OS Manuals

/usr/local/bin/manager

Upstream image runs `entrypoint.sh` instead of `/usr/bin/manager`

From kubevela-vela-core-compat-fips 1.11.1-r0 (enterprise-packages), captured 2026-11-09 by running manager --help (exit 0). permalink

I1109 14:54:17.052779       2 server.go:109] "KubeVela information" version="1.11.1" revision="UNKNOWN"
I1109 14:54:17.052853       2 server.go:110] "Vela-Core init" definition namespace="vela-system"
The KubeVela controller manager is a daemon that embeds the core control loops shipped with KubeVela

Usage:
  vela-core [flags]

Flags:
      --add_dir_header                                                    If true, adds the file directory to the header of the log messages
      --allow-cross-namespace-resource                                    If set to false, application can only apply resources within its namespace. Default to be true. (default true)
      --allow-namespace-global-policies                                   Whether global Application-scoped PolicyDefinitions outside vela-system apply to the applications in their namespace. When false, global policies are platform-wide only: they must be in vela-system, the webhook rejects them elsewhere, and any that exist are ignored. (default true)
      --allow-resource-types string                                       If not empty, application can only apply resources with specified types. For example, --allow-resource-types=whitelist:Deployment.v1.apps,Job.v1.batch
      --allow-skip-global-policies                                        Whether an application may opt out of global policies with the policy.oam.dev/skip-global annotation. When false, global policies are mandatory: the webhook rejects the annotation and the controller ignores it. (default true)
      --alsologtostderr                                                   log to standard error as well as files (no effect when -logtostderr=true)
      --application-default-apply-data-changes                            Default for a policy's applyDataChanges setting, used when the application has no valid policy.oam.dev/apply-data-changes annotation and the policy template sets no config.applyDataChanges. When true, applications take changed output from an unchanged Application-scoped policy version.
      --application-default-apply-policy-updates                          Default for a policy's applyPolicyUpdates setting, used when the application has no valid policy.oam.dev/apply-policy-updates annotation and the policy template sets no config.applyPolicyUpdates. When true, applications adopt new versions of the Application-scoped policies they run.
      --application-default-auto-revision                                 Default for a policy's autoRevision setting, used when the application has no valid policy.oam.dev/auto-revision annotation and the policy template sets no config.autoRevision. When true, Application-scoped policy changes to an application's spec cut a new ApplicationRevision; an application can opt out with the annotation set to "false".
      --application-re-sync-period duration                               Re-sync period for application to re-sync, also known as the state-keep interval. (default 5m0s)
      --application-revision-definition-storage-prune-duration duration   the duration for running application revision storage pruning (default 1h0m0s)
      --application-revision-limit int                                    application-revision-limit is the maximum number of application useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value is 10. (default 10)
      --authentication-default-user string                                The User to impersonate when the User of application is not set. (default "kubevela:vela-core")
      --authentication-group-pattern string                               During authentication, only groups with specified pattern will be carried on application. Resource requests will be impersonated as these selected groups. (default "kubevela:*")
      --authentication-with-user                                          If set to true, User will be carried on application. Resource requests will be impersonated as the User.
      --autogen-workload-definition                                       Automatic generated workloadDefinition which componentDefinition refers to. (default true)
      --cluster-gateway-ca-file string                                    Specify the CA file path for cluster-gateway.
      --cluster-gateway-service string                                    The <namespace>/<name> of the cluster-gateway Service that the serving cert is for. Use with --cluster-gateway-tls-secret. vela-core sets the APIService caBundle only when the APIService points at this Service. If it is empty, vela-core uses the Service of the APIService.
      --cluster-gateway-tls-secret string                                 The <namespace>/<name> of the Secret that holds the cluster-gateway serving cert. Requires --enable-cluster-gateway. If you set it, vela-core creates or renews the cert at startup and sets the caBundle of the cluster-gateway APIService when the APIService points at --cluster-gateway-service. If it is empty (the default), cert-manager or another tool must supply the cert.
      --cluster-gateway-url string                                        Specify the redirect cluster-gateway url for multi-cluster requests. If empty, it uses the Kubernetes aggregated api to access.
