Usage of /usr/bin/kyverno-notation-aws:
  -allowInsecureRegistry
    	Whether to allow insecure connections to registries. Not recommended.
  -allowedUsers string
    	Comma-seperated list of all the allowed users and service accounts. (default "system:serviceaccount:kyverno:kyverno-admission-controller,system:serviceaccount:kyverno:kyverno-reports-controller")
  -cacheEnabled
    	Whether to use a TTL cache for storing verified images, default is true (default true)
  -cacheMaxSize int
    	Max size limit for the TTL cache, default is 1000. (default 1000)
  -cacheTTLDurationSeconds int
    	Max TTL value for a cache in seconds, default is 1 hour. (default 3600000000000)
  -debug
    	Enable debug logging
  -health-probe-bind-address string
    	The address the probe endpoint binds to. (default ":8081")
  -imagePullSecrets string
    	Secret resource names for image registry access credentials.
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -leader-elect
    	Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
  -local
    	Use local system notation configuration
  -maxSignatureAttempts int
    	Maximum number of signature envelopes that will be processed for verification (default 30)
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -notls
    	Do not start the TLS server
  -pluginConfigMap string
    	ConfigMap with notation plugin configuration (default "notation-plugin-config")
  -reviewKyvernoToken
    	Checks if the Auth token in the request is a token from kyverno controllers or other allowed users, default is true. (default true)