OS Manuals

/usr/bin/stunnerd

STUNner is a Kubernetes-native STUN/TURN media gateway for WebRTC

From stunnerd 1.2.1-r15 (enterprise-packages), captured 2026-11-08 by running stunnerd --help (exit 0). permalink

Usage of stunnerd:
      --as string                      Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
      --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string                  UID to impersonate for the operation.
      --as-user-extra stringArray      User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.
      --cache-dir string               Default cache directory (default "/tmp/.kube/cache")
      --cds-server-address string      Config discovery service address (overriders cds-namesapce/name and disables service discovery)
      --cds-server-namespace string    Config discovery service namespace (disables service discovery)
      --cds-server-port int            Config discovery service port (default 13478)
      --certificate-authority string   Path to a cert file for the certificate authority
      --client-certificate string      Path to a client certificate file for TLS
      --client-key string              Path to a client key file for TLS
      --cluster string                 The name of the kubeconfig cluster to use
  -c, --config string                  Config origin, either a valid address in the format IP:port, or HTTP URL to the CDS server, or literal "k8s" to discover the CDS server from Kubernetes, or a proper file name URI in the format file://<path-to-config-file> (overrides: STUNNER_CONFIG_ORIGIN)
      --context string                 The name of the kubeconfig context to use
      --disable-compression            If true, opt-out of response compression for all requests to the server
  -d, --dry-run                        Suppress side-effects, intended for testing (default: false)
      --force-ready-status             Prevent the server from failing the liveness probe during graceful shutdown as a workaround for buggy kube-proxy implementations (default: false)
  -i, --id string                      Id for identifying with the CDS server (format: <namespace>/<name>, overrides: STUNNER_NAMESPACE/STUNNER_NAME, default: <default/stunnerd-hostname>)
      --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kubeconfig string              Path to the kubeconfig file to use for CLI requests.
  -l, --log string                     Log level (format: <scope>:<level>, overrides: PION_LOG_*, default: all:INFO)
      --log-format string              Log output format: "text" (default) or "json" (default "text")
  -n, --namespace string               If present, the namespace scope for this CLI request
      --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                  The address and port of the Kubernetes API server
      --tls-server-name string         Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
      --token string                   Bearer token for authentication to the API server
  -u, --udp-thread-num int             Number of readloop threads (CPU cores) per UDP listener. Zero disables UDP multithreading (default: 0)
      --user string                    The name of the kubeconfig user to use
  -v, --verbose                        Verbose logging, identical to <-l all:DEBUG>
  -w, --watch                          Watch config file for updates (default: false)
Options (31)
OptionDescriptionSource
--as stringUsername to impersonate for the operation.help
--as-group stringArrayGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.help
--as-uid stringUID to impersonate for the operation.help
--as-user-extra stringArrayUser extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.help
--cache-dir stringDefault cache directory (default "/tmp/.kube/cache")help
--cds-server-address stringConfig discovery service address (overriders cds-namesapce/name and disables service discovery)help
--cds-server-namespace stringConfig discovery service namespace (disables service discovery)help
--cds-server-port intConfig discovery service port (default 13478)help
--certificate-authority stringPath to a cert file for the certificate authorityhelp
--client-certificate stringPath to a client certificate file for TLShelp
--client-key stringPath to a client key file for TLShelp
--cluster stringThe name of the kubeconfig cluster to usehelp
-c, --config stringConfig origin, either a valid address in the format IP:port, or HTTP URL to the CDS server, or literal "k8s" to discover the CDS server from Kubernetes, or a proper file name URI in the format…help
--context stringThe name of the kubeconfig context to usehelp
--disable-compressionIf true, opt-out of response compression for all requests to the serverhelp
-d, --dry-runSuppress side-effects, intended for testing (default: false)help
--force-ready-statusPrevent the server from failing the liveness probe during graceful shutdown as a workaround for buggy kube-proxy implementations (default: false)help
-i, --id stringId for identifying with the CDS server (format: <namespace>/<name>, overrides: STUNNER_NAMESPACE/STUNNER_NAME, default: <default/stunnerd-hostname>)help
--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity.help
--kubeconfig stringPath to the kubeconfig file to use for CLI requests.help
-l, --log stringLog level (format: <scope>:<level>, overrides: PION_LOG_*, default: all:INFO)help
--log-format stringLog output format: "text" (default) or "json" (default "text")help
-n, --namespace stringIf present, the namespace scope for this CLI requesthelp
--request-timeout stringThe length of time to wait before giving up on a single server request.help
-s, --server stringThe address and port of the Kubernetes API serverhelp
--tls-server-name stringServer name to use for server certificate validation.help
--token stringBearer token for authentication to the API serverhelp
-u, --udp-thread-num intNumber of readloop threads (CPU cores) per UDP listener.help
--user stringThe name of the kubeconfig user to usehelp
-v, --verboseVerbose logging, identical to <-l all:DEBUG>help
-w, --watchWatch config file for updates (default: false)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.