OS Manuals

/usr/bin/teleport-operator

Kubernetes operator for managing Teleport resources

From teleport-17-operator 17.7.29-r13 (enterprise-packages), captured 2026-11-08 by running teleport-operator --help (exit 0). permalink

Usage of /usr/bin/teleport-operator:
  -auth-server string
    	Address of the Teleport Auth Server or Proxy Server (default "127.0.0.1:3025")
  -ca-pin value
    	CA pin to validate the Teleport Auth Server; used on first connect.
  -certificate-ttl duration
    	TTL of short-lived machine certificates. (default 1h0m0s)
  -health-probe-bind-address string
    	The address the probe endpoint binds to. (default ":8081")
  -insecure
    	Trust the certificates from the Auth Server or Proxy on first connect without verification. Do not use in production.
  -join-method string
    	Method to use to join the Teleport cluster. (default "kubernetes")
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -leader-election-id string
    	Leader Election Id to use. (default "431e83f4.teleport.dev")
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -namespace string
    	The namespace containing the Teleport CRs.
  -pprof-bind-address string
    	The address the pprof endpoint binds to, leave empty to disable.
  -renewal-interval duration
    	Interval at which short-lived certificates are renewed; must be less than the certificate TTL. (default 30m0s)
  -sync-period duration
    	Operator sync period (format: https://pkg.go.dev/time#ParseDuration) (default 10h0m0s)
  -token string
    	A bot join token or path to file with token value. (default "teleport-operator")
  -zap-devel
    	Development Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode defaults(encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error) (default true)
  -zap-encoder value
    	Zap log encoding (one of 'json' or 'console')
  -zap-log-level value
    	Zap Level to configure the verbosity of logging. Can be one of 'debug', 'info', 'error', 'panic'or any integer value > 0 which corresponds to custom debug levels of increasing verbosity
  -zap-stacktrace-level value
    	Zap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').
  -zap-time-encoding value
    	Zap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano'). Defaults to 'epoch'.
Options (19)
OptionDescriptionSource
-auth-server stringAddress of the Teleport Auth Server or Proxy Server (default "127.0.0.1:3025")help
-ca-pin valueCA pin to validate the Teleport Auth Server;help
-certificate-ttl durationTTL of short-lived machine certificates.help
-health-probe-bind-address stringThe address the probe endpoint binds to.help
-insecureTrust the certificates from the Auth Server or Proxy on first connect without verification.help
-join-method stringMethod to use to join the Teleport cluster.help
-kubeconfig stringPaths to a kubeconfig.help
-leader-election-id stringLeader Election Id to use.help
-metrics-bind-address stringThe address the metric endpoint binds to.help
-namespace stringThe namespace containing the Teleport CRs.help
-pprof-bind-address stringThe address the pprof endpoint binds to, leave empty to disable.help
-renewal-interval durationInterval at which short-lived certificates are renewed;help
-sync-period durationOperator sync period (format: https://pkg.go.dev/time#ParseDuration) (default 10h0m0s)help
-token stringA bot join token or path to file with token value.help
-zap-develDevelopment Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn).help
-zap-encoder valueZap log encoding (one of 'json' or 'console')help
-zap-log-level valueZap Level to configure the verbosity of logging.help
-zap-stacktrace-level valueZap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').help
-zap-time-encoding valueZap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano').help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.