OS Manuals

/usr/bin/secrets-store-csi-driver-provider-azure

Azure Key Vault provider for Secret Store CSI driver

From secrets-store-csi-driver-provider-azure 1.8.1-r2 (os), captured 2026-11-05 by running secrets-store-csi-driver-provider-azure --help (exit 0). permalink

Also provided by 2 other package versions
Usage of /usr/bin/secrets-store-csi-driver-provider-azure:
  -add_dir_header
    	If true, adds the file directory to the header of the log messages
  -alsologtostderr
    	log to standard error as well as files (no effect when -logtostderr=true)
  -cloud-name string
    	default cloud environment to use for Azure SDK if not provided in the SecretProviderClass. Allowed values: AzurePublicCloud, AzureUSGovernmentCloud, AzureChinaCloud, AzureGermanCloud or AzureStackCloud (default "AzurePublicCloud")
  -construct-pem-chain
    	explicitly reconstruct the pem chain in the order: SERVER, INTERMEDIATE, ROOT (default true)
  -custom-user-agent string
    	user agent to append in addition to akv provider versions
  -enable-pprof
    	enable pprof profiling
  -endpoint string
    	CSI gRPC endpoint (default "unix:///tmp/azure.sock")
  -healthz-path string
    	path for health check (default "/healthz")
  -healthz-port int
    	port for health check (default 8989)
  -healthz-timeout duration
    	RPC timeout for health check (default 5s)
  -log-format-json
    	set log formatter to json
  -log_backtrace_at value
    	when logging hits line file:N, emit a stack trace
  -log_dir string
    	If non-empty, write log files in this directory (no effect when -logtostderr=true)
  -log_file string
    	If non-empty, use this log file (no effect when -logtostderr=true)
  -log_file_max_size uint
    	Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
  -logtostderr
    	log to standard error instead of files (default true)
  -metrics-backend string
    	Backend used for metrics (default "Prometheus")
  -one_output
    	If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
  -pprof-port int
    	port for pprof profiling (default 6060)
  -prometheus-port int
    	Prometheus port for metrics backend (default 8898)
  -skip_headers
    	If true, avoid header prefixes in the log messages
  -skip_log_headers
    	If true, avoid headers when opening log files (no effect when -logtostderr=true)
  -sni-name string
    	TLS server name for identity binding proxy connection. If not set, it is computed from the API server's serving certificate.
  -stderrthreshold value
    	logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
  -token-proxy-url string
    	URL of the token proxy endpoint for identity binding. If not set, defaults to the in-cluster Kubernetes API server endpoint.
  -v value
    	number for the log level verbosity
  -version
    	prints the version information
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging
  -write-cert-and-key-in-separate-files
    	Write cert and key in separate files. The individual files will be named as <secret-name>.crt and <secret-name>.key. These files will be created in addition to the single file.
Options (29)
OptionDescriptionSource
-add_dir_headerIf true, adds the file directory to the header of the log messageshelp
-alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
-cloud-name stringdefault cloud environment to use for Azure SDK if not provided in the SecretProviderClass.help
-construct-pem-chainexplicitly reconstruct the pem chain in the order: SERVER, INTERMEDIATE, ROOT (default true)help
-custom-user-agent stringuser agent to append in addition to akv provider versionshelp
-enable-pprofenable pprof profilinghelp
-endpoint stringCSI gRPC endpoint (default "unix:///tmp/azure.sock")help
-healthz-path stringpath for health check (default "/healthz")help
-healthz-port intport for health check (default 8989)help
-healthz-timeout durationRPC timeout for health check (default 5s)help
-log-format-jsonset log formatter to jsonhelp
-log_backtrace_at valuewhen logging hits line file:N, emit a stack tracehelp
-log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
-log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
-log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
-logtostderrlog to standard error instead of files (default true)help
-metrics-backend stringBackend used for metrics (default "Prometheus")help
-one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
-pprof-port intport for pprof profiling (default 6060)help
-prometheus-port intPrometheus port for metrics backend (default 8898)help
-skip_headersIf true, avoid header prefixes in the log messageshelp
-skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
-sni-name stringTLS server name for identity binding proxy connection.help
-stderrthreshold valuelogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)help
-token-proxy-url stringURL of the token proxy endpoint for identity binding.help
-v valuenumber for the log level verbosityhelp
-versionprints the version informationhelp
-vmodule valuecomma-separated list of pattern=N settings for file-filtered logginghelp
-write-cert-and-key-in-separate-filesWrite cert and key in separate files.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.