Usage:
executor [flags]
executor [command]
Available Commands:
completion Generate the autocompletion script for the specified shell
help Help about any command
version Print the version number of kaniko
Flags:
--annotation key-value-arg type Set metadata annotations for the image in key=value format. Set it repeatedly for multiple annotations.
--build-arg multi-arg type This flag allows you to pass in ARG values at build time. Set it repeatedly for multiple values.
--cache Use cache when building image
--cache-copy-layers Caches copy layers
--cache-dir string Specify a local directory to use as a cache. (default "/cache")
--cache-repo string Specify a repository to use as a cache, otherwise one will be inferred from the destination provided; when prefixed with 'oci:' the repository will be written in OCI image layout format at the path provided
--cache-run-layers Caches run layers (default true)
--cache-ttl duration Cache timeout, requires value and unit of duration -> ex: 6h. Defaults to two weeks. (default 336h0m0s)
--cleanup Clean the filesystem at the end
--compressed-caching Compress the cached layers. Decreases build time, but increases memory usage. (default true)
--compression compression Compression algorithm (gzip, zstd)
--compression-level int Compression level (default -1)
-c, --context string Path to the dockerfile build context. (default "/workspace/")
--context-sub-path string Sub path within the given context.
--custom-platform string Specify the build platform if different from the current host
--customPlatform string This flag is deprecated. Please use '--custom-platform'.
-d, --destination multi-arg type Registry the final image should be pushed to. Set it repeatedly for multiple destinations.
--digest-file string Specify a file to save the digest of the built image to.
-f, --dockerfile string Path to the dockerfile to be built. (default "Dockerfile")
--force Force building outside of a container
--force-build-metadata Force add metadata layers to build image
--git gitoptions Branch to clone if build context is a git repository (default branch=,single-branch=false,recurse-submodules=false)
-h, --help help for executor
--ignore-path multi-arg type Ignore these paths when taking a snapshot. Set it repeatedly for multiple paths.
--ignore-var-run Ignore /var/run directory when taking image snapshot. Set it to false to preserve /var/run/ in destination image. (default true)
--image-download-retry int Number of retries for downloading the remote image
--image-fs-extract-retry int Number of retries for image FS extraction
--image-name-tag-with-digest-file string Specify a file to save the image name w/ image tag w/ digest of the built image to.
--image-name-with-digest-file string Specify a file to save the image name w/ digest of the built image to.
--insecure Push to insecure registry using plain HTTP
--insecure-pull Pull from insecure registry using plain HTTP
--insecure-registry multi-arg type Insecure registry using plain HTTP to push and pull. Set it repeatedly for multiple registries.
--kaniko-dir string Path to the kaniko directory, this takes precedence over the KANIKO_DIR environment variable. (default "/kaniko")
--label multi-arg type Set metadata for an image. Set it repeatedly for multiple labels.
--log-format string Log format (text, color, json) (default "color")
--log-timestamp Timestamp in log output
--no-push Do not push the image to the registry
--no-push-cache Do not push the cache layers to the registry
--oci-layout-path string Path to save the OCI image layout of the built image.
--push-ignore-immutable-tag-errors If true, known tag immutability errors are ignored and the push finishes with success.
--push-retry int Number of retries for the push operation
--registry-certificate key-value-arg type Use the provided certificate for TLS communication with the given registry. Expected format is 'my.registry.url=/path/to/the/server/certificate'.
--registry-client-cert key-value-arg type Use the provided client certificate for mutual TLS (mTLS) communication with the given registry. Expected format is 'my.registry.url=/path/to/client/cert,/path/to/client/key'.
--registry-map key-multi-value-arg type Registry map of mirror to use as pull-through cache instead. Expected format is 'orignal.registry=new.registry;other-original.registry=other-remap.registry'
--registry-mirror multi-arg type Registry mirror to use as pull-through cache instead of docker.io. Set it repeatedly for multiple mirrors.
--reproducible Strip timestamps out of the image to make it reproducible
--single-snapshot Take a single snapshot at the end of the build.
--skip-default-registry-fallback If an image is not found on any mirrors (defined with registry-mirror) do not fallback to the default registry. If registry-mirror is not defined, this flag is ignored.
--skip-push-permission-check Skip check of the push permission
--skip-tls-verify Push to insecure registry ignoring TLS verify
--skip-tls-verify-pull Pull from insecure registry ignoring TLS verify
--skip-tls-verify-registry multi-arg type Insecure registry ignoring TLS verify to push and pull. Set it repeatedly for multiple registries.
--skip-unused-stages Build only used stages if defined to true. Otherwise it builds by default all stages, even the unnecessaries ones until it reaches the target stage / end of Dockerfile
--snapshot-mode string Change the file attributes inspected during snapshotting (default "full")
--snapshotMode string This flag is deprecated. Please use '--snapshot-mode'.
