OS Manuals

/usr/bin/teleport-operator

Kubernetes operator for managing Teleport resources

From teleport-18-operator 18.11.1-r12 (enterprise-packages), captured 2026-11-08 by running teleport-operator --help (exit 0). permalink

Usage of /usr/bin/teleport-operator:
  -auth-server string
    	Address of the Teleport Auth Server or Proxy Server (default "127.0.0.1:3025")
  -ca-pin value
    	CA pin to validate the Teleport Auth Server; used on first connect.
  -certificate-ttl duration
    	TTL of short-lived machine certificates. (default 1h0m0s)
  -health-probe-bind-address string
    	The address the probe endpoint binds to. (default ":8081")
  -insecure
    	Trust the certificates from the Auth Server or Proxy on first connect without verification. Do not use in production.
  -join-method string
    	Method to use to join the Teleport cluster. (default "kubernetes")
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -leader-election-id string
    	Leader Election Id to use. (default "431e83f4.teleport.dev")
  -log-level string
    	Log level (DEBUG, INFO, WARN, ERROR). (default "INFO")
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -namespace string
    	The namespace containing the Teleport CRs.
  -owner-email string
    	Email of the owner of the Teleport cluster. Required when running in scoped mode.
  -pprof-bind-address string
    	The address the pprof endpoint binds to, leave empty to disable.
  -renewal-interval duration
    	Interval at which short-lived certificates are renewed; must be less than the certificate TTL. (default 30m0s)
  -scope string
    	Configures the operator target scope. When unset, the operator runs unscoped. When set, the operator can only reconcile resources with this exact scope.
  -sync-period duration
    	Operator sync period (format: https://pkg.go.dev/time#ParseDuration) (default 10h0m0s)
  -token string
    	A bot join token or path to file with token value. (default "teleport-operator")
Options (17)
OptionDescriptionSource
-auth-server stringAddress of the Teleport Auth Server or Proxy Server (default "127.0.0.1:3025")help
-ca-pin valueCA pin to validate the Teleport Auth Server;help
-certificate-ttl durationTTL of short-lived machine certificates.help
-health-probe-bind-address stringThe address the probe endpoint binds to.help
-insecureTrust the certificates from the Auth Server or Proxy on first connect without verification.help
-join-method stringMethod to use to join the Teleport cluster.help
-kubeconfig stringPaths to a kubeconfig.help
-leader-election-id stringLeader Election Id to use.help
-log-level stringLog level (DEBUG, INFO, WARN, ERROR).help
-metrics-bind-address stringThe address the metric endpoint binds to.help
-namespace stringThe namespace containing the Teleport CRs.help
-owner-email stringEmail of the owner of the Teleport cluster.help
-pprof-bind-address stringThe address the pprof endpoint binds to, leave empty to disable.help
-renewal-interval durationInterval at which short-lived certificates are renewed;help
-scope stringConfigures the operator target scope.help
-sync-period durationOperator sync period (format: https://pkg.go.dev/time#ParseDuration) (default 10h0m0s)help
-token stringA bot join token or path to file with token value.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.