OS Manuals

/usr/bin/mic

Assign Azure Active Directory Identities to Kubernetes applications.

From azure-aad-pod-identity-mic 1.8.17-r45 (enterprise-packages), captured 2026-11-08 by running mic --help (exit 0). permalink

Usage of /usr/bin/mic:
  -add_dir_header
    	If true, adds the file directory to the header of the log messages
  -alsologtostderr
    	log to standard error as well as files
  -clientQps float
    	Client QPS used for throttling of calls to kube-api server (default 5)
  -cloudconfig string
    	Path to cloud config e.g. Azure.json file
  -config-map-name string
    	Configmap name (default "aad-pod-identity-config")
  -createDeleteBatch int
    	Per node/VMSS create/delete batches (default 20)
  -custom-user-agent string
    	User agent to append in addition to pod identity component and versions.
  -enable-type-upgrade
    	Enable type upgrade (default true)
  -enableProfile
    	Enable/Disable pprof profiling
  -enableScaleFeatures
    	Enable/Disable new features used for clusters at scale
  -forceNamespaced
    	Forces namespaced identities, binding, and assignment
  -http-probe-port string
    	http liveliness probe port (default "8080")
  -identity-assignment-reconcile-interval duration
    	The interval between reconciling identity assignment on Azure based on an existing list of AzureAssignedIdentities (default 3m0s)
  -immutable-user-msis string
    	prevent deletion of these IDs from the underlying VM/VMSS
  -kubeconfig string
    	Path to the kube config
  -leader-election-duration duration
    	leader election duration (default 15s)
  -leader-election-instance string
    	leader election instance name. default is 'hostname' (default "localhost")
  -leader-election-name string
    	leader election name (default "aad-pod-identity-mic")
  -leader-election-namespace string
    	namespace to create leader election objects (default "default")
  -log-format string
    	Sets the logging format. One of (text|json) (default "text")
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory
  -log_file string
    	If non-empty, use this log file
  -log_file_max_size uint
    	Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
  -logtostderr
    	log to standard error instead of files (default true)
  -one_output
    	If true, only write logs to their native severity level (vs also writing to each lower severity level)
  -prometheus-port string
    	Prometheus port for metrics (default "8888")
  -skip_headers
    	If true, avoid header prefixes in the log messages
  -skip_log_headers
    	If true, avoid headers when opening log files
  -stderrthreshold value
    	logs at or above this threshold go to stderr (default 2)
  -syncRetryDuration duration
    	The interval in seconds at which sync loop should periodically check for errors and reconcile. (default 1h0m0s)
  -type-upgrade-status-key string
    	Configmap key for type upgrade status (default "type-upgrade-status")
  -update-user-msi-max-retry int
    	The maximum retry of UpdateUserMSI call (default 2)
  -update-user-msi-retry-interval duration
    	The duration to wait before retrying UpdateUserMSI (default 1s)
  -v value
    	number for the log level verbosity
  -version
    	Prints the version information
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
Options (37)
OptionDescriptionSource
-add_dir_headerIf true, adds the file directory to the header of the log messageshelp
-alsologtostderrlog to standard error as well as fileshelp
-clientQps floatClient QPS used for throttling of calls to kube-api server (default 5)help
-cloudconfig stringPath to cloud config e.g. Azure.json filehelp
-config-map-name stringConfigmap name (default "aad-pod-identity-config")help
-createDeleteBatch intPer node/VMSS create/delete batches (default 20)help
-custom-user-agent stringUser agent to append in addition to pod identity component and versions.help
-enable-type-upgradeEnable type upgrade (default true)help
-enableProfileEnable/Disable pprof profilinghelp
-enableScaleFeaturesEnable/Disable new features used for clusters at scalehelp
-forceNamespacedForces namespaced identities, binding, and assignmenthelp
-http-probe-port stringhttp liveliness probe port (default "8080")help
-identity-assignment-reconcile-interval durationThe interval between reconciling identity assignment on Azure based on an existing list of AzureAssignedIdentities (default 3m0s)help
-immutable-user-msis stringprevent deletion of these IDs from the underlying VM/VMSShelp
-kubeconfig stringPath to the kube confighelp
-leader-election-duration durationleader election duration (default 15s)help
-leader-election-instance stringleader election instance name.help
-leader-election-name stringleader election name (default "aad-pod-identity-mic")help
-leader-election-namespace stringnamespace to create leader election objects (default "default")help
-log-format stringSets the logging format.help
-log_backtrace_at valuewhen logging hits line file:N, emit a stack tracehelp
-log_dir stringIf non-empty, write log files in this directoryhelp
-log_file stringIf non-empty, use this log filehelp
-log_file_max_size uintDefines the maximum size a log file can grow to.help
-logtostderrlog to standard error instead of files (default true)help
-one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level)help
-prometheus-port stringPrometheus port for metrics (default "8888")help
-skip_headersIf true, avoid header prefixes in the log messageshelp
-skip_log_headersIf true, avoid headers when opening log fileshelp
-stderrthreshold valuelogs at or above this threshold go to stderr (default 2)help
-syncRetryDuration durationThe interval in seconds at which sync loop should periodically check for errors and reconcile.help
-type-upgrade-status-key stringConfigmap key for type upgrade status (default "type-upgrade-status")help
-update-user-msi-max-retry intThe maximum retry of UpdateUserMSI call (default 2)help
-update-user-msi-retry-interval durationThe duration to wait before retrying UpdateUserMSI (default 1s)help
-v valuenumber for the log level verbosityhelp
-versionPrints the version informationhelp
-vmodule valuecomma-separated list of pattern=N settings for file-filtered logginghelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.