      --cluster-metrics-interval duration                                 The interval that ClusterMetricsMgr will collect metrics from clusters, default value is 15 seconds. (default 15s)
      --concurrent-reconciles int                                         concurrent-reconciles is the concurrent reconcile number of the controller. The default value is 4 (default 4)
      --controller-client-long-running-request-timeout duration           The timeout value for controller client long-running (list) requests. (default 30s)
      --controller-client-mutating-request-timeout duration               The timeout value for controller client mutating (update, patch, delete) requests. (default 15s)
      --controller-client-request-timeout duration                        The timeout value for controller client requests. (default 10s)
      --cue-compatibility-cache-size int                                  Maximum number of CUE templates to cache after version compatibility rewriting. Set to 0 to disable caching. (default 2000)
      --cue-upgrade-bool-default-guard-enabled                            Enable bool default-guard hazard compatibility rewrite pass.
      --cue-upgrade-error-field-label-enabled                             Enable error field-label compatibility rewrite pass. (default true)
      --cue-upgrade-evalv3-selfref-guard-enabled                          Enable evalv3 self-reference default-guard compatibility rewrite pass.
      --cue-upgrade-generic-default-guard-enabled                         Enable generic default-guard hazard compatibility rewrite pass.
      --cue-upgrade-keepvalidators-singleton-enabled                      Enable keepvalidators singleton concretization compatibility pass.
      --cue-upgrade-list-concat-enabled                                   Enable list concat compatibility rewrite pass. (default true)
      --definition-revision-limit int                                     definition-revision-limit is the maximum number of component/trait definition useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value is 20. (default 20)
      --dev-logs                                                          Enable ANSI color formatting for console logs (ignored when log-file-path is set)
      --disable-remote-cluster-client                                     disable RemoteClusterClient for default multicluster client
      --enable-cluster-gateway                                            Enable cluster-gateway to use multicluster, disabled by default.
      --enable-cluster-metrics                                            Enable cluster-metrics-management to collect metrics from clusters with cluster-gateway, disabled by default. When this param is enabled, enable-cluster-gateway should be enabled
      --enable-cue-version-compatibility                                  Automatically rewrite legacy CUE syntax in stored definitions at render time. (default true)
      --enable-external-package-for-default-compiler                      Enable loading third-party CUE packages into the default CUE compiler. When enabled, external CUE packages can be imported and used in CUE templates. (default true)
      --enable-external-package-watch-for-default-compiler                Enable watching for changes in external CUE packages and automatically reload them when modified. Requires enable-external-package-for-default-compiler to be enabled.
      --enable-leader-election                                            Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --enable-sharding                                                   When sharding enabled, the controller will run as master (shard-id=master) or slave mode (shard-id is any non-empty string except master). Refer to https://github.com/kubevela/kubevela/blob/master/design/vela-core/sharding.md for details.
      --feature-gates mapStringBool                                       A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
                                                                          APIResponseCompression=true|false (BETA - default=true)
                                                                          APIServerIdentity=true|false (BETA - default=true)
                                                                          APIServerTracing=true|false (BETA - default=true)
                                                                          APIServingWithRoutine=true|false (ALPHA - default=false)
                                                                          AllAlpha=true|false (ALPHA - default=false)
                                                                          AllBeta=true|false (BETA - default=false)
                                                                          AnonymousAuthConfigurableEndpoints=true|false (ALPHA - default=false)
                                                                          ApplyOnce=true|false (ALPHA - default=false)
                                                                          ApplyResourceByReplace=true|false (ALPHA - default=false)
                                                                          AuthenticateApplication=true|false (ALPHA - default=false)
                                                                          AuthorizeWithSelectors=true|false (ALPHA - default=false)
                                                                          BlockPrivateHTTPAddresses=true|false (ALPHA - default=false)
                                                                          ClientIdentityPenetration=true|false (ALPHA - default=false)
                                                                          ComponentSLIs=true|false (BETA - default=true)
                                                                          ConcurrentWatchObjectDecode=true|false (BETA - default=false)
                                                                          ConsistentListFromCache=true|false (BETA - default=true)
                                                                          CoordinatedLeaderElection=true|false (ALPHA - default=false)
                                                                          DeprecatedObjectLabelSelector=true|false (ALPHA - default=false)
                                                                          DeprecatedPolicySpec=true|false (ALPHA - default=false)
                                                                          DisableBootstrapClusterInfo=true|false (ALPHA - default=false)
                                                                          DisableReferObjectsFromURL=true|false (ALPHA - default=false)
                                                                          DisableWebhookAutoSchedule=true|false (ALPHA - default=false)
                                                                          DisableWorkflowContextConfigMapCache=true|false (ALPHA - default=true)
                                                                          DisableWorkflowHTTP=true|false (ALPHA - default=false)
                                                                          EnableApplicationScopedPolicies=true|false (ALPHA - default=false)
                                                                          EnableApplicationStatusMetrics=true|false (ALPHA - default=false)
                                                                          EnableBackupWorkflowRecord=true|false (ALPHA - default=false)
