OS Manuals

/usr/bin/cluster-api-gcp-controller

The GCP provider implementation for Cluster API

From cluster-api-gcp-controller 1.12.0-r2 (os), captured 2026-11-05 by running cluster-api-gcp-controller --help (exit 0). permalink

Also provided by 2 other package versions
Usage of /usr/bin/cluster-api-gcp-controller:
      --add_dir_header                         If true, adds the file directory to the header of the log messages
      --alsologtostderr                        log to standard error as well as files (no effect when -logtostderr=true)
      --alsologtostderrthreshold severity      logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)
      --diagnostics-address string             The address the diagnostics endpoint binds to. Per default metrics are served via https and withauthentication/authorization. To serve via http and without authentication/authorization set --insecure-diagnostics. If --insecure-diagnostics is not set the diagnostics endpoint also serves pprof endpoints and an endpoint to change the log level. (default ":8443")
      --feature-gates mapStringBool            A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
                                               AllAlpha=true|false (ALPHA - default=false)
                                               AllBeta=true|false (BETA - default=false)
                                               ClusterTopology=true|false (ALPHA - default=false)
                                               GKE=true|false (ALPHA - default=false)
                                               InPlaceUpdates=true|false (ALPHA - default=false)
                                               KubeadmBootstrapFormatIgnition=true|false (ALPHA - default=false)
                                               MachinePool=true|false (BETA - default=true)
                                               MachineSetPreflightChecks=true|false (BETA - default=true)
                                               MachineTaintPropagation=true|false (ALPHA - default=false)
                                               MachineWaitForVolumeDetachConsiderVolumeAttachments=true|false (BETA - default=true)
                                               PriorityQueue=true|false (ALPHA - default=false)
                                               ReconcilerRateLimiting=true|false (ALPHA - default=false)
                                               RuntimeSDK=true|false (ALPHA - default=false)
      --gcpcluster-concurrency int             Number of GCPClusters to process simultaneously (default 10)
      --gcpmachine-concurrency int             Number of GCPMachines to process simultaneously (default 10)
      --gkeconfig-concurrency int              Number of GKEConfigs to process simultaneously (default 10)
      --health-addr string                     The address the health endpoint binds to. (default ":9440")
      --insecure-diagnostics                   Enable insecure diagnostics serving. For more details see the description of --diagnostics-address.
      --kubeconfig string                      Paths to a kubeconfig. Only required if out-of-cluster.
      --leader-elect                           Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --leader-elect-lease-duration duration   Interval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)
      --leader-elect-renew-deadline duration   Duration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)
      --leader-elect-retry-period duration     Duration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)
      --leader-election-namespace string       Namespace that the controller performs leader election in. If unspecified, the controller will discover which namespace it is running in.
      --legacy_stderr_threshold_behavior       If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). If false, stderrthreshold is honored even when logtostderr=true (default true)
      --log_backtrace_at traceLocation         when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                         If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                        If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint                 Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                            log to standard error instead of files (default true)
      --namespace string                       Namespace that the controller watches to reconcile cluster-api objects. If unspecified, the controller watches for cluster-api objects across all namespaces.
      --one_output                             If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --profiler-address string                Bind address to expose the pprof profiler (e.g. localhost:6060)
      --reconcile-timeout duration             The maximum duration a reconcile loop can run (e.g. 90m) (default 1h30m0s)
      --skip_headers                           If true, avoid header prefixes in the log messages
      --skip_log_headers                       If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity               logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)
      --sync-period duration                   The minimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)
      --tls-cipher-suites strings              Comma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true). If omitted, the default Go cipher suites will be used.
                                               Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.
                                               Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
      --tls-min-version string                 The minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).
                                               Possible values are VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. (default "VersionTLS12")
  -v, --v Level                                number for the log level verbosity
      --vmodule moduleSpec                     comma-separated list of pattern=N settings for file-filtered logging
      --watch-filter string                    Label value that the controller watches to reconcile cluster-api objects. Label key is always cluster.x-k8s.io/watch-filter. If unspecified, the controller watches for all cluster-api objects.
      --webhook-cert-dir string                Webhook Server Certificate Directory, is the directory that contains the server key and certificate (default "/tmp/k8s-webhook-server/serving-certs")
      --webhook-port int                       Webhook Server port (default 9443)
Options (37)
OptionDescriptionSource
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
--alsologtostderrthreshold severitylogs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)help
--diagnostics-address stringThe address the diagnostics endpoint binds to.help
--feature-gates mapStringBoolA set of key=value pairs that describe feature gates for alpha/experimental features.help
--gcpcluster-concurrency intNumber of GCPClusters to process simultaneously (default 10)help
--gcpmachine-concurrency intNumber of GCPMachines to process simultaneously (default 10)help
--gkeconfig-concurrency intNumber of GKEConfigs to process simultaneously (default 10)help
--health-addr stringThe address the health endpoint binds to.help
--insecure-diagnosticsEnable insecure diagnostics serving.help
--kubeconfig stringPaths to a kubeconfig.help
--leader-electEnable leader election for controller manager.help
--leader-elect-lease-duration durationInterval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)help
--leader-elect-renew-deadline durationDuration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)help
--leader-elect-retry-period durationDuration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)help
--leader-election-namespace stringNamespace that the controller performs leader election in.help
--legacy_stderr_threshold_behaviorIf true, stderrthreshold is ignored when logtostderr=true (legacy behavior).help
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
--log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
--log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
--logtostderrlog to standard error instead of files (default true)help
--namespace stringNamespace that the controller watches to reconcile cluster-api objects.help
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
--profiler-address stringBind address to expose the pprof profiler (e.g. localhost:6060)help
--reconcile-timeout durationThe maximum duration a reconcile loop can run (e.g. 90m) (default 1h30m0s)help
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
--stderrthreshold severitylogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)help
--sync-period durationThe minimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)help
--tls-cipher-suites stringsComma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
--tls-min-version stringThe minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
-v, --v Levelnumber for the log level verbosityhelp
--vmodule moduleSpeccomma-separated list of pattern=N settings for file-filtered logginghelp
--watch-filter stringLabel value that the controller watches to reconcile cluster-api objects.help
--webhook-cert-dir stringWebhook Server Certificate Directory, is the directory that contains the server key and certificate (default "/tmp/k8s-webhook-server/serving-certs")help
--webhook-port intWebhook Server port (default 9443)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.