/usr/bin/upwind-agent

Upwind Agent

Usage:
  upwind-agent [command]

Available Commands:
  agent        agent command
  completion   Generate the autocompletion script for the specified shell
  help         Help about any command
  readyz       Ready command
  scan         scan an image
  scanner      Run the image scanning agent
  version      print version

Flags:
      --agent-target string                          Endpoint address of the Agent gRPC service. (default "agentgrpc.upwind.io:443")
      --analysis-clusters-endpoint string            API Endpoint for sending analysis reports for clusters.
      --analysis-hosts-endpoint string               API Endpoint for sending analysis reports for hosts.
      --api-host string                              The base URL for the Upwind API that is used by the agent.
      --api-sec-catalog-clusters-endpoint string     API Endpoint for sending api security catalog reports for clusters.
      --api-sec-catalog-hosts-endpoint string        API Endpoint for sending api security catalog reports for hosts.
      --auth-client-id string                        ClientID value supplied by the Upwind Platform to connect agents to the platform. Optional. If supplied, must also supply auth-client-secret.
      --auth-client-secret string                    ClientID value supplied by the Upwind Platform to connect agents to the platform. Required if auth-client-id is set.
      --auth-endpoint string                         The Oauth Endpoint that the Upwind Component access tokens will be generated from.
      --auth-key-cache-expiry duration               The auth key cache expiry. (default 1h0m0s)
      --auth-key-issuer string                       The valid issuer of public keys used for token signature verifications.
      --auth-key-signature-method string             The valid signature method of public keys used for signature verifications.
      --auth-keys-endpoint string                    Endpoint for retrieving public keys used to verify token signatures from the auth server.
      --auth-token-file string                       File location on-disk where an already defined authorization token can be found.
      --backend-timeout duration                     timeout for requests to the upwind backend (default 1m0s)
      --cloud-account-id string                      Set cloud account ID (use if IMDS not available)
      --cloud-provider string                        Set cloud provider name (use if IMDS not available)
      --cluster-dns                                  Route DNS through CoreDNS for cluster service name resolution
      --cluster-dns-addr string                      CoreDNS ClusterIP address (used when cluster-dns is enabled). If empty, looked up from the kube-dns service in kube-system at startup.
      --cluster-name string                          Name of the cluster
      --component-registration-endpoint string       Endpoint for the runtime-component-registry service. When set, runtime components register here instead of monolith.
      --containerd-namespace string                  containerd namespace
      --customresourcedefinitions-watcher            enable watcher for customresourcedefinitions (default true)
      --debug                                        Sets debug mode: dumping of requests to logs
      --debug-metrics-enabled                        Whether to enable the prometheus client for debug metrics
      --disable-ip-resolution                        disable IP resolution
      --docker-container-buffer int                  docker container buffer size (default 5000)
      --docker-container-sync-interval duration      docker container sync interval (default 1h0m0s)
      --docker-evictions-buffer int                  docker entity eviction channel size (default 10000)
      --docker-evictions-delay duration              docker entity eviction delay (default 10m0s)
  -d, --dry-run                                      Sets dry-run mode: logging instead of uploading reports
      --evictions-buffer int                         entity eviction channel size (default 10000)
      --grpc-audience string                         Audience for the token used for GRPC authentication (default "https://agent.upwind.io")
      --heartbeat-host string                        Host to send heartbeats to (default "https://agent.upwind.io")
      --heartbeat-interval duration                  Frequency at which heartbeats should be sent (default 1m0s)
  -h, --help                                         help for upwind-agent
      --host-cm-enabled                              Whether hosts should expect a cluster manager
      --inuse-clusters-endpoint string               API Endpoint for sending inuse events reports for clusters.
      --inuse-hosts-endpoint string                  API Endpoint for sending inuse events reports for hosts.
      --iostats-enabled                              Whether to enable logging iostats
      --jobs-watcher                                 enable watcher for jobs (default true)
      --linux-posture-interval duration              interval between linux posture report generation (default 4h0m0s)
      --linux-posture-startup-delay duration         initial delay until first linux posture report generation (default 2m0s)
      --log-buffer-size int                          size of in-memory log buffer (default 65536)
      --log-expiry duration                          time duration until logs expire (default 10m0s)
      --log-format string                            log format
      --log-level string                             default log level
      --log-upload-endpoint string                   The endpoint we should upload logs to
      --log-uploader                                 whether to enable automatic log uploads
      --log-uploader-backoff-secs int                min seconds between triggered uploads (default 60)
      --log-uploader-hook                            whether to enable automatic log uploads on error or higher logs (default true)
      --log-uploader-hook-level string               level to trigger automatic log upload on (default "error")
      --log-uploader-interval-secs int               log upload interval (default 60)
      --md5-exclusion-endpoint string                API Endpoint for sending/getting md5 exclusions.
      --memstats-enabled                             Whether to enable logging memstats
      --metrics-enabled                              Whether to enable the prometheus client
      --metrics-port string                          Port the prometheus client will listen on (default "9090")
      --network-endpoint string                      API Endpoint for sending network reports.
      --network-endpoint-auth                        Whether to authorize network endpoint requests (default true)
      --network-endpoint-verify                      Whether to verify tokens for network endpoint requests
      --no-cloud-init                                Do not read metadata from local cloud-init data
      --nodes-watcher                                enable watcher for nodes
      --otel-collector                               enable the otel logs collector
      --otel-port string                             port for the otel grpc logs receiver (default "4317")
      --package-scan-endpoint string                 The endpoint we should upload package scan reports to
  -p, --platform string                              Agent platform (k8s, docker, host, auto) (default "auto")
      --pod-buffer int                               pod event channel size (default 5000)
      --pods-watcher                                 enable watcher for pods (default true)
      --posture-endpoint string                      API Endpoint for sending posture reports.
      --pprof                                        Enable pprof
      --private-cidrs string                         comma-separated list of additional CIDRs to treat as private IP ranges
      --process-endpoint string                      API Endpoint for sending process reports.
      --process-events-clusters-endpoint string      API Endpoint for sending process events reports for clusters.
      --process-events-hosts-endpoint string         API Endpoint for sending process events reports for hosts.
      --procfs string                                Host procfs path.
      --registration-host string                     Host to send registration requests to (default "https://agent.upwind.io")
      --replicasets-watcher                          enable watcher for replicasets (default true)
      --report-ingestion-endpoint string             API Endpoint for sending reports to report-ingestion service.
      --reports-service-verify                       Whether to verify tokens for grpc report uploads
      --running-processes-clusters-endpoint string   API Endpoint for sending running processes reports for clusters.
      --running-processes-hosts-endpoint string      API Endpoint for sending running processes reports for hosts.
      --scan-cache-endpoint string                   The endpoint we should query to check if an ImageID has already been scanned.
      --scan-endpoints-verify                        Whether to verify tokens for scan endpoints
      --services-watcher                             enable watcher for services
      --snapshotter string                           containerd snapshotter
      --svc-buffer int                               service event channel size (default 1000)
      --uploader-latency-metric                      enable uploader latency metrics
      --use-report-ingestion                         Route all runtime report uploads to the report-ingestion service (sent as protobuf). Per-report-type endpoint flags override this when explicitly set.
      --zone string                                  Set zone (use if IMDS not available and node label not set

Use "upwind-agent [command] --help" for more information about a command.