                                                                          EnableCueValidation=true|false (BETA - default=false)
                                                                          EnableGlobalPolicies=true|false (ALPHA - default=false)
                                                                          EnablePatchStatusAtOnce=true|false (ALPHA - default=false)
                                                                          EnableSuspendOnFailure=true|false (ALPHA - default=false)
                                                                          EnableWatchEventListener=true|false (ALPHA - default=false)
                                                                          GzipApplicationRevision=true|false (ALPHA - default=false)
                                                                          GzipResourceTracker=true|false (ALPHA - default=false)
                                                                          HealthinessCheck=true|false (ALPHA - default=false)
                                                                          InPlacePodVerticalScaling=true|false (ALPHA - default=false)
                                                                          InformerCacheFilterUnnecessaryFields=true|false (ALPHA - default=true)
                                                                          LegacyObjectTypeIdentifier=true|false (ALPHA - default=false)
                                                                          LegacyResourceOwnerValidation=true|false (ALPHA - default=false)
                                                                          LegacyResourceTrackerGC=true|false (BETA - default=false)
                                                                          MultiStageComponentApply=true|false (ALPHA - default=true)
                                                                          OCMClusterCache=true|false (BETA - default=true)
                                                                          OpenAPIEnums=true|false (BETA - default=true)
                                                                          PreDispatchDryRun=true|false (ALPHA - default=true)
                                                                          ResilientWatchCacheInitialization=true|false (BETA - default=true)
                                                                          RetryGenerateName=true|false (BETA - default=true)
                                                                          SecretCache=true|false (BETA - default=true)
                                                                          SeparateCacheWatchRPC=true|false (BETA - default=true)
                                                                          SharedDefinitionStorageForApplicationRevision=true|false (ALPHA - default=true)
                                                                          StorageVersionAPI=true|false (ALPHA - default=false)
                                                                          StorageVersionHash=true|false (BETA - default=true)
                                                                          StrictCostEnforcementForVAP=true|false (BETA - default=false)
                                                                          StrictCostEnforcementForWebhooks=true|false (BETA - default=false)
                                                                          StructuredAuthenticationConfiguration=true|false (BETA - default=true)
                                                                          StructuredAuthorizationConfiguration=true|false (BETA - default=true)
                                                                          UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true)
                                                                          ValidateComponentWhenSharding=true|false (ALPHA - default=false)
                                                                          ValidateDefinitionPermissions=true|false (ALPHA - default=false)
                                                                          ValidateResourcesExist=true|false (ALPHA - default=false)
                                                                          ValidateUndeclaredParameters=true|false (ALPHA - default=false)
                                                                          WatchCacheInitializationPostStartHook=true|false (BETA - default=false)
                                                                          WatchFromStorageWithoutResourceVersion=true|false (BETA - default=false)
                                                                          WatchList=true|false (ALPHA - default=false)
                                                                          ZstdApplicationRevision=true|false (ALPHA - default=false)
                                                                          ZstdResourceTracker=true|false (ALPHA - default=false)
      --health-addr string                                                The address the health endpoint binds to. (default ":9440")
      --helm-cache-immutable-ttl duration                                 Default cache TTL for immutable (semver) chart versions, used when a component does not set options.cache.immutableTTL. Set to 0 to use the default. (default 24h0m0s)
      --helm-cache-max-bytes int                                          Maximum number of bytes to keep in the Helm chart cache. Set to 0 to use the default. (default 268435456)
      --helm-cache-mutable-ttl duration                                   Default cache TTL for mutable chart tags, used when a component does not set options.cache.mutableTTL. Set to 0 to use the default. (default 5m0s)
      --helm-cache-sweep-interval duration                                How often the Helm chart cache sweeps expired entries. Set to 0 to use the default. (default 1m0s)
  -h, --help                                                              help for vela-core
      --ignore-app-without-controller-version                             If true, application controller will not process the app without 'app.oam.dev/controller-version-require' annotation
      --ignore-definition-without-controller-version                      If true, trait/component/workflowstep definition controller will not process the definition without 'definition.oam.dev/controller-version-require' annotation
      --informer-sync-period duration                                     The re-sync period for informer in controller-runtime. This is a system-level configuration. (default 10h0m0s)
      --kube-api-burst int                                                the burst for reconcile clients. Recommend setting it qps*2. (default 100)
      --kube-api-qps float                                                the qps for reconcile clients. Low qps may lead to low throughput. High qps may give stress to api-server. Raise this value if concurrent-reconciles is set to be high. (default 50)
      --leader-election-lease-duration duration                           The duration that non-leader candidates will wait to force acquire leadership (default 15s)
      --leader-election-namespace string                                  Determines the namespace in which the leader election configmap will be created.
