OS Manuals

/usr/local/bin/manager

Upstream image runs `entrypoint.sh` instead of `/usr/bin/manager`

From kubevela-vela-core-compat 1.10.8-r9 (os), captured 2026-11-10 by running manager --help (exit 0). permalink

Also provided by 2 other package versions
I1110 13:50:39.588227       2 server.go:94] "KubeVela information" version="1.10.8" revision="UNKNOWN"
I1110 13:50:39.588333       2 server.go:95] "Vela-Core init" definition namespace="vela-system"
The KubeVela controller manager is a daemon that embeds the core control loops shipped with KubeVela

Usage:
  vela-core [flags]

Flags:
      --add_dir_header                                                    If true, adds the file directory to the header of the log messages
      --allow-cross-namespace-resource                                    If set to false, application can only apply resources within its namespace. Default to be true. (default true)
      --allow-resource-types string                                       If not empty, application can only apply resources with specified types. For example, --allow-resource-types=whitelist:Deployment.v1.apps,Job.v1.batch
      --alsologtostderr                                                   log to standard error as well as files (no effect when -logtostderr=true)
      --application-re-sync-period duration                               Re-sync period for application to re-sync, also known as the state-keep interval. (default 5m0s)
      --application-revision-definition-storage-prune-duration duration   the duration for running application revision storage pruning (default 1h0m0s)
      --application-revision-limit int                                    application-revision-limit is the maximum number of application useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value is 10. (default 10)
      --authentication-default-user string                                The User to impersonate when the User of application is not set. (default "kubevela:vela-core")
      --authentication-group-pattern string                               During authentication, only groups with specified pattern will be carried on application. Resource requests will be impersonated as these selected groups. (default "kubevela:*")
      --authentication-with-user                                          If set to true, User will be carried on application. Resource requests will be impersonated as the User.
      --autogen-workload-definition                                       Automatic generated workloadDefinition which componentDefinition refers to. (default true)
      --cluster-gateway-ca-file string                                    Specify the CA file path for cluster-gateway.
      --cluster-gateway-url string                                        Specify the redirect cluster-gateway url for multi-cluster requests. If empty, it uses the Kubernetes aggregated api to access.
      --cluster-metrics-interval duration                                 The interval that ClusterMetricsMgr will collect metrics from clusters, default value is 15 seconds. (default 15s)
      --concurrent-reconciles int                                         concurrent-reconciles is the concurrent reconcile number of the controller. The default value is 4 (default 4)
      --controller-client-long-running-request-timeout duration           The timeout value for controller client long-running (list) requests. (default 30s)
      --controller-client-mutating-request-timeout duration               The timeout value for controller client mutating (update, patch, delete) requests. (default 15s)
      --controller-client-request-timeout duration                        The timeout value for controller client requests. (default 10s)
      --definition-revision-limit int                                     definition-revision-limit is the maximum number of component/trait definition useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value is 20. (default 20)
      --dev-logs                                                          Enable ANSI color formatting for console logs (ignored when log-file-path is set)
      --disable-remote-cluster-client                                     disable RemoteClusterClient for default multicluster client
      --enable-cluster-gateway                                            Enable cluster-gateway to use multicluster, disabled by default.
      --enable-cluster-metrics                                            Enable cluster-metrics-management to collect metrics from clusters with cluster-gateway, disabled by default. When this param is enabled, enable-cluster-gateway should be enabled
      --enable-external-package-for-default-compiler                      Enable external package for default compiler (default true)
      --enable-external-package-watch-for-default-compiler                Enable external package watch for default compiler
      --enable-leader-election                                            Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --enable-sharding                                                   When sharding enabled, the controller will run as master (shard-id=master) or slave mode (shard-id is any non-empty string except master). Refer to https://github.com/kubevela/kubevela/blob/master/design/vela-core/sharding.md for details.
      --feature-gates mapStringBool                                       A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
                                                                          APIResponseCompression=true|false (BETA - default=true)
                                                                          APIServerIdentity=true|false (BETA - default=true)
                                                                          APIServerTracing=true|false (BETA - default=true)
                                                                          APIServingWithRoutine=true|false (ALPHA - default=false)
                                                                          AllAlpha=true|false (ALPHA - default=false)
                                                                          AllBeta=true|false (BETA - default=false)
                                                                          AnonymousAuthConfigurableEndpoints=true|false (ALPHA - default=false)
