Usage of /usr/bin/dashboard-api:
      --act-as-proxy                          forces dashboard to work in full proxy mode, meaning that any in-cluster calls are disabled
      --add_dir_header                        If true, adds the file directory to the header of the log messages
      --alsologtostderr                       log to standard error as well as files (no effect when -logtostderr=true)
      --apiserver-ca-bundle string            file containing the x509 certificates used for HTTPS connection to the API Server
      --apiserver-host string                 address of the Kubernetes API server to connect to in the format of protocol://address:port, leave it empty if the binary runs inside cluster for local discovery attempt
      --apiserver-skip-tls-verify             enable if connection with remote Kubernetes API server should skip TLS verify
      --auto-generate-certificates            enables automatic certificates generation used to serve HTTPS
      --bind-address ip                       IP address on which to serve the --port, set to 0.0.0.0 for all interfaces (default 0.0.0.0)
      --cache-enabled                         whether client cache should be enabled or not (default true)
      --cache-refresh-debounce duration       minimal time between cache refreshes in the background (default 5s)
      --cache-size int                        max number of cache entries (default 1000)
      --cache-ttl duration                    cache entry TTL (default 10m0s)
      --cluster-context-enabled               whether multi-cluster cache context support should be enabled or not
      --csrf-key string                       Base64 encoded random 256 bytes key. Can be loaded from 'CSRF_KEY' environment variable. (default "ialk8JMGUqgKG+17M0Hpf7P5nAObETicrpjQ1LpiY8fSsL63//A0+iixbJhJeq4w83s5GRFgFgcr8y8P8+FTnecA7jAepJrH+jVWtwJPY7fBAsQTzU3+cK/zcsxqahVuTO3ZAQc18UwudkZjokEVyaC3PTPjcltBFi3U1EHhGCwF+Uf5ho/O9duc6177BKgW+245w/h/c3pPlIbZeAo7jb0mF8djre2b6jLzKARfGosYPF3Yo0KQV5QyWE4QzaUKROl2q19zfOUrqAkg3/knBc9J506PYHlNylNT9WPipxUdHQvTtAFXUzT1P2g9KNpIak3rIXg3XWJnFdANuFt+9w==")
      --default-cert-dir string               directory path containing files from --tls-cert-file and --tls-key-file, used also when auto-generating certificates flag is set (default "/certs")
      --disable-csrf-protection               allows disabling CSRF protection
      --insecure-bind-address ip              IP address on which to serve the --insecure-port, set to 0.0.0.0 for all interfaces (default 127.0.0.1)
      --insecure-port int                     port to listen to for incoming HTTP requests (default 8000)
      --kubeconfig string                     path to kubeconfig file with control plane location information
      --log_backtrace_at traceLocation        when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                        If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                       If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint                Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                           log to standard error instead of files (default true)
      --metric-client-check-period int        time interval between separate metric client health checks in seconds (default 30)
      --metrics-provider string               select provider type for metrics, 'none' will not check metrics (default "sidecar")
      --metrics-scraper-service-name string   name of the dashboard metrics scraper service (default "kubernetes-dashboard-metrics-scraper")
      --namespace string                      Namespace to use when accessing Dashboard specific resources, i.e. metrics scraper service (default "kubernetes-dashboard")
      --one_output                            If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --openapi-enabled                       enables OpenAPI v2 endpoint under '/apidocs.json'
      --port int                              secure port to listen to for incoming HTTPS requests (default 8001)
      --profiler                              Enable pprof handler. By default it will be exposed on localhost:8070 under '/debug/pprof'
      --prometheus-enabled                    Enable prometheus metrics handler. By default it will be exposed on localhost:8080 under '/metrics'
      --sidecar-host string                   address of the Sidecar API server to connect to in the format of protocol://address:port, leave it empty if the binary runs inside cluster for service proxy usage
      --skip_headers                          If true, avoid header prefixes in the log messages
      --skip_log_headers                      If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity              logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
      --tls-cert-file string                  file containing the default x509 certificate for HTTPS
      --tls-key-file string                   file containing the default x509 private key matching --tls-cert-file
      --token-exchange-endpoint string        endpoint used in multi-cluster cache to exchange tokens for context identifiers
  -v, --v Level                               number for the log level verbosity (default 1)
      --vmodule moduleSpec                    comma-separated list of pattern=N settings for file-filtered logging