/usr/local/bin/pinniped-concierge

{"level":"info","timestamp":"2026-11-09T15:09:02.335144Z","caller":"go.pinniped.dev/internal/crypto/ptls/profiles.go:117$ptls.init.0","message":"this server was not compiled in legacy boring crypto FIPS-only mode","go version":"go1.27.3","GOFIPS140 enabled":true,"GOFIPS140 version":"v1.0.0","GOFIPS140 enforced (typically for testing only)":false,"SecureProfileMinTLSVersionForNonFIPS (only applies when FIPS is disabled)":"TLS 1.3"}
{"level":"info","timestamp":"2026-11-09T15:09:02.335827Z","caller":"go.pinniped.dev/internal/concierge/server/server.go:331$server.main","message":"Running concierge","user-agent":"pinniped-concierge/v0.0.0 (linux/amd64) kubernetes/$Format","version":{"major":"0","minor":"47","gitVersion":"v0.47.0","gitCommit":"74b326dd2c595e40111f1ae6c987a8963ef1f9a9","gitTreeState":"dirty","buildDate":"2026-07-08T16:38:08Z","goVersion":"go1.27.3","compiler":"gc","platform":"linux/amd64"},"time-since-build":"2974h30m54s"}
pinniped-concierge provides a generic API for mapping an external
credential from somewhere to an internal credential to be used for
authenticating to the Kubernetes API.

Usage:
  pinniped-concierge [flags]

Flags:
  -c, --config string              path to configuration file (default "pinniped.yaml")
      --downward-api-path string   path to Downward API volume mount (default "/etc/podinfo")
  -h, --help                       help for pinniped-concierge