                                                                          ApplyOnce=true|false (ALPHA - default=false)
                                                                          ApplyResourceByReplace=true|false (ALPHA - default=false)
                                                                          AuthenticateApplication=true|false (ALPHA - default=false)
                                                                          AuthorizeWithSelectors=true|false (ALPHA - default=false)
                                                                          ClientIdentityPenetration=true|false (ALPHA - default=false)
                                                                          ComponentSLIs=true|false (BETA - default=true)
                                                                          ConcurrentWatchObjectDecode=true|false (BETA - default=false)
                                                                          ConsistentListFromCache=true|false (BETA - default=true)
                                                                          CoordinatedLeaderElection=true|false (ALPHA - default=false)
                                                                          DeprecatedObjectLabelSelector=true|false (ALPHA - default=false)
                                                                          DeprecatedPolicySpec=true|false (ALPHA - default=false)
                                                                          DisableBootstrapClusterInfo=true|false (ALPHA - default=false)
                                                                          DisableReferObjectsFromURL=true|false (ALPHA - default=false)
                                                                          DisableWebhookAutoSchedule=true|false (ALPHA - default=false)
                                                                          DisableWorkflowContextConfigMapCache=true|false (ALPHA - default=true)
                                                                          EnableApplicationStatusMetrics=true|false (ALPHA - default=false)
                                                                          EnableBackupWorkflowRecord=true|false (ALPHA - default=false)
                                                                          EnableCueValidation=true|false (BETA - default=false)
                                                                          EnablePatchStatusAtOnce=true|false (ALPHA - default=false)
                                                                          EnableSuspendOnFailure=true|false (ALPHA - default=false)
                                                                          EnableWatchEventListener=true|false (ALPHA - default=false)
                                                                          GzipApplicationRevision=true|false (ALPHA - default=false)
                                                                          GzipResourceTracker=true|false (ALPHA - default=false)
                                                                          HealthinessCheck=true|false (ALPHA - default=false)
                                                                          InPlacePodVerticalScaling=true|false (ALPHA - default=false)
                                                                          InformerCacheFilterUnnecessaryFields=true|false (ALPHA - default=true)
                                                                          LegacyObjectTypeIdentifier=true|false (ALPHA - default=false)
                                                                          LegacyResourceOwnerValidation=true|false (ALPHA - default=false)
                                                                          LegacyResourceTrackerGC=true|false (BETA - default=false)
                                                                          MultiStageComponentApply=true|false (ALPHA - default=false)
                                                                          OCMClusterCache=true|false (BETA - default=true)
                                                                          OpenAPIEnums=true|false (BETA - default=true)
                                                                          PreDispatchDryRun=true|false (ALPHA - default=true)
                                                                          ResilientWatchCacheInitialization=true|false (BETA - default=true)
                                                                          RetryGenerateName=true|false (BETA - default=true)
                                                                          SecretCache=true|false (BETA - default=true)
                                                                          SeparateCacheWatchRPC=true|false (BETA - default=true)
                                                                          SharedDefinitionStorageForApplicationRevision=true|false (ALPHA - default=true)
                                                                          StorageVersionAPI=true|false (ALPHA - default=false)
                                                                          StorageVersionHash=true|false (BETA - default=true)
                                                                          StrictCostEnforcementForVAP=true|false (BETA - default=false)
                                                                          StrictCostEnforcementForWebhooks=true|false (BETA - default=false)
                                                                          StructuredAuthenticationConfiguration=true|false (BETA - default=true)
                                                                          StructuredAuthorizationConfiguration=true|false (BETA - default=true)
                                                                          UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true)
                                                                          ValidateComponentWhenSharding=true|false (ALPHA - default=false)
                                                                          ValidateDefinitionPermissions=true|false (ALPHA - default=false)
