OS Manuals

/usr/bin/nmi

Azure Active Directory Pod Identity (Node Managed Identity)

From azure-aad-pod-identity-nmi 1.8.17-r45 (enterprise-packages), captured 2026-11-08 by running nmi --help (exit 2). permalink

Usage of /usr/bin/nmi:
      --MICNamespace string                MIC namespace to short circuit MIC token requests (default "default")
      --add_dir_header                     If true, adds the file directory to the header of the log messages
      --allow-network-plugin-kubenet       Allow running aad-pod-identity in cluster with kubenet
      --alsologtostderr                    log to standard error as well as files
      --block-instance-metadata            Block instance metadata endpoints
      --custom-user-agent string           User agent to append in addition to pod identity component and versions.
      --enable-conntrack-deletion          Enable/Disable deletion of conntrack entries for pre-existing connections to metadata endpoint
      --enableProfile                      Enable/Disable pprof profiling
      --enableScaleFeatures                Enable/Disable features for scale clusters (default true)
      --find-identity-retry-interval int   Retry interval to find assigned identities in seconds (default 5)
      --forceNamespaced                    Forces mic to namespace identities, binding, and assignment
      --http-probe-port string             Http health and liveness probe port (default "8080")
      --ipt-update-interval-sec int        update interval of iptables (default 60)
      --kubelet-config string              Path to kubelet default config (default "/etc/default/kubelet")
      --log-format string                  Sets the logging format. One of (text|json) (default "text")
      --log_backtrace_at traceLocation     when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                     If non-empty, write log files in this directory
      --log_file string                    If non-empty, use this log file
      --log_file_max_size uint             Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                        log to standard error instead of files (default true)
      --metadata-header-required           Metadata header required for querying Azure Instance Metadata service (default true)
      --metadata-ip string                 instance metadata host ip (default "169.254.169.254")
      --metadata-port string               instance metadata host ip (default "80")
      --nmi-listen-address string          NMI listen address (default "127.0.0.1")
      --nmi-port string                    NMI application port (default "2579")
      --node string                        node name
      --one_output                         If true, only write logs to their native severity level (vs also writing to each lower severity level)
      --operation-mode string              NMI operation mode (default "standard")
      --prometheus-port string             Prometheus port for metrics (default "9090")
      --retry-attempts-for-assigned int    Number of retries in NMI to find assigned identity in ASSIGNED state (default 4)
      --retry-attempts-for-created int     Number of retries in NMI to find assigned identity in CREATED state (default 16)
      --set-retry-after-header             Set Retry-After header in NMI responses
      --skip_headers                       If true, avoid header prefixes in the log messages
      --skip_log_headers                   If true, avoid headers when opening log files
      --stderrthreshold severity           logs at or above this threshold go to stderr (default 2)
  -v, --v Level                            number for the log level verbosity
      --version                            prints the version information
      --vmodule moduleSpec                 comma-separated list of pattern=N settings for file-filtered logging
pflag: help requested
Options (38)
OptionDescriptionSource
--MICNamespace stringMIC namespace to short circuit MIC token requests (default "default")help
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--allow-network-plugin-kubenetAllow running aad-pod-identity in cluster with kubenethelp
--alsologtostderrlog to standard error as well as fileshelp
--block-instance-metadataBlock instance metadata endpointshelp
--custom-user-agent stringUser agent to append in addition to pod identity component and versions.help
--enable-conntrack-deletionEnable/Disable deletion of conntrack entries for pre-existing connections to metadata endpointhelp
--enableProfileEnable/Disable pprof profilinghelp
--enableScaleFeaturesEnable/Disable features for scale clusters (default true)help
--find-identity-retry-interval intRetry interval to find assigned identities in seconds (default 5)help
--forceNamespacedForces mic to namespace identities, binding, and assignmenthelp
--http-probe-port stringHttp health and liveness probe port (default "8080")help
--ipt-update-interval-sec intupdate interval of iptables (default 60)help
--kubelet-config stringPath to kubelet default config (default "/etc/default/kubelet")help
--log-format stringSets the logging format.help
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directoryhelp
--log_file stringIf non-empty, use this log filehelp
--log_file_max_size uintDefines the maximum size a log file can grow to.help
--logtostderrlog to standard error instead of files (default true)help
--metadata-header-requiredMetadata header required for querying Azure Instance Metadata service (default true)help
--metadata-ip stringinstance metadata host ip (default "169.254.169.254")help
--metadata-port stringinstance metadata host ip (default "80")help
--nmi-listen-address stringNMI listen address (default "127.0.0.1")help
--nmi-port stringNMI application port (default "2579")help
--node stringnode namehelp
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level)help
--operation-mode stringNMI operation mode (default "standard")help
--prometheus-port stringPrometheus port for metrics (default "9090")help
--retry-attempts-for-assigned intNumber of retries in NMI to find assigned identity in ASSIGNED state (default 4)help
--retry-attempts-for-created intNumber of retries in NMI to find assigned identity in CREATED state (default 16)help
--set-retry-after-headerSet Retry-After header in NMI responseshelp
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log fileshelp
--stderrthreshold severitylogs at or above this threshold go to stderr (default 2)help
-v, --v Levelnumber for the log level verbosityhelp
--versionprints the version informationhelp
--vmodule moduleSpeccomma-separated list of pattern=N settings for file-filtered logginghelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.