      --leader-election-renew-deadline duration                           The duration that the acting controlplane will retry refreshing leadership before giving up (default 10s)
      --leader-election-retry-period duration                             The duration the LeaderElector clients should wait between tries of actions (default 2s)
      --log-debug                                                         Enable debug logs for development purpose
      --log-file-max-size uint                                            Defines the maximum size a log file can grow to, Unit is megabytes. (default 1024)
      --log-file-path string                                              The file to write logs to.
      --log_backtrace_at traceLocation                                    when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                                                    If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                                                   If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint                                            Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                                                       log to standard error instead of files (default true)
      --max-dispatch-concurrent int                                       Set the max dispatch concurrent number, default is 10 (default 10)
      --max-workflow-failed-backoff-time int                              Set the max workflow failed backoff time, default is 300 (default 300)
      --max-workflow-step-error-retry-times int                           Set the max workflow step error retry times, default is 10 (default 10)
      --max-workflow-wait-backoff-time int                                Set the max workflow wait backoff time, default is 60 (default 60)
      --metrics-addr string                                               The address the metric endpoint binds to. (default ":8080")
      --one_output                                                        If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --optimize-cached-gvks string                                       Types of resources to be cached. For example, --optimize-cached-gvks=Deployment.v1.apps,Job.v1.batch . If you have dedicated resources to be managed in your system, you can turn it on to improve performance. NOTE: this optimization only works for single-cluster.
      --optimize-disable-application-revision                             Optimize ApplicationRevision by disabling the creation and gc. Side effect: application cannot rollback. If you don't need to rollback applications, you can switch it on to reduce the storage and improve performance.
      --optimize-disable-component-revision                               Optimize ComponentRevision by disabling the creation and gc. Side effect: rollout cannot be used. If you don't use rollout trait, you can switch it on to reduce the storage and improve performance.
      --optimize-disable-resource-apply-double-check                      Optimize workflow by ignoring resource double check after apply. Side effect: controller will not wait for resource creation. If you want to use KubeVela to dispatch tons of resources and do not need to double check the creation result, you can enable this optimization.
      --optimize-enable-in-memory-workflow-context                        Optimize workflow by use in-memory context. Side effect: controller crash will lead to workflow run again from scratch and possible to cause mistakes in workflow inputs/outputs. You can use this optimization when you don't use input/output feature of workflow.
      --optimize-enable-resource-tracker-delete-only-trigger              Optimize resourcetracker by only trigger reconcile when resourcetracker is deleted. It is enabled by default. If you want to integrate KubeVela with your own operator or allow ResourceTracker manual edit, you can turn it off. (default true)
      --optimize-list-op                                                  Optimize ResourceTracker & ApplicationRevision list op by adding index. This will increase the use of memory and accelerate the list operation of ResourceTracker. Default to enable it. If you want to reduce the memory use of KubeVela, you can switch it off. (default true)
      --optimize-mark-with-prob float                                     Optimize ResourceTracker GC by only run mark with probability. Side effect: outdated ResourceTracker might not be able to be removed immediately. Default to 0.1. If you want to cleanup outdated resource for keepLegacyResource mode immediately, set it to 1.0 to disable this optimization. (default 0.1)
      --perf-enabled                                                      Enable performance logging for controllers, disabled by default.
