/usr/bin/version-checker

Kubernetes utility for exposing used image versions compared to the latest version, as metrics.

Usage:
  version-checker [flags]

App flags:

      --cache-sync-period duration           The duration in which all resources should be updated. (default 5h0m0s)
      --graceful-shutdown-timeout duration   Time that the manager should wait for all controller to shutdown. (default 10s)
  -c, --image-cache-timeout duration         The time for an image version in the cache to be considered fresh. Images will be rechecked after this interval. (default 30m0s)
      --kube-channel string                  The Kubernetes channel to check against for cluster updates. (default "stable")
      --kube-interval duration               The time in which kubernetes channels updates are checked. (default 5h0m0s)
  -v, --log-level string                     Log level (debug, info, warn, error, fatal, panic). (default "info")
  -m, --metrics-serving-address string       Address to serve metrics on at the /metrics path. (default "0.0.0.0:8080")
      --pprof-serving-address string         Address to serve pprof on for profiling.
  -r, --requeue-duration duration            The time a pod will be re-checked for new versions/tags (default 1h0m0s)
  -a, --test-all-containers                  If enabled, all containers will be tested, unless they have the annotation "enable.version-checker.io/${my-container}=false".

Auth flags:

      --acr-jwks-uri string                  JWKS URI to verify the JWT access token received. If left blank, JWT token will not be verified. (VERSION_CHECKER_ACR_JWKS_URI)
      --acr-password string                  Password to authenticate with azure container registry (VERSION_CHECKER_ACR_PASSWORD).
      --acr-refresh-token string             Refresh token to authenticate with azure container registry. Cannot be used with username/password (VERSION_CHECKER_ACR_REFRESH_TOKEN).
      --acr-username string                  Username to authenticate with azure container registry (VERSION_CHECKER_ACR_USERNAME).
      --docker-password string               Password to authenticate with docker registry (VERSION_CHECKER_DOCKER_PASSWORD).
      --docker-token string                  Token to authenticate with docker registry. Cannot be used with username/password (VERSION_CHECKER_DOCKER_TOKEN).
      --docker-username string               Username to authenticate with docker registry (VERSION_CHECKER_DOCKER_USERNAME).
      --ecr-access-key-id string             ECR access key ID for read access to private registries (VERSION_CHECKER_ECR_ACCESS_KEY_ID).
      --ecr-iam-role-arn string              IAM role ARN for read access to private registries, can not be used with access-key/secret-key/session-token (VERSION_CHECKER_ECR_IAM_ROLE_ARN).
      --ecr-secret-access-key string         ECR secret access key for read access to private registries (VERSION_CHECKER_ECR_SECRET_ACCESS_KEY).
      --ecr-session-token string             ECR session token for read access to private registries (VERSION_CHECKER_ECR_SESSION_TOKEN).
      --gchr-hostname string                 Override hostname for Github Enterprise instances (VERSION_CHECKER_GHCR_HOSTNAME).
      --gchr-token string                    Personal Access token for read access to GHCR releases (VERSION_CHECKER_GHCR_TOKEN).
      --gcr-token string                     Access token for read access to private GCR registries (VERSION_CHECKER_GCR_TOKEN).
      --quay-token string                    Access token for read access to private Quay registries (VERSION_CHECKER_QUAY_TOKEN).
      --selfhosted-insecure                  Enable/Disable SSL Certificate Validation. WARNING: THIS IS NOT RECOMMENDED AND IS INTENDED FOR DEBUGGING (VERSION_CHECKER_SELFHOSTED_INSECURE)
      --selfhosted-password string           Password is authenticate with a selfhosted registry (VERSION_CHECKER_SELFHOSTED_PASSWORD).
      --selfhosted-registry-ca-path string   Absolute path to a PEM encoded x509 certificate chain. (VERSION_CHECKER_SELFHOSTED_CA_PATH)
      --selfhosted-registry-host string      Full host of the selfhosted registry. Include http[s] scheme (VERSION_CHECKER_SELFHOSTED_HOST)
      --selfhosted-token string              Token to authenticate to a selfhosted registry. Cannot be used with username/password (VERSION_CHECKER_SELFHOSTED_TOKEN).
      --selfhosted-token-path string         Override the default selfhosted registry's token auth path. (VERSION_CHECKER_SELFHOSTED_TOKEN_PATH).
      --selfhosted-username string           Username is authenticate with a selfhosted registry (VERSION_CHECKER_SELFHOSTED_USERNAME).

Kubernetes flags:

      --as string                      Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
      --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string                  UID to impersonate for the operation.
      --as-user-extra stringArray      User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.
      --cache-dir string               Default cache directory (default "/tmp/.kube/cache")
      --certificate-authority string   Path to a cert file for the certificate authority
      --client-certificate string      Path to a client certificate file for TLS
      --client-key string              Path to a client key file for TLS
      --cluster string                 The name of the kubeconfig cluster to use
      --context string                 The name of the kubeconfig context to use
      --disable-compression            If true, opt-out of response compression for all requests to the server
      --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kubeconfig string              Path to the kubeconfig file to use for CLI requests.
  -n, --namespace string               If present, the namespace scope for this CLI request
      --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                  The address and port of the Kubernetes API server
      --tls-server-name string         Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
      --token string                   Bearer token for authentication to the API server
      --user string                    The name of the kubeconfig user to use