OS Manuals

/usr/bin/app

Kubernetes operator for Victoria Metrics

From victoriametrics-operator 0.75.2-r1 (enterprise-packages), captured 2026-11-08 by running app --help (exit 0). permalink

2026/11/08 04:59:07 INFO: metrics: disable exposing PSI metrics because of failed init: open /sys/fs/cgroup/cpu.pressure: no such file or directory
Usage of /usr/bin/app:
  -client.burst int
    	defines K8s client burst (default 100)
  -client.qps int
    	defines K8s client QPS. The value should be increased for the cluster with large number of objects > 10_000. (default 50)
  -controller.cacheSyncTimeout duration
    	controls timeout for caches to be synced. (default 3m0s)
  -controller.disableCRDOwnership
    	disables CRD ownership add to cluster wide objects, must be disabled for clusters, lower than v1.16.0
  -controller.disableCacheFor string
    	disables client for cache for API resources. Supported objects - namespace,pod,service,secret,configmap,deployment,statefulset (default "configmap,secret")
  -controller.disableReconcileFor string
    	disables reconcile controllers for given list of comma separated CRD names. For example - VMCluster,VMSingle,VMAuth.Note, child controllers still require parent object CRDs.
  -controller.maxConcurrentReconciles int
    	Configures number of concurrent reconciles. It should improve performance for clusters with many objects. (default 15)
  -controller.prometheusCRD.resyncPeriod duration
    	Configures resync period for prometheus CRD converter. Disabled by default
  -controller.statusLastUpdateTimeTTL duration
    	Configures TTL for LastUpdateTime status.conditions fields. It's used to detect stale parent objects on child objects. Like VMAlert->VMRule .status.Conditions.Type (default 1h0m0s)
  -default.kubernetesVersion.major uint
    	Major version of kubernetes server, if operator cannot parse actual kubernetes response (default 1)
  -default.kubernetesVersion.minor uint
    	Minor version of kubernetes server, if operator cannot parse actual kubernetes response (default 21)
  -disableSecretKeySpaceTrim
    	disables trim of space at Secret/Configmap value content. It's a common mistake to put new line to the base64 encoded secret value.
  -dry-run
    	dry run mode for the operator. If enabled, each k8s client mutating call should be logged as debug instance, but not called.
  -health-probe-bind-address string
    	The address the probes (health, ready) binds to. (default ":8081")
  -leader-elect
    	Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
  -leader-elect-id string
    	Defines the name of the resource that leader election will use for holding the leader lock. (default "57410f0d.victoriametrics.com")
  -leader-elect-lease-duration duration
    	Defines the duration that non-leader candidates will wait to force acquire leadership. This is measured against time of last observed ack. (default 15s)
  -leader-elect-namespace string
    	Defines optional namespace name in which the leader election resource will be created. By default, uses in-cluster namespace name.
  -leader-elect-renew-deadline duration
    	Defines the duration that the acting controlplane will retry refreshing leadership lock before giving up. (default 10s)
  -loggerJSONFields string
    	Allows renaming fields in JSON formatted logsExample: "ts:timestamp,msg:message" renames "ts" to "timestamp" and "msg" to "message".Supported fields: ts, level, caller, msg
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -mtls.CAName string
    	Optional name of TLS Root CA for verifying client certificates at the corresponding -metrics-bind-address when -mtls.enable is enabled. By default the host system TLS Root CA is used for client certificate verification.  (default "clietCA.crt")
  -mtls.enable
    	Whether to require valid client certificate for https requests to the corresponding -metrics-bind-address. This flag works only if -tls.enable flag is set.
  -pprof-addr string
    	The address for pprof/debug API. Empty value disables server (default ":8435")
  -printDefaults
    	print all variables with their default values and exit
  -printFormat string
    	output format for --printDefaults. Can be table, json, yaml or list (default "table")
  -tls.certDir string
    	root directory for metrics webserver cert, key and mTLS CA. (default "/tmp/k8s-metrics-server/serving-certs")
  -tls.certName string
    	name of metric server Tls certificate inside tls.certDir. Default -  (default "tls.crt")
  -tls.enable
    	enables secure tls (https) for metrics webserver.
  -tls.keyName string
    	name of metric server Tls key inside tls.certDir. Default - tls.key (default "tls.key")
  -version
    	Show operator version
  -webhook.certDir string
    	root directory for webhook cert and key (default "/tmp/k8s-webhook-server/serving-certs/")
  -webhook.certName string
    	name of webhook server Tls certificate inside tls.certDir (default "tls.crt")
  -webhook.enable
    	adds webhook server, you must mount cert and key or use cert-manager