      --profiling-addr string                                             if not empty, start the profiling server at the given address
      --reconcile-termination-graceful-period duration                    graceful period for terminating reconcile (default 5s)
      --reconcile-timeout duration                                        the timeout for controller reconcile (default 3m0s)
      --ref-objects-available-scope namespace                             The available scope for ref-objects component to refer objects. Should be one of namespace, `cluster`, `global` (default "global")
      --remote-cluster-client-cache-prune-probability float               the cache prune probability of remote clusters' RESTMapper (default 0.01)
      --remote-cluster-client-cache-timeout duration                      the timeout of remote cluster's RESTMapper cache (default 30m0s)
      --revision-limit int                                                RevisionLimit is the maximum number of revisions that will be maintained. The default value is 50. (default 50)
      --schedulable-shards strings                                        The shard ids that are available for scheduling. If empty, dynamic discovery will be used.
      --shard-id string                                                   The id for sharding. (default "master")
      --sharding-slave-discovery-resync-period duration                   The resync period for default dynamic discovery scheduler. (default 5m0s)
      --skip_headers                                                      If true, avoid header prefixes in the log messages
      --skip_log_headers                                                  If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity                                          logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
      --storage-driver string                                             Application storage driver. (default "Local")
      --system-definition-namespace string                                Define the namespace of the system-level definition (default "vela-system")
      --use-webhook                                                       Enable Admission Webhook
  -v, --v Level                                                           number for the log level verbosity
      --vmodule moduleSpec                                                comma-separated list of pattern=N settings for file-filtered logging
      --webhook-cert-dir string                                           Admission webhook cert/key dir. (default "/k8s-webhook-server/serving-certs")
      --webhook-configuration string                                      The name of the MutatingWebhookConfiguration and the ValidatingWebhookConfiguration. vela-core sets their caBundle. Use with --webhook-tls-secret.
      --webhook-conversion-crds strings                                   The CRDs whose conversion webhook vela-core points at its webhook Service. Use with --webhook-tls-secret.
      --webhook-failure-policy string                                     The failurePolicy (Fail or Ignore) that vela-core sets on every webhook when its webhook server serves requests. Use with --webhook-tls-secret. If it is empty, vela-core does not change the failurePolicy.
      --webhook-port int                                                  admission webhook listen address (default 9443)
      --webhook-tls-secret string                                         The <namespace>/<name> of the Secret that holds the webhook serving cert. Requires --use-webhook. If you set it, vela-core creates or renews the cert at startup. vela-core writes the cert to --webhook-cert-dir and sets the caBundle of --webhook-configuration. If it is empty (the default), cert-manager or another tool must supply the cert.
      --workflow-http-deny-config-template-name string                    Discover and merge ConfigMaps produced by this ConfigTemplate in the controller namespace (default "vela-core-http-deny")
Options (106)
OptionDescriptionSource
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--allow-cross-namespace-resourceIf set to false, application can only apply resources within its namespace.help
--allow-namespace-global-policiesWhether global Application-scoped PolicyDefinitions outside vela-system apply to the applications in their namespace.help
--allow-resource-types stringIf not empty, application can only apply resources with specified types.help
--allow-skip-global-policiesWhether an application may opt out of global policies with the policy.oam.dev/skip-global annotation.help
--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
--application-default-apply-data-changesDefault for a policy's applyDataChanges setting, used when the application has no valid policy.oam.dev/apply-data-changes annotation and the policy template sets no config.applyDataChanges.help
--application-default-apply-policy-updatesDefault for a policy's applyPolicyUpdates setting, used when the application has no valid policy.oam.dev/apply-policy-updates annotation and the policy template sets no config.applyPolicyUpdates.help
