Kubernetes utility for exposing used image versions compared to the latest version, as metrics. Usage: version-checker [flags] App flags: --cache-sync-period duration The duration in which all resources should be updated. (default 5h0m0s) --graceful-shutdown-timeout duration Time that the manager should wait for all controller to shutdown. (default 10s) -c, --image-cache-timeout duration The time for an image version in the cache to be considered fresh. Images will be rechecked after this interval. (default 30m0s) --kube-channel string The Kubernetes channel to check against for cluster updates. (default "stable") --kube-interval duration The time in which kubernetes channels updates are checked. (default 5h0m0s) -v, --log-level string Log level (debug, info, warn, error, fatal, panic). (default "info") -m, --metrics-serving-address string Address to serve metrics on at the /metrics path. (default "0.0.0.0:8080") --pprof-serving-address string Address to serve pprof on for profiling. -r, --requeue-duration duration The time a pod will be re-checked for new versions/tags (default 1h0m0s) -a, --test-all-containers If enabled, all containers will be tested, unless they have the annotation "enable.version-checker.io/${my-container}=false". Auth flags: --acr-jwks-uri string JWKS URI to verify the JWT access token received. If left blank, JWT token will not be verified. (VERSION_CHECKER_ACR_JWKS_URI) --acr-password string Password to authenticate with azure container registry (VERSION_CHECKER_ACR_PASSWORD). --acr-refresh-token string Refresh token to authenticate with azure container registry. Cannot be used with username/password (VERSION_CHECKER_ACR_REFRESH_TOKEN). --acr-username string Username to authenticate with azure container registry (VERSION_CHECKER_ACR_USERNAME). --docker-password string Password to authenticate with docker registry (VERSION_CHECKER_DOCKER_PASSWORD). --docker-token string Token to authenticate with docker registry. Cannot be used with username/password (VERSION_CHECKER_DOCKER_TOKEN). --docker-username string Username to authenticate with docker registry (VERSION_CHECKER_DOCKER_USERNAME). --ecr-access-key-id string ECR access key ID for read access to private registries (VERSION_CHECKER_ECR_ACCESS_KEY_ID). --ecr-iam-role-arn string IAM role ARN for read access to private registries, can not be used with access-key/secret-key/session-token (VERSION_CHECKER_ECR_IAM_ROLE_ARN). --ecr-secret-access-key string ECR secret access key for read access to private registries (VERSION_CHECKER_ECR_SECRET_ACCESS_KEY). --ecr-session-token string ECR session token for read access to private registries (VERSION_CHECKER_ECR_SESSION_TOKEN). --gchr-hostname string Override hostname for Github Enterprise instances (VERSION_CHECKER_GHCR_HOSTNAME). --gchr-token string Personal Access token for read access to GHCR releases (VERSION_CHECKER_GHCR_TOKEN). --gcr-token string Access token for read access to private GCR registries (VERSION_CHECKER_GCR_TOKEN). --quay-token string Access token for read access to private Quay registries (VERSION_CHECKER_QUAY_TOKEN). --selfhosted-insecure Enable/Disable SSL Certificate Validation. WARNING: THIS IS NOT RECOMMENDED AND IS INTENDED FOR DEBUGGING (VERSION_CHECKER_SELFHOSTED_INSECURE) --selfhosted-password string Password is authenticate with a selfhosted registry (VERSION_CHECKER_SELFHOSTED_PASSWORD). --selfhosted-registry-ca-path string Absolute path to a PEM encoded x509 certificate chain. (VERSION_CHECKER_SELFHOSTED_CA_PATH) --selfhosted-registry-host string Full host of the selfhosted registry. Include http[s] scheme (VERSION_CHECKER_SELFHOSTED_HOST) --selfhosted-token string Token to authenticate to a selfhosted registry. Cannot be used with username/password (VERSION_CHECKER_SELFHOSTED_TOKEN). --selfhosted-token-path string Override the default selfhosted registry's token auth path. (VERSION_CHECKER_SELFHOSTED_TOKEN_PATH). --selfhosted-username string Username is authenticate with a selfhosted registry (VERSION_CHECKER_SELFHOSTED_USERNAME). Kubernetes flags: --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --as-user-extra stringArray User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key. --cache-dir string Default cache directory (default "/tmp/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use