  -webhook.keyName string
    	name of webhook server Tls key inside tls.certDir (default "tls.key")
  -webhook.port int
    	port to start webhook server on (default 9443)
  -zap-devel
    	Development Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode defaults(encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error)
  -zap-encoder value
    	Zap log encoding (one of 'json' or 'console')
  -zap-log-level value
    	Zap Level to configure the verbosity of logging. Can be one of 'debug', 'info', 'error', 'panic' or any integer value > 0 which corresponds to custom debug levels of increasing verbosity
    	Note: warn is missing by design due to warn level not being supported by controller-runtime
    	See: https://dave.cheney.net/2015/11/05/lets-talk-about-logging and https://github.com/kubernetes-sigs/controller-runtime/issues/2002 for more information.
  -zap-stacktrace-level value
    	Zap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').
  -zap-time-encoding value
    	Zap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano'). Defaults to 'epoch'.
Options (41)
OptionDescriptionSource
-client.burst intdefines K8s client burst (default 100)help
-client.qps intdefines K8s client QPS.help
-controller.cacheSyncTimeout durationcontrols timeout for caches to be synced.help
-controller.disableCRDOwnershipdisables CRD ownership add to cluster wide objects, must be disabled for clusters, lower than v1.16.0help
-controller.disableCacheFor stringdisables client for cache for API resources.help
-controller.disableReconcileFor stringdisables reconcile controllers for given list of comma separated CRD names.help
-controller.maxConcurrentReconciles intConfigures number of concurrent reconciles.help
-controller.prometheusCRD.resyncPeriod durationConfigures resync period for prometheus CRD converter.help
-controller.statusLastUpdateTimeTTL durationConfigures TTL for LastUpdateTime status.conditions fields.help
-default.kubernetesVersion.major uintMajor version of kubernetes server, if operator cannot parse actual kubernetes response (default 1)help
-default.kubernetesVersion.minor uintMinor version of kubernetes server, if operator cannot parse actual kubernetes response (default 21)help
-disableSecretKeySpaceTrimdisables trim of space at Secret/Configmap value content.help
-dry-rundry run mode for the operator.help
-health-probe-bind-address stringThe address the probes (health, ready) binds to.help
-leader-electEnable leader election for controller manager.help
-leader-elect-id stringDefines the name of the resource that leader election will use for holding the leader lock.help
-leader-elect-lease-duration durationDefines the duration that non-leader candidates will wait to force acquire leadership.help
-leader-elect-namespace stringDefines optional namespace name in which the leader election resource will be created.help
-leader-elect-renew-deadline durationDefines the duration that the acting controlplane will retry refreshing leadership lock before giving up.help
-loggerJSONFields stringAllows renaming fields in JSON formatted logsExample: "ts:timestamp,msg:message" renames "ts" to "timestamp" and "msg" to "message".Supported fields: ts, level, caller, msghelp
-metrics-bind-address stringThe address the metric endpoint binds to.help
-mtls.CAName stringOptional name of TLS Root CA for verifying client certificates at the corresponding -metrics-bind-address when -mtls.enable is enabled.help
-mtls.enableWhether to require valid client certificate for https requests to the corresponding -metrics-bind-address.help
-pprof-addr stringThe address for pprof/debug API.help
-printDefaultsprint all variables with their default values and exithelp
-printFormat stringoutput format for --printDefaults.help
-tls.certDir stringroot directory for metrics webserver cert, key and mTLS CA.help
-tls.certName stringname of metric server Tls certificate inside tls.certDir.help
-tls.enableenables secure tls (https) for metrics webserver.help
-tls.keyName stringname of metric server Tls key inside tls.certDir.help
-versionShow operator versionhelp
-webhook.certDir stringroot directory for webhook cert and key (default "/tmp/k8s-webhook-server/serving-certs/")help
-webhook.certName stringname of webhook server Tls certificate inside tls.certDir (default "tls.crt")help
-webhook.enableadds webhook server, you must mount cert and key or use cert-managerhelp
-webhook.keyName stringname of webhook server Tls key inside tls.certDir (default "tls.key")help
-webhook.port intport to start webhook server on (default 9443)help
-zap-develDevelopment Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn).help
-zap-encoder valueZap log encoding (one of 'json' or 'console')help
-zap-log-level valueZap Level to configure the verbosity of logging.help
-zap-stacktrace-level valueZap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').help
-zap-time-encoding valueZap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano').help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.