--application-default-auto-revisionDefault for a policy's autoRevision setting, used when the application has no valid policy.oam.dev/auto-revision annotation and the policy template sets no config.autoRevision.help
--application-re-sync-period durationRe-sync period for application to re-sync, also known as the state-keep interval.help
--application-revision-definition-storage-prune-duration durationthe duration for running application revision storage pruning (default 1h0m0s)help
--application-revision-limit intapplication-revision-limit is the maximum number of application useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value…help
--authentication-default-user stringThe User to impersonate when the User of application is not set.help
--authentication-group-pattern stringDuring authentication, only groups with specified pattern will be carried on application.help
--authentication-with-userIf set to true, User will be carried on application.help
--autogen-workload-definitionAutomatic generated workloadDefinition which componentDefinition refers to.help
--cluster-gateway-ca-file stringSpecify the CA file path for cluster-gateway.help
--cluster-gateway-service stringThe <namespace>/<name> of the cluster-gateway Service that the serving cert is for.help
--cluster-gateway-tls-secret stringThe <namespace>/<name> of the Secret that holds the cluster-gateway serving cert.help
--cluster-gateway-url stringSpecify the redirect cluster-gateway url for multi-cluster requests.help
--cluster-metrics-interval durationThe interval that ClusterMetricsMgr will collect metrics from clusters, default value is 15 seconds.help
--concurrent-reconciles intconcurrent-reconciles is the concurrent reconcile number of the controller.help
--controller-client-long-running-request-timeout durationThe timeout value for controller client long-running (list) requests.help
--controller-client-mutating-request-timeout durationThe timeout value for controller client mutating (update, patch, delete) requests.help
--controller-client-request-timeout durationThe timeout value for controller client requests.help
--cue-compatibility-cache-size intMaximum number of CUE templates to cache after version compatibility rewriting.help
--cue-upgrade-bool-default-guard-enabledEnable bool default-guard hazard compatibility rewrite pass.help
--cue-upgrade-error-field-label-enabledEnable error field-label compatibility rewrite pass.help
--cue-upgrade-evalv3-selfref-guard-enabledEnable evalv3 self-reference default-guard compatibility rewrite pass.help
--cue-upgrade-generic-default-guard-enabledEnable generic default-guard hazard compatibility rewrite pass.help
--cue-upgrade-keepvalidators-singleton-enabledEnable keepvalidators singleton concretization compatibility pass.help
--cue-upgrade-list-concat-enabledEnable list concat compatibility rewrite pass.help
--definition-revision-limit intdefinition-revision-limit is the maximum number of component/trait definition useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The…help
--dev-logsEnable ANSI color formatting for console logs (ignored when log-file-path is set)help
--disable-remote-cluster-clientdisable RemoteClusterClient for default multicluster clienthelp
--enable-cluster-gatewayEnable cluster-gateway to use multicluster, disabled by default.help
--enable-cluster-metricsEnable cluster-metrics-management to collect metrics from clusters with cluster-gateway, disabled by default.help
--enable-cue-version-compatibilityAutomatically rewrite legacy CUE syntax in stored definitions at render time.help
--enable-external-package-for-default-compilerEnable loading third-party CUE packages into the default CUE compiler.help
--enable-external-package-watch-for-default-compilerEnable watching for changes in external CUE packages and automatically reload them when modified.help
--enable-leader-electionEnable leader election for controller manager.help
--enable-shardingWhen sharding enabled, the controller will run as master (shard-id=master) or slave mode (shard-id is any non-empty string except master).help
--feature-gates mapStringBoolA set of key=value pairs that describe feature gates for alpha/experimental features.help
--health-addr stringThe address the health endpoint binds to.help
--helm-cache-immutable-ttl durationDefault cache TTL for immutable (semver) chart versions, used when a component does not set options.cache.immutableTTL.help
--helm-cache-max-bytes intMaximum number of bytes to keep in the Helm chart cache.help
--helm-cache-mutable-ttl durationDefault cache TTL for mutable chart tags, used when a component does not set options.cache.mutableTTL.help
--helm-cache-sweep-interval durationHow often the Helm chart cache sweeps expired entries.help
-h, --helphelp for vela-corehelp
--ignore-app-without-controller-versionIf true, application controller will not process the app without 'app.oam.dev/controller-version-require' annotationhelp
