OS Manuals

/usr/bin/kube-mgmt

Sidecar for managing OPA instances in Kubernetes

From kube-mgmt 11.0.14-r6 (enterprise-packages), captured 2026-11-08 by running kube-mgmt --help (exit 0). permalink

Also provided by 1 other package version
kube-mgmt manages OPA on top of Kubernetes

Usage:
  kube-mgmt [flags]

Flags:
      --analysis-entrypoint string                   set decision to analyze for dynamic data replication configuration (requires --opa-config) (default "main/main")
      --data-label string                            label name for filtering ConfigMaps with data (default "openpolicyagent.org/data")
      --data-value string                            label value for filtering ConfigMaps with data (default "opa")
      --enable-data                                  whether to automatically discover data from labelled ConfigMaps (default true)
      --enable-policies                              whether to automatically discover policies from labelled ConfigMaps (default true)
      --health-endpoint string                       set health check listening endpoint (e.g., localhost:8000)
  -h, --help                                         help for kube-mgmt
      --kubeconfig string                            set path to kubeconfig manually
      --log-level string                             set log level {debug, info, warn} (default "info")
      --namespaces strings                           namespaces to load policies and data from
      --opa-allow-insecure                           allow insecure https connections to OPA
      --opa-auth-token string                        set authentication token for OPA API endpoint
      --opa-auth-token-file string                   set file containing authentication token for OPA API endpoint
      --opa-ca-file string                           set file containing certificate authority for OPA certificate
      --opa-config string                            set file containing OPA configuration to enable data replication based on configured bundles
      --opa-url string                               set URL of OPA API endpoint (default "http://localhost:8181/v1")
      --policy-label string                          label name for filtering ConfigMaps with policies (default "openpolicyagent.org/policy")
      --policy-value string                          label value for filtering ConfigMaps with policies (default "rego")
      --replicate [group/]version/resource           replicate namespace-level resources (default [])
      --replicate-cluster [group/]version/resource   replicate cluster-level resources (default [])
      --replicate-ignore-namespaces strings          namespaces that are ignored by replication
      --replicate-path string                        set path to replicate data into (default "kubernetes")
  -v, --version                                      print version and exit
Options (23)
OptionDescriptionSource
--analysis-entrypoint stringset decision to analyze for dynamic data replication configuration (requires --opa-config) (default "main/main")help
--data-label stringlabel name for filtering ConfigMaps with data (default "openpolicyagent.org/data")help
--data-value stringlabel value for filtering ConfigMaps with data (default "opa")help
--enable-datawhether to automatically discover data from labelled ConfigMaps (default true)help
--enable-policieswhether to automatically discover policies from labelled ConfigMaps (default true)help
--health-endpoint stringset health check listening endpoint (e.g., localhost:8000)help
-h, --helphelp for kube-mgmthelp
--kubeconfig stringset path to kubeconfig manuallyhelp
--log-level stringset log level {debug, info, warn} (default "info")help
--namespaces stringsnamespaces to load policies and data fromhelp
--opa-allow-insecureallow insecure https connections to OPAhelp
--opa-auth-token stringset authentication token for OPA API endpointhelp
--opa-auth-token-file stringset file containing authentication token for OPA API endpointhelp
--opa-ca-file stringset file containing certificate authority for OPA certificatehelp
--opa-config stringset file containing OPA configuration to enable data replication based on configured bundleshelp
--opa-url stringset URL of OPA API endpoint (default "http://localhost:8181/v1")help
--policy-label stringlabel name for filtering ConfigMaps with policies (default "openpolicyagent.org/policy")help
--policy-value stringlabel value for filtering ConfigMaps with policies (default "rego")help
--replicate group/]version/resourcereplicate namespace-level resources (default [])help
--replicate-cluster group/]version/resourcereplicate cluster-level resources (default [])help
--replicate-ignore-namespaces stringsnamespaces that are ignored by replicationhelp
--replicate-path stringset path to replicate data into (default "kubernetes")help
-v, --versionprint version and exithelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.