/usr/bin/kube-mgmt

kube-mgmt manages OPA on top of Kubernetes

Usage:
  kube-mgmt [flags]

Flags:
      --analysis-entrypoint string                   set decision to analyze for dynamic data replication configuration (requires --opa-config) (default "main/main")
      --data-label string                            label name for filtering ConfigMaps with data (default "openpolicyagent.org/data")
      --data-value string                            label value for filtering ConfigMaps with data (default "opa")
      --enable-data                                  whether to automatically discover data from labelled ConfigMaps (default true)
      --enable-policies                              whether to automatically discover policies from labelled ConfigMaps (default true)
      --health-endpoint string                       set health check listening endpoint (e.g., localhost:8000)
  -h, --help                                         help for kube-mgmt
      --kubeconfig string                            set path to kubeconfig manually
      --log-level string                             set log level {debug, info, warn} (default "info")
      --namespaces strings                           namespaces to load policies and data from
      --opa-allow-insecure                           allow insecure https connections to OPA
      --opa-auth-token string                        set authentication token for OPA API endpoint
      --opa-auth-token-file string                   set file containing authentication token for OPA API endpoint
      --opa-ca-file string                           set file containing certificate authority for OPA certificate
      --opa-config string                            set file containing OPA configuration to enable data replication based on configured bundles
      --opa-url string                               set URL of OPA API endpoint (default "http://localhost:8181/v1")
      --policy-label string                          label name for filtering ConfigMaps with policies (default "openpolicyagent.org/policy")
      --policy-value string                          label value for filtering ConfigMaps with policies (default "rego")
      --replicate [group/]version/resource           replicate namespace-level resources (default [])
      --replicate-cluster [group/]version/resource   replicate cluster-level resources (default [])
      --replicate-ignore-namespaces strings          namespaces that are ignored by replication
      --replicate-path string                        set path to replicate data into (default "kubernetes")
  -v, --version                                      print version and exit