--tar-path string Path to save the image in as a tarball instead of pushing
--tarPath string This flag is deprecated. Please use '--tar-path'.
--target string Set the target build stage to build
--use-new-run Use the experimental run implementation for detecting changes without requiring file system snapshots.
-v, --verbosity string Log level (trace, debug, info, warn, error, fatal, panic) (default "info")
Use "executor [command] --help" for more information about a command.
Options (60)
| Option | Description | Source |
|---|---|---|
--annotation key-value-arg | Set metadata annotations for the image in key=value format. | help |
--build-arg multi-arg | This flag allows you to pass in ARG values at build time. | help |
--cache | Use cache when building image | help |
--cache-copy-layers | Caches copy layers | help |
--cache-dir string | Specify a local directory to use as a cache. | help |
--cache-repo string | Specify a repository to use as a cache, otherwise one will be inferred from the destination provided; | help |
--cache-run-layers | Caches run layers (default true) | help |
--cache-ttl duration | Cache timeout, requires value and unit of duration -> ex: 6h. | help |
--cleanup | Clean the filesystem at the end | help |
--compressed-caching | Compress the cached layers. | help |
--compression compression | Compression algorithm (gzip, zstd) | help |
--compression-level int | Compression level (default -1) | help |
-c, --context string | Path to the dockerfile build context. | help |
--context-sub-path string | Sub path within the given context. | help |
--custom-platform string | Specify the build platform if different from the current host | help |
--customPlatform string | This flag is deprecated. | help |
-d, --destination multi-arg | Registry the final image should be pushed to. | help |
--digest-file string | Specify a file to save the digest of the built image to. | help |
-f, --dockerfile string | Path to the dockerfile to be built. | help |
--force | Force building outside of a container | help |
--force-build-metadata | Force add metadata layers to build image | help |
--git gitoptions | Branch to clone if build context is a git repository (default branch=,single-branch=false,recurse-submodules=false) | help |
-h, --help | help for executor | help |
--ignore-path multi-arg | Ignore these paths when taking a snapshot. | help |
--ignore-var-run | Ignore /var/run directory when taking image snapshot. | help |
--image-download-retry int | Number of retries for downloading the remote image | help |
--image-fs-extract-retry int | Number of retries for image FS extraction | help |
--image-name-tag-with-digest-file string | Specify a file to save the image name w/ image tag w/ digest of the built image to. | help |
--image-name-with-digest-file string | Specify a file to save the image name w/ digest of the built image to. | help |
--insecure | Push to insecure registry using plain HTTP | help |
--insecure-pull | Pull from insecure registry using plain HTTP | help |
--insecure-registry multi-arg | Insecure registry using plain HTTP to push and pull. | help |
--kaniko-dir string | Path to the kaniko directory, this takes precedence over the KANIKO_DIR environment variable. | help |
--label multi-arg | Set metadata for an image. | help |
--log-format string | Log format (text, color, json) (default "color") | help |
--log-timestamp | Timestamp in log output | help |
--no-push | Do not push the image to the registry | help |
--no-push-cache | Do not push the cache layers to the registry | help |
--oci-layout-path string | Path to save the OCI image layout of the built image. | help |
--push-ignore-immutable-tag-errors | If true, known tag immutability errors are ignored and the push finishes with success. | help |
--push-retry int | Number of retries for the push operation | help |
--registry-certificate key-value-arg | Use the provided certificate for TLS communication with the given registry. | help |
--registry-client-cert key-value-arg | Use the provided client certificate for mutual TLS (mTLS) communication with the given registry. | help |
--registry-map key-multi-value-arg | Registry map of mirror to use as pull-through cache instead. | help |
--registry-mirror multi-arg | Registry mirror to use as pull-through cache instead of docker.io. | help |
--reproducible | Strip timestamps out of the image to make it reproducible | help |
--single-snapshot | Take a single snapshot at the end of the build. | help |
--skip-default-registry-fallback | If an image is not found on any mirrors (defined with registry-mirror) do not fallback to the default registry. | help |
--skip-push-permission-check | Skip check of the push permission | help |
--skip-tls-verify | Push to insecure registry ignoring TLS verify | help |
--skip-tls-verify-pull | Pull from insecure registry ignoring TLS verify | help |
--skip-tls-verify-registry multi-arg | Insecure registry ignoring TLS verify to push and pull. | help |
--skip-unused-stages | Build only used stages if defined to true. | help |
--snapshot-mode string | Change the file attributes inspected during snapshotting (default "full") | help |
--snapshotMode string | This flag is deprecated. | help |
--tar-path string | Path to save the image in as a tarball instead of pushing | help |
--tarPath string | This flag is deprecated. | help |
--target string | Set the target build stage to build | help |
--use-new-run | Use the experimental run implementation for detecting changes without requiring file system snapshots. | help |
-v, --verbosity string | Log level (trace, debug, info, warn, error, fatal, panic) (default "info") | help |