OS Manuals

/usr/local/bin/controller

NeuVector Controller

From neuvector-controller-fips 5.6.4-r2 (enterprise-packages), captured 2026-11-09 by running controller --help (exit 0). permalink

2026-11-09T14:59:00.066|INFO|CTL|main.main: START - version=v5.6.4
Usage of /usr/local/bin/controller:
  -a string
    	Cluster advertise address
  -admctrl_port uint
    	Admission Webhook server port (default 20443)
  -apc int
    	Enable auto profile collection (default 1)
  -b string
    	Cluster bind address
  -cbench string
    	Custom check control (default "disable")
  -check_key_rotation_period string

  -crdvalidatectrl_port uint
    	general crd Webhook server port (default 30443)
  -csp_env string

  -csp_pause_interval uint
    	 (default 240)
  -en_icmp_policy
    	Enable icmp policy learning
  -fed_port uint
    	Fed REST API server port (default 11443)
  -grpc_port uint
    	Cluster GRPC port
  -insecure_skip_telemetry_tls_verification
    	Do not verify Telemetry server's certificate chain and host name
  -j string
    	Cluster join address
  -key_rotation_period string

  -lan_port uint
    	Cluster Serf LAN port
  -log_level string
    	Controller log level (default "info")
  -max_concurrent_repo_scan_tasks int
    	Maximum number of concurrent repository scan tasks (default 6)
  -max_scanner_tasks int
    	Maximum number of concurrent tasks a scanner can handle (default 2)
  -n string
    	Predefined internal subnets
  -no_def_admin
    	Do not create default admin user
  -no_rm_nsgroups
    	Not to remove groups when namespace was deleted
  -p uint
    	REST API server port (default 10443)
  -pc
    	Persist configurations
  -pwd_valid_unit uint
    	 (default 1440)
  -rancher_ep string
    	Rancher endpoint URL
  -rancher_sso
    	Rancher SSO integration
  -repo_scan_long_poll_timeout int
    	Timeout for long polling repository scan jobs (default 30)
  -rpc_port uint
    	Cluster server RPC port
  -scan_job_fail_retry_max int
    	Maximum retry attempts for failed scan jobs (default 5)
  -scan_job_queue_capacity int
    	Capacity of the scan job queue for pending tasks (default 2048)
  -search_registries string
    	Comma separated list of search registries for shortnames
  -stale_scan_job_cleanup_interval_hour int
    	Interval (in hours) for cleaning up stale scan jobs (default 1)
  -telemetry_current_ver string

  -telemetry_freq uint
    	 (default 60)
  -telemetry_neuvector_ep string

  -u string
    	Container socket URL
  -v string
    	debug level
Options (38)
OptionDescriptionSource
-a stringCluster advertise addresshelp
-admctrl_port uintAdmission Webhook server port (default 20443)help
-apc intEnable auto profile collection (default 1)help
-b stringCluster bind addresshelp
-cbench stringCustom check control (default "disable")help
-check_key_rotation_period stringhelp
-crdvalidatectrl_port uintgeneral crd Webhook server port (default 30443)help
-csp_env stringhelp
-csp_pause_interval uint(default 240)help
-en_icmp_policyEnable icmp policy learninghelp
-fed_port uintFed REST API server port (default 11443)help
-grpc_port uintCluster GRPC porthelp
-insecure_skip_telemetry_tls_verificationDo not verify Telemetry server's certificate chain and host namehelp
-j stringCluster join addresshelp
-key_rotation_period stringhelp
-lan_port uintCluster Serf LAN porthelp
-log_level stringController log level (default "info")help
-max_concurrent_repo_scan_tasks intMaximum number of concurrent repository scan tasks (default 6)help
-max_scanner_tasks intMaximum number of concurrent tasks a scanner can handle (default 2)help
-n stringPredefined internal subnetshelp
-no_def_adminDo not create default admin userhelp
-no_rm_nsgroupsNot to remove groups when namespace was deletedhelp
-p uintREST API server port (default 10443)help
-pcPersist configurationshelp
-pwd_valid_unit uint(default 1440)help
-rancher_ep stringRancher endpoint URLhelp
-rancher_ssoRancher SSO integrationhelp
-repo_scan_long_poll_timeout intTimeout for long polling repository scan jobs (default 30)help
-rpc_port uintCluster server RPC porthelp
-scan_job_fail_retry_max intMaximum retry attempts for failed scan jobs (default 5)help
-scan_job_queue_capacity intCapacity of the scan job queue for pending tasks (default 2048)help
-search_registries stringComma separated list of search registries for shortnameshelp
-stale_scan_job_cleanup_interval_hour intInterval (in hours) for cleaning up stale scan jobs (default 1)help
-telemetry_current_ver stringhelp
-telemetry_freq uint(default 60)help
-telemetry_neuvector_ep stringhelp
-u stringContainer socket URLhelp
-v stringdebug levelhelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.