2026-11-10T14:06:05.097|INFO|CTL|main.main: START - version=v5.6.4
Usage of /usr/local/bin/controller:
  -a string
    	Cluster advertise address
  -admctrl_port uint
    	Admission Webhook server port (default 20443)
  -apc int
    	Enable auto profile collection (default 1)
  -b string
    	Cluster bind address
  -cbench string
    	Custom check control (default "disable")
  -check_key_rotation_period string

  -crdvalidatectrl_port uint
    	general crd Webhook server port (default 30443)
  -csp_env string

  -csp_pause_interval uint
    	 (default 240)
  -en_icmp_policy
    	Enable icmp policy learning
  -fed_port uint
    	Fed REST API server port (default 11443)
  -grpc_port uint
    	Cluster GRPC port
  -insecure_skip_telemetry_tls_verification
    	Do not verify Telemetry server's certificate chain and host name
  -j string
    	Cluster join address
  -key_rotation_period string

  -lan_port uint
    	Cluster Serf LAN port
  -log_level string
    	Controller log level (default "info")
  -max_concurrent_repo_scan_tasks int
    	Maximum number of concurrent repository scan tasks (default 6)
  -max_scanner_tasks int
    	Maximum number of concurrent tasks a scanner can handle (default 2)
  -n string
    	Predefined internal subnets
  -no_def_admin
    	Do not create default admin user
  -no_rm_nsgroups
    	Not to remove groups when namespace was deleted
  -p uint
    	REST API server port (default 10443)
  -pc
    	Persist configurations
  -pwd_valid_unit uint
    	 (default 1440)
  -rancher_ep string
    	Rancher endpoint URL
  -rancher_sso
    	Rancher SSO integration
  -repo_scan_long_poll_timeout int
    	Timeout for long polling repository scan jobs (default 30)
  -rpc_port uint
    	Cluster server RPC port
  -scan_job_fail_retry_max int
    	Maximum retry attempts for failed scan jobs (default 5)
  -scan_job_queue_capacity int
    	Capacity of the scan job queue for pending tasks (default 2048)
  -search_registries string
    	Comma separated list of search registries for shortnames
  -stale_scan_job_cleanup_interval_hour int
    	Interval (in hours) for cleaning up stale scan jobs (default 1)
  -telemetry_current_ver string

  -telemetry_freq uint
    	 (default 60)
  -telemetry_neuvector_ep string

  -u string
    	Container socket URL
  -v string
    	debug level