --deletion-policy DeletionPolicy                        The default deletion policy for all resources managed by the controller
      --enable-carm                                           Enable Cross Account Resource Management. (default true)
      --enable-cross-namespace                                Enable cross-namespace behavior (resource references, secret references, field exports). When false, the controller rejects any operation that crosses namespace boundaries.
      --enable-development-logging                            Configures the logger to use a Zap development config (encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn, no sampling), otherwise a Zap production config will be used (encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error), sampling).
      --enable-field-export-reconciler                        Enable the FieldExport reconciler. (default true)
      --enable-leader-election                                Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --enable-webhook-server                                 Enable webhook server for controller manager.
      --feature-gates string                                  Feature gates to enable. The format is a comma-separated list of key=value pairs. Valid keys are feature names and valid values are 'true' or 'false'.Available features: ServiceLevelCARM, IAMRoleSelector, IgnoreFieldDrift, ResourceAdoption, ReadOnlyResources, TeamLevelCARM
      --healthz-addr string                                   The address the health probe endpoint binds to. (default "0.0.0.0:8081")
      --http-client-timeout duration                          Timeout for HTTP requests made by the AWS SDK client. Set to 0 to disable. (default 1m0s)
      --leader-election-namespace string                      Specific namespace that the controller will utilize to manage the coordination.k8s.io/lease object for leader election. By default it will try to use the namespace of the service account mounted to the controller pod.
      --log-level string                                      The log level. The default is info. The options are: debug, info, warn, error, dpanic, panic, fatal (default "info")
      --metrics-addr string                                   The address the metric endpoint binds to. (default "0.0.0.0:8080")
      --reconcile-default-max-concurrent-syncs int            The default maximum number of concurrent reconciles for a resource reconciler. This value is used if no resource-specific override has been specified. Default is 1. (default 1)
      --reconcile-default-resync-seconds int                  The default duration, in seconds, to wait before resyncing desired state of custom resources. This value is used if no resource-specific override has been specified. Default is 10 hours.
      --reconcile-resource-max-concurrent-syncs stringArray   A Key/Value list of strings representing the reconcile max concurrency configuration for each resource. This configuration maps resource kinds to maximum number of concurrent reconciles. If provided,  resource-specific max concurrency takes precedence over the default max concurrency.
      --reconcile-resource-resync-seconds stringArray         A Key/Value list of strings representing the reconcile resync configuration for each resource. This configuration maps resource kinds to drift remediation periods in seconds. If provided,  resource-specific resync periods take precedence over the default period.
      --reconcile-resources string                            A comma-separated list of resource kinds to reconcile. If unspecified, all resources will be reconciled.
      --resource-tags strings                                 Configures the ACK service controller to always set key/value pairs tags on resources that it manages. (default [services.k8s.aws/controller-version=%CONTROLLER_SERVICE%-%CONTROLLER_VERSION%,services.k8s.aws/namespace=%K8S_NAMESPACE%])
      --watch-namespace string                                A comma-separated list of valid RFC-1123 namespace names to watch for custom resource events. If unspecified, the controller watches for events in all namespaces.
      --watch-selectors string                                A comma-separated list of valid label (object) selectors to filter the objects. For example, you can use the label selectors similar to 'app=foo,env=sbx'  to only watch objects that have the 'app' label set to 'foo' and the 'env' label set to 'sbx'.  If unspecified, the controller will not filter the objects.
      --webhook-server-addr string                            The address the webhook endpoint binds to. (default "0.0.0.0:9433")