2026-11-09T14:59:00.066|INFO|CTL|main.main: START - version=v5.6.4
Usage of /usr/local/bin/controller:
-a string
Cluster advertise address
-admctrl_port uint
Admission Webhook server port (default 20443)
-apc int
Enable auto profile collection (default 1)
-b string
Cluster bind address
-cbench string
Custom check control (default "disable")
-check_key_rotation_period string
-crdvalidatectrl_port uint
general crd Webhook server port (default 30443)
-csp_env string
-csp_pause_interval uint
(default 240)
-en_icmp_policy
Enable icmp policy learning
-fed_port uint
Fed REST API server port (default 11443)
-grpc_port uint
Cluster GRPC port
-insecure_skip_telemetry_tls_verification
Do not verify Telemetry server's certificate chain and host name
-j string
Cluster join address
-key_rotation_period string
-lan_port uint
Cluster Serf LAN port
-log_level string
Controller log level (default "info")
-max_concurrent_repo_scan_tasks int
Maximum number of concurrent repository scan tasks (default 6)
-max_scanner_tasks int
Maximum number of concurrent tasks a scanner can handle (default 2)
-n string
Predefined internal subnets
-no_def_admin
Do not create default admin user
-no_rm_nsgroups
Not to remove groups when namespace was deleted
-p uint
REST API server port (default 10443)
-pc
Persist configurations
-pwd_valid_unit uint
(default 1440)
-rancher_ep string
Rancher endpoint URL
-rancher_sso
Rancher SSO integration
-repo_scan_long_poll_timeout int
Timeout for long polling repository scan jobs (default 30)
-rpc_port uint
Cluster server RPC port
-scan_job_fail_retry_max int
Maximum retry attempts for failed scan jobs (default 5)
-scan_job_queue_capacity int
Capacity of the scan job queue for pending tasks (default 2048)
-search_registries string
Comma separated list of search registries for shortnames
-stale_scan_job_cleanup_interval_hour int
Interval (in hours) for cleaning up stale scan jobs (default 1)
-telemetry_current_ver string
-telemetry_freq uint
(default 60)
-telemetry_neuvector_ep string
-u string
Container socket URL
-v string
debug level
Options (38)
| Option | Description | Source |
|---|---|---|
-a string | Cluster advertise address | help |
-admctrl_port uint | Admission Webhook server port (default 20443) | help |
-apc int | Enable auto profile collection (default 1) | help |
-b string | Cluster bind address | help |
-cbench string | Custom check control (default "disable") | help |
-check_key_rotation_period string | help | |
-crdvalidatectrl_port uint | general crd Webhook server port (default 30443) | help |
-csp_env string | help | |
-csp_pause_interval uint | (default 240) | help |
-en_icmp_policy | Enable icmp policy learning | help |
-fed_port uint | Fed REST API server port (default 11443) | help |
-grpc_port uint | Cluster GRPC port | help |
-insecure_skip_telemetry_tls_verification | Do not verify Telemetry server's certificate chain and host name | help |
-j string | Cluster join address | help |
-key_rotation_period string | help | |
-lan_port uint | Cluster Serf LAN port | help |
-log_level string | Controller log level (default "info") | help |
-max_concurrent_repo_scan_tasks int | Maximum number of concurrent repository scan tasks (default 6) | help |
-max_scanner_tasks int | Maximum number of concurrent tasks a scanner can handle (default 2) | help |
-n string | Predefined internal subnets | help |
-no_def_admin | Do not create default admin user | help |
-no_rm_nsgroups | Not to remove groups when namespace was deleted | help |
-p uint | REST API server port (default 10443) | help |
-pc | Persist configurations | help |
-pwd_valid_unit uint | (default 1440) | help |
-rancher_ep string | Rancher endpoint URL | help |
-rancher_sso | Rancher SSO integration | help |
-repo_scan_long_poll_timeout int | Timeout for long polling repository scan jobs (default 30) | help |
-rpc_port uint | Cluster server RPC port | help |
-scan_job_fail_retry_max int | Maximum retry attempts for failed scan jobs (default 5) | help |
-scan_job_queue_capacity int | Capacity of the scan job queue for pending tasks (default 2048) | help |
-search_registries string | Comma separated list of search registries for shortnames | help |
-stale_scan_job_cleanup_interval_hour int | Interval (in hours) for cleaning up stale scan jobs (default 1) | help |
-telemetry_current_ver string | help | |
-telemetry_freq uint | (default 60) | help |
-telemetry_neuvector_ep string | help | |
-u string | Container socket URL | help |
-v string | debug level | help |