OS Manuals

/usr/bin/kubernetes-replicator

Kubernetes controller for synchronizing secrets & config maps across namespaces

From kubernetes-replicator-fips 2.12.6-r0 (enterprise-packages), captured 2026-11-09 by running kubernetes-replicator --help (exit 0). permalink

Usage of /usr/bin/kubernetes-replicator:
  -allow-all
    	allow pull-based replication (replicate-from) of all objects, even if the source does not allow it with the replication-allowed annotations; does not affect push-based replication (CAUTION: only use when you know what you're doing)
  -exclude-namespaces string
    	Comma-separated list of regex patterns for namespaces to exclude from replication (a namespace is excluded if any part of its name matches); the replicator never writes to excluded namespaces
  -kubeconfig string
    	path to Kubernetes config file
  -log-format string
    	Log format (plain, json) (default "plain")
  -log-level string
    	Log level (trace, debug, info, warn, error) (default "info")
  -push-allowed-source-namespaces string
    	Comma-separated list of regex patterns (matching the whole name) for namespaces whose objects may be pushed into all other namespaces with the replicate-to/replicate-to-matching annotations. Other namespaces can only push into namespaces that accept them through the replicator.v1.mittwald.de/allow-push-from annotation (CAUTION: anyone who may create objects in a matching namespace can write to every namespace with the replicator's permissions)
  -replicate-configmaps
    	Enable replication of config maps (default true)
  -replicate-role-bindings
    	Enable replication of role bindings (default true)
  -replicate-roles
    	Enable replication of roles (default true)
  -replicate-secrets
    	Enable replication of secrets (default true)
  -replicate-service-accounts
    	Enable replication of service accounts (default true)
  -resync-period string
    	resynchronization period (default "30m")
  -status-addr string
    	listen address for status and monitoring server (default ":9102")
  -sync-by-content
    	Always compare the contents of source and target resources and force them to be the same
Options (14)
OptionDescriptionSource
-allow-allallow pull-based replication (replicate-from) of all objects, even if the source does not allow it with the replication-allowed annotations;help
-exclude-namespaces stringComma-separated list of regex patterns for namespaces to exclude from replication (a namespace is excluded if any part of its name matches);help
-kubeconfig stringpath to Kubernetes config filehelp
-log-format stringLog format (plain, json) (default "plain")help
-log-level stringLog level (trace, debug, info, warn, error) (default "info")help
-push-allowed-source-namespaces stringComma-separated list of regex patterns (matching the whole name) for namespaces whose objects may be pushed into all other namespaces with the replicate-to/replicate-to-matching annotations.help
-replicate-configmapsEnable replication of config maps (default true)help
-replicate-role-bindingsEnable replication of role bindings (default true)help
-replicate-rolesEnable replication of roles (default true)help
-replicate-secretsEnable replication of secrets (default true)help
-replicate-service-accountsEnable replication of service accounts (default true)help
-resync-period stringresynchronization period (default "30m")help
-status-addr stringlisten address for status and monitoring server (default ":9102")help
-sync-by-contentAlways compare the contents of source and target resources and force them to be the samehelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.