OS Manuals

/usr/bin/dashboard-auth

Stateless Go module, which could be referred to as a Kubernetes API extension

From kubernetes-dashboard-auth 1.4.0-r26 (enterprise-packages), captured 2026-11-08 by running dashboard-auth --help (exit 0). permalink

Usage of /usr/bin/dashboard-auth:
      --add_dir_header                    If true, adds the file directory to the header of the log messages
      --address ip                        The IP address for auth service to serve on. Set 0.0.0.0 for listening on all interfaces. (default 0.0.0.0)
      --alsologtostderr                   log to standard error as well as files (no effect when -logtostderr=true)
      --apiserver-ca-bundle string        file containing the x509 certificates used for HTTPS connection to the API Server
      --apiserver-host string             address of the Kubernetes API server to connect to in the format of protocol://address:port, leave it empty if the binary runs inside cluster for local discovery attempt
      --apiserver-skip-tls-verify         enable if connection with remote Kubernetes API server should skip TLS verify
      --cache-enabled                     whether client cache should be enabled or not (default true)
      --cache-refresh-debounce duration   minimal time between cache refreshes in the background (default 5s)
      --cache-size int                    max number of cache entries (default 1000)
      --cache-ttl duration                cache entry TTL (default 10m0s)
      --cluster-context-enabled           whether multi-cluster cache context support should be enabled or not
      --csrf-key string                   Base64 encoded random 256 bytes key. Can be loaded from 'CSRF_KEY' environment variable. (default "oed0YLgqT4/0A5nKk2Wk5huPum50am/RZ3MmokANIQrZ7v40+qVTIAGMdLIYPPSXbeI4LuXgJkQ5pg9duk9kO/zZXyuil3AKVk/hTrMvuDxr7EV/WhcoQzXw5dva7ZvUcqUYV/qvoCcjWpQQEB+ff5jOLWLdok4d7ciNbsPQ5FBRCd4tWGDfoH1W21yiI64CyqyWRludBdZp5FJ4mJ/ilITG6VKr3VaCSPfwYwcsZlGiGtGUrQG0RVOSuL1KGj6H7T00MXPPNyaX3sWLUnHVY7DF+GwP01kcCNq35/+Sqfjs6RM6hkJWR2vKnAtnPxn35r2tqifmgUpGq6vx0etWlA==")
      --kubeconfig string                 path to kubeconfig file
      --log_backtrace_at traceLocation    when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                    If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                   If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint            Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                       log to standard error instead of files (default true)
      --one_output                        If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --port int                          The port for auth service to listen on. (default 8000)
      --skip_headers                      If true, avoid header prefixes in the log messages
      --skip_log_headers                  If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity          logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
      --token-exchange-endpoint string    endpoint used in multi-cluster cache to exchange tokens for context identifiers
  -v, --v Level                           number for the log level verbosity (default 1)
      --vmodule moduleSpec                comma-separated list of pattern=N settings for file-filtered logging
Options (26)
OptionDescriptionSource
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--address ipThe IP address for auth service to serve on.help
--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
--apiserver-ca-bundle stringfile containing the x509 certificates used for HTTPS connection to the API Serverhelp
--apiserver-host stringaddress of the Kubernetes API server to connect to in the format of protocol://address:port, leave it empty if the binary runs inside cluster for local discovery attempthelp
--apiserver-skip-tls-verifyenable if connection with remote Kubernetes API server should skip TLS verifyhelp
--cache-enabledwhether client cache should be enabled or not (default true)help
--cache-refresh-debounce durationminimal time between cache refreshes in the background (default 5s)help
--cache-size intmax number of cache entries (default 1000)help
--cache-ttl durationcache entry TTL (default 10m0s)help
--cluster-context-enabledwhether multi-cluster cache context support should be enabled or nothelp
--csrf-key stringBase64 encoded random 256 bytes key.help
--kubeconfig stringpath to kubeconfig filehelp
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
--log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
--log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
--logtostderrlog to standard error instead of files (default true)help
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
--port intThe port for auth service to listen on.help
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
--stderrthreshold severitylogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)help
--token-exchange-endpoint stringendpoint used in multi-cluster cache to exchange tokens for context identifiershelp
-v, --v Levelnumber for the log level verbosity (default 1)help
--vmodule moduleSpeccomma-separated list of pattern=N settings for file-filtered logginghelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.