--ignore-definition-without-controller-versionIf true, trait/component/workflowstep definition controller will not process the definition without 'definition.oam.dev/controller-version-require' annotationhelp
--informer-sync-period durationThe re-sync period for informer in controller-runtime.help
--kube-api-burst intthe burst for reconcile clients.help
--kube-api-qps floatthe qps for reconcile clients.help
--leader-election-lease-duration durationThe duration that non-leader candidates will wait to force acquire leadership (default 15s)help
--leader-election-namespace stringDetermines the namespace in which the leader election configmap will be created.help
--leader-election-renew-deadline durationThe duration that the acting controlplane will retry refreshing leadership before giving up (default 10s)help
--leader-election-retry-period durationThe duration the LeaderElector clients should wait between tries of actions (default 2s)help
--log-debugEnable debug logs for development purposehelp
--log-file-max-size uintDefines the maximum size a log file can grow to, Unit is megabytes.help
--log-file-path stringThe file to write logs to.help
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
--log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
--log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
--logtostderrlog to standard error instead of files (default true)help
--max-dispatch-concurrent intSet the max dispatch concurrent number, default is 10 (default 10)help
--max-workflow-failed-backoff-time intSet the max workflow failed backoff time, default is 300 (default 300)help
--max-workflow-step-error-retry-times intSet the max workflow step error retry times, default is 10 (default 10)help
--max-workflow-wait-backoff-time intSet the max workflow wait backoff time, default is 60 (default 60)help
--metrics-addr stringThe address the metric endpoint binds to.help
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
--optimize-cached-gvks stringTypes of resources to be cached.help
--optimize-disable-application-revisionOptimize ApplicationRevision by disabling the creation and gc.help
--optimize-disable-component-revisionOptimize ComponentRevision by disabling the creation and gc.help
--optimize-disable-resource-apply-double-checkOptimize workflow by ignoring resource double check after apply.help
--optimize-enable-in-memory-workflow-contextOptimize workflow by use in-memory context.help
--optimize-enable-resource-tracker-delete-only-triggerOptimize resourcetracker by only trigger reconcile when resourcetracker is deleted.help
--optimize-list-opOptimize ResourceTracker & ApplicationRevision list op by adding index.help
--optimize-mark-with-prob floatOptimize ResourceTracker GC by only run mark with probability.help
--perf-enabledEnable performance logging for controllers, disabled by default.help
--profiling-addr stringif not empty, start the profiling server at the given addresshelp
--reconcile-termination-graceful-period durationgraceful period for terminating reconcile (default 5s)help
--reconcile-timeout durationthe timeout for controller reconcile (default 3m0s)help
--ref-objects-available-scope namespaceThe available scope for ref-objects component to refer objects.help
--remote-cluster-client-cache-prune-probability floatthe cache prune probability of remote clusters' RESTMapper (default 0.01)help
--remote-cluster-client-cache-timeout durationthe timeout of remote cluster's RESTMapper cache (default 30m0s)help
--revision-limit intRevisionLimit is the maximum number of revisions that will be maintained.help
--schedulable-shards stringsThe shard ids that are available for scheduling.help
--shard-id stringThe id for sharding.help
--sharding-slave-discovery-resync-period durationThe resync period for default dynamic discovery scheduler.help
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
--stderrthreshold severitylogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)help
--storage-driver stringApplication storage driver.help
--system-definition-namespace stringDefine the namespace of the system-level definition (default "vela-system")help
--use-webhookEnable Admission Webhookhelp
-v, --v Levelnumber for the log level verbosityhelp
--vmodule moduleSpeccomma-separated list of pattern=N settings for file-filtered logginghelp
--webhook-cert-dir stringAdmission webhook cert/key dir.help
--webhook-configuration stringThe name of the MutatingWebhookConfiguration and the ValidatingWebhookConfiguration.help
--webhook-conversion-crds stringsThe CRDs whose conversion webhook vela-core points at its webhook Service.help
--webhook-failure-policy stringThe failurePolicy (Fail or Ignore) that vela-core sets on every webhook when its webhook server serves requests.help
--webhook-port intadmission webhook listen address (default 9443)help
--webhook-tls-secret stringThe <namespace>/<name> of the Secret that holds the webhook serving cert.help
--workflow-http-deny-config-template-name stringDiscover and merge ConfigMaps produced by this ConfigTemplate in the controller namespace (default "vela-core-http-deny")help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.