OS Manuals

/usr/bin/kyverno-notation-aws

Kyverno extension service for Notation and the AWS signer

From kyverno-notation-aws 1.1-r57 (os), captured 2026-11-05 by running kyverno-notation-aws --help (exit 0). permalink

Also provided by 2 other package versions
Usage of /usr/bin/kyverno-notation-aws:
  -allowInsecureRegistry
    	Whether to allow insecure connections to registries. Not recommended.
  -allowedUsers string
    	Comma-seperated list of all the allowed users and service accounts. (default "system:serviceaccount:kyverno:kyverno-admission-controller,system:serviceaccount:kyverno:kyverno-reports-controller")
  -cacheEnabled
    	Whether to use a TTL cache for storing verified images, default is true (default true)
  -cacheMaxSize int
    	Max size limit for the TTL cache, default is 1000. (default 1000)
  -cacheTTLDurationSeconds int
    	Max TTL value for a cache in seconds, default is 1 hour. (default 3600000000000)
  -debug
    	Enable debug logging
  -health-probe-bind-address string
    	The address the probe endpoint binds to. (default ":8081")
  -imagePullSecrets string
    	Secret resource names for image registry access credentials.
  -kubeconfig string
    	Paths to a kubeconfig. Only required if out-of-cluster.
  -leader-elect
    	Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
  -local
    	Use local system notation configuration
  -maxSignatureAttempts int
    	Maximum number of signature envelopes that will be processed for verification (default 30)
  -metrics-bind-address string
    	The address the metric endpoint binds to. (default ":8080")
  -notls
    	Do not start the TLS server
  -pluginConfigMap string
    	ConfigMap with notation plugin configuration (default "notation-plugin-config")
  -reviewKyvernoToken
    	Checks if the Auth token in the request is a token from kyverno controllers or other allowed users, default is true. (default true)
Options (16)
OptionDescriptionSource
-allowInsecureRegistryWhether to allow insecure connections to registries.help
-allowedUsers stringComma-seperated list of all the allowed users and service accounts.help
-cacheEnabledWhether to use a TTL cache for storing verified images, default is true (default true)help
-cacheMaxSize intMax size limit for the TTL cache, default is 1000.help
-cacheTTLDurationSeconds intMax TTL value for a cache in seconds, default is 1 hour.help
-debugEnable debug logginghelp
-health-probe-bind-address stringThe address the probe endpoint binds to.help
-imagePullSecrets stringSecret resource names for image registry access credentials.help
-kubeconfig stringPaths to a kubeconfig.help
-leader-electEnable leader election for controller manager.help
-localUse local system notation configurationhelp
-maxSignatureAttempts intMaximum number of signature envelopes that will be processed for verification (default 30)help
-metrics-bind-address stringThe address the metric endpoint binds to.help
-notlsDo not start the TLS serverhelp
-pluginConfigMap stringConfigMap with notation plugin configuration (default "notation-plugin-config")help
-reviewKyvernoTokenChecks if the Auth token in the request is a token from kyverno controllers or other allowed users, default is true.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.