/usr/bin/headlamp-server

Usage of config:
  -allow-kubeconfig-changes
    	Allow Headlamp to make changes to the known kubeconfigs when needed. E.g. to remove a cluster via the UI. May not be recommendable when Headlamp is deployed as a service.
  -base-url string
    	Base URL path. eg. /headlamp
  -cache-enabled
    	K8s cache in backend
  -dev
    	Allow connections from other origins
  -enable-dynamic-clusters
    	Enable dynamic clusters, which stores stateless clusters in the frontend.
  -enable-helm
    	Enable Helm operations
  -html-static-dir string
    	Static HTML directory to serve
  -in-cluster
    	Set when running from a k8s cluster
  -in-cluster-context-name string
    	Name to use for the in-cluster Kubernetes context (default "main")
  -insecure-ssl
    	Accept/Ignore all server SSL certificates
  -kubeconfig string
    	Absolute path to the kubeconfig file
  -listen-addr string
    	Address to listen on; default is empty, which means listening to any address
  -log-level string
    	Set backend log verbosity. Options: debug, info (default), warn, error (default "info")
  -me-email-path string
    	Comma separated JMESPath expressions used to read email from the JWT payload (default "email")
  -me-groups-path string
    	Comma separated JMESPath expressions used to read groups from the JWT payload (default "groups,realm_access.roles")
  -me-user-info-url string
    	URL to fetch additional user info for the /me endpoint. For oauth2proxy /oauth2/userinfo can be used.
  -me-username-path string
    	Comma separated JMESPath expressions used to read username from the JWT payload (default "preferred_username,upn,username,name")
  -metrics-enabled
    	Enable metrics collection
  -no-browser
    	Disable automatically opening the browser when using embedded frontend
  -oidc-ca-file string
    	CA file for OIDC
  -oidc-callback-url string
    	Callback URL for OIDC
  -oidc-client-id string
    	ClientID for OIDC
  -oidc-client-secret string
    	ClientSecret for OIDC
  -oidc-idp-issuer-url string
    	Identity provider issuer URL for OIDC
  -oidc-scopes string
    	A comma separated list of scopes needed from the OIDC provider (default "profile,email")
  -oidc-skip-tls-verify
    	Skip TLS verification for OIDC
  -oidc-use-access-token
    	Setup oidc to pass through the access_token instead of the default id_token
  -oidc-use-cookie
    	Enable OIDC cookie usage even when not running in-cluster
  -oidc-use-pkce
    	Use PKCE (Proof Key for Code Exchange) for enhanced security in OIDC flow
  -oidc-validator-client-id string
    	Override ClientID for OIDC during validation
  -oidc-validator-idp-issuer-url string
    	Override Identity provider issuer URL for OIDC during validation
  -otlp-endpoint string
    	OTLP collector endpoint (default "localhost:4317")
  -plugins-dir string
    	Specify the plugins directory to build the backend with (default "/tmp/.config/Headlamp/plugins")
  -port uint
    	Port to listen from (default 4466)
  -proxy-urls string
    	Allow proxy requests to specified URLs
  -sampling-rate float
    	Sampling rate for traces (default 1)
  -service-name string
    	Service name for telemetry (default "headlamp")
  -service-version string
    	Service version for telemetry (default "0.30.0")
  -session-ttl int
    	The time in seconds for the session to be valid(Default: 86400/24h, Min: 1 , Max: 31536000/1yr ) (default 86400)
  -skipped-kube-contexts string
    	Context name which should be ignored in kubeconfig file
  -stdout-trace-enabled
    	Enable tracing output to stdout
  -tls-cert-path string
    	Certificate for serving TLS
  -tls-key-path string
    	Key for serving TLS
  -tracing-enabled
    	Enable distributed tracing
  -use-otlp-http
    	Use HTTP instead of gRPC for OTLP export
  -user-plugins-dir string
    	Specify the user-installed plugins directory (default "/tmp/.config/Headlamp/user-plugins")
  -version
    	Print version information and exit
  -watch-plugins-changes
    	Reloads plugins when there are changes to them or their directory (default true)
{"level":"error","source":"github.com/kubernetes-sigs/headlamp/backend/pkg/config/config.go","line":176,"error":"flag: help requested","time":"2026-11-10T13:50:08Z","message":"parsing flags"}
{"level":"error","source":"github.com/kubernetes-sigs/headlamp/backend/cmd/server.go","line":54,"error":"error parsing flags: flag: help requested","time":"2026-11-10T13:50:08Z","message":"fetching config:%v"}