OS Manuals

/usr/bin/starboard-exporter

Prometheus exporter for Trivy Operator and Kubescape Kubernetes security scan results

From starboard-exporter-fips 1.2.44-r0 (enterprise-packages), captured 2026-11-09 by running starboard-exporter --help (exit 0). permalink

Usage of /usr/bin/starboard-exporter:
  -auto-mem-limit-enabled
    	Enable automatic GOMEMLIMIT configuration based on container or system memory. (default true)
  -auto-mem-limit-ratio float
    	The ratio of reserved GOMEMLIMIT memory to the detected maximum container or system memory. Must be greater than 0 and less than or equal to 1. (default 0.9)
  -config-audits-enabled
    	Enable metrics for ConfigAuditReport resources. (default true)
  -health-probe-bind-address string
    	The address the probe endpoint binds to. (default ":8081")
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -kubescape-vulnerability-scans-enabled
    	Enable metrics for KubescapeVulnerabilityReport resources. (default true)
  -leader-elect
    	Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
  -max-jitter-percent int
    	Spreads out re-queue interval of reports by +/- this amount to spread load. (default 10)
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -pod-ip string
    	The IP address of the current Pod/instance used when sharding reports.
  -service-name string
    	When sharding reports, the service endpoints for this service will be used to find peers. (default "starboard-exporter")
  -service-namespace string
    	When sharding reports, the service endpoints in this namespace will be used to find peers.
  -target-labels value
    	A comma-separated list of labels to be exposed per-vulnerability. Alias 'all' is supported.
  -trivy-vulnerability-scans-enabled
    	Enable metrics for Trivy VulnerabilityReport resources. (default true)
  -zap-devel
    	Development Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode defaults(encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error)
  -zap-encoder value
    	Zap log encoding (one of 'json' or 'console')
  -zap-log-level value
    	Zap Level to configure the verbosity of logging. Can be one of 'debug', 'info', 'error', 'panic' or any integer value > 0 which corresponds to custom debug levels of increasing verbosity
  -zap-stacktrace-level value
    	Zap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').
  -zap-time-encoding value
    	Zap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano'). Defaults to 'epoch'.
Options (19)
OptionDescriptionSource
-auto-mem-limit-enabledEnable automatic GOMEMLIMIT configuration based on container or system memory.help
-auto-mem-limit-ratio floatThe ratio of reserved GOMEMLIMIT memory to the detected maximum container or system memory.help
-config-audits-enabledEnable metrics for ConfigAuditReport resources.help
-health-probe-bind-address stringThe address the probe endpoint binds to.help
-kubeconfig stringPaths to a kubeconfig.help
-kubescape-vulnerability-scans-enabledEnable metrics for KubescapeVulnerabilityReport resources.help
-leader-electEnable leader election for controller manager.help
-max-jitter-percent intSpreads out re-queue interval of reports by +/- this amount to spread load.help
-metrics-bind-address stringThe address the metric endpoint binds to.help
-pod-ip stringThe IP address of the current Pod/instance used when sharding reports.help
-service-name stringWhen sharding reports, the service endpoints for this service will be used to find peers.help
-service-namespace stringWhen sharding reports, the service endpoints in this namespace will be used to find peers.help
-target-labels valueA comma-separated list of labels to be exposed per-vulnerability.help
-trivy-vulnerability-scans-enabledEnable metrics for Trivy VulnerabilityReport resources.help
-zap-develDevelopment Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn).help
-zap-encoder valueZap log encoding (one of 'json' or 'console')help
-zap-log-level valueZap Level to configure the verbosity of logging.help
-zap-stacktrace-level valueZap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').help
-zap-time-encoding valueZap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano').help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.