OS Manuals

/usr/bin/cluster-api-helm-controller

CAAPH uses Helm charts to manage the installation and lifecycle of Cluster API add-ons.

From cluster-api-helm-controller 0.6.4-r5 (os), captured 2026-11-05 by running cluster-api-helm-controller --help (exit 0). permalink

Also provided by 2 other package versions
Usage of /usr/bin/cluster-api-helm-controller:
      --add_dir_header                         If true, adds the file directory to the header of the log messages
      --alsologtostderr                        log to standard error as well as files (no effect when -logtostderr=true)
      --diagnostics-address string             The address the diagnostics endpoint binds to. Per default metrics are served via https and withauthentication/authorization. To serve via http and without authentication/authorization set --insecure-diagnostics. If --insecure-diagnostics is not set the diagnostics endpoint also serves pprof endpoints and an endpoint to change the log level. (default ":8443")
      --feature-gates mapStringBool            A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
                                               AllAlpha=true|false (ALPHA - default=false)
                                               AllBeta=true|false (BETA - default=false)
                                               ClusterTopology=true|false (ALPHA - default=false)
                                               InPlaceUpdates=true|false (ALPHA - default=false)
                                               KubeadmBootstrapFormatIgnition=true|false (ALPHA - default=false)
                                               MachinePool=true|false (BETA - default=true)
                                               MachineSetPreflightChecks=true|false (BETA - default=true)
                                               MachineTaintPropagation=true|false (ALPHA - default=false)
                                               PriorityQueue=true|false (BETA - default=true)
                                               ReconcilerRateLimiting=true|false (BETA - default=true)
                                               RuntimeSDK=true|false (ALPHA - default=false)
      --health-addr string                     Address the health endpoint binds to. (default ":9440")
      --helm-chart-proxy-concurrency int       Number of HelmChartProxies to process concurrently. (default 10)
      --helm-release-proxy-concurrency int     Number of HelmReleaseProxies to process concurrently. (default 10)
      --insecure-diagnostics                   Enable insecure diagnostics serving. For more details see the description of --diagnostics-address.
      --kube-api-burst int                     Maximum number of queries that should be allowed in one burst from the controller client to the Kubernetes API server. (default 30)
      --kube-api-qps float32                   Maximum queries per second from the controller client to the Kubernetes API server. (default 20)
      --kubeconfig string                      Paths to a kubeconfig. Only required if out-of-cluster.
      --leader-elect                           Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --leader-elect-lease-duration duration   Interval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)
      --leader-elect-renew-deadline duration   Duration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)
      --leader-elect-retry-period duration     Duration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)
      --log-flush-frequency duration           Maximum number of seconds between log flushes (default 5s)
      --log-json-info-buffer-size quantity     [Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-json-split-stream                  [Alpha] In JSON format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-info-buffer-size quantity     [Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-split-stream                  [Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log_backtrace_at traceLocation         when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                         If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                        If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint                 Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logging-format string                  Sets the log format. Permitted formats: "json" (gated by LoggingBetaOptions), "text". (default "text")
      --logtostderr                            log to standard error instead of files (default true)
      --namespace string                       Namespace that the controller watches to reconcile cluster-api objects. If unspecified, the controller watches for cluster-api objects across all namespaces.
      --one_output                             If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --profiler-address string                Bind address to expose the pprof profiler (e.g. localhost:6060)
      --skip_headers                           If true, avoid header prefixes in the log messages
      --skip_log_headers                       If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity               logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
      --sync-period duration                   Minimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)
      --tls-cipher-suites strings              Comma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true). If omitted, the default Go cipher suites will be used.
                                               Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.
                                               Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
      --tls-min-version string                 The minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).
                                               Possible values are VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. (default "VersionTLS12")
  -v, --v Level                                number for the log level verbosity
      --vmodule pattern=N,...                  comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)
      --watch-filter string                    Label value that the controller watches to reconcile cluster-api objects. The label key is always cluster.x-k8s.io/watch-filter. If unspecified, the controller watches for all cluster-api objects.
      --webhook-cert-dir string                Webhook cert dir, only used when webhook-port is specified. (default "/tmp/k8s-webhook-server/serving-certs/")
      --webhook-port int                       Webhook Server port (default 9443)
Options (40)
OptionDescriptionSource
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
--diagnostics-address stringThe address the diagnostics endpoint binds to.help
--feature-gates mapStringBoolA set of key=value pairs that describe feature gates for alpha/experimental features.help
--health-addr stringAddress the health endpoint binds to.help
--helm-chart-proxy-concurrency intNumber of HelmChartProxies to process concurrently.help
--helm-release-proxy-concurrency intNumber of HelmReleaseProxies to process concurrently.help
--insecure-diagnosticsEnable insecure diagnostics serving.help
--kube-api-burst intMaximum number of queries that should be allowed in one burst from the controller client to the Kubernetes API server.help
--kube-api-qps float32Maximum queries per second from the controller client to the Kubernetes API server.help
--kubeconfig stringPaths to a kubeconfig.help
--leader-electEnable leader election for controller manager.help
--leader-elect-lease-duration durationInterval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)help
--leader-elect-renew-deadline durationDuration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)help
--leader-elect-retry-period durationDuration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)help
--log-flush-frequency durationMaximum number of seconds between log flushes (default 5s)help
--log-json-info-buffer-size quantity[Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance.help
--log-json-split-stream[Alpha] In JSON format, write error messages to stderr and info messages to stdout.help
--log-text-info-buffer-size quantity[Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance.help
--log-text-split-stream[Alpha] In text format, write error messages to stderr and info messages to stdout.help
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
--log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
--log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
--logging-format stringSets the log format.help
--logtostderrlog to standard error instead of files (default true)help
--namespace stringNamespace that the controller watches to reconcile cluster-api objects.help
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
--profiler-address stringBind address to expose the pprof profiler (e.g. localhost:6060)help
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
--stderrthreshold severitylogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)help
--sync-period durationMinimum interval at which watched resources are reconciled (e.g. 15m) (default 10m0s)help
--tls-cipher-suites stringsComma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
--tls-min-version stringThe minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).help
-v, --v Levelnumber for the log level verbosityhelp
--vmodule pattern=Ncomma-separated list of pattern=N settings for file-filtered logging (only works for text log format)help
--watch-filter stringLabel value that the controller watches to reconcile cluster-api objects.help
--webhook-cert-dir stringWebhook cert dir, only used when webhook-port is specified.help
--webhook-port intWebhook Server port (default 9443)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.