                                                                          ValidateResourcesExist=true|false (ALPHA - default=false)
                                                                          WatchCacheInitializationPostStartHook=true|false (BETA - default=false)
                                                                          WatchFromStorageWithoutResourceVersion=true|false (BETA - default=false)
                                                                          WatchList=true|false (ALPHA - default=false)
                                                                          ZstdApplicationRevision=true|false (ALPHA - default=false)
                                                                          ZstdResourceTracker=true|false (ALPHA - default=false)
      --health-addr string                                                The address the health endpoint binds to. (default ":9440")
  -h, --help                                                              help for vela-core
      --ignore-app-without-controller-version                             If true, application controller will not process the app without 'app.oam.dev/controller-version-require' annotation
      --ignore-definition-without-controller-version                      If true, trait/component/workflowstep definition controller will not process the definition without 'definition.oam.dev/controller-version-require' annotation
      --informer-sync-period duration                                     The re-sync period for informer in controller-runtime. This is a system-level configuration. (default 10h0m0s)
      --kube-api-burst int                                                the burst for reconcile clients. Recommend setting it qps*2. (default 100)
      --kube-api-qps float                                                the qps for reconcile clients. Low qps may lead to low throughput. High qps may give stress to api-server. Raise this value if concurrent-reconciles is set to be high. (default 50)
      --leader-election-lease-duration duration                           The duration that non-leader candidates will wait to force acquire leadership (default 15s)
      --leader-election-namespace string                                  Determines the namespace in which the leader election configmap will be created.
      --leader-election-renew-deadline duration                           The duration that the acting controlplane will retry refreshing leadership before giving up (default 10s)
      --leader-election-retry-period duration                             The duration the LeaderElector clients should wait between tries of actions (default 2s)
      --log-debug                                                         Enable debug logs for development purpose
      --log-file-max-size uint                                            Defines the maximum size a log file can grow to, Unit is megabytes. (default 1024)
      --log-file-path string                                              The file to write logs to.
      --log_backtrace_at traceLocation                                    when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                                                    If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                                                   If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint                                            Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                                                       log to standard error instead of files (default true)
      --max-dispatch-concurrent int                                       Set the max dispatch concurrent number, default is 10 (default 10)
      --max-workflow-failed-backoff-time int                              Set the max workflow failed backoff time, default is 300 (default 300)
      --max-workflow-step-error-retry-times int                           Set the max workflow step error retry times, default is 10 (default 10)
      --max-workflow-wait-backoff-time int                                Set the max workflow wait backoff time, default is 60 (default 60)
      --metrics-addr string                                               The address the metric endpoint binds to. (default ":8080")
      --one_output                                                        If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --optimize-cached-gvks string                                       Types of resources to be cached. For example, --optimize-cached-gvks=Deployment.v1.apps,Job.v1.batch . If you have dedicated resources to be managed in your system, you can turn it on to improve performance. NOTE: this optimization only works for single-cluster.
      --optimize-disable-application-revision                             Optimize ApplicationRevision by disabling the creation and gc. Side effect: application cannot rollback. If you don't need to rollback applications, you can switch it on to reduce the storage and improve performance.
      --optimize-disable-component-revision                               Optimize ComponentRevision by disabling the creation and gc. Side effect: rollout cannot be used. If you don't use rollout trait, you can switch it on to reduce the storage and improve performance.
      --optimize-disable-resource-apply-double-check                      Optimize workflow by ignoring resource double check after apply. Side effect: controller will not wait for resource creation. If you want to use KubeVela to dispatch tons of resources and do not need to double check the creation result, you can enable this optimization.
      --optimize-enable-in-memory-workflow-context                        Optimize workflow by use in-memory context. Side effect: controller crash will lead to workflow run again from scratch and possible to cause mistakes in workflow inputs/outputs. You can use this optimization when you don't use input/output feature of workflow.
      --optimize-enable-resource-tracker-delete-only-trigger              Optimize resourcetracker by only trigger reconcile when resourcetracker is deleted. It is enabled by default. If you want to integrate KubeVela with your own operator or allow ResourceTracker manual edit, you can turn it off. (default true)
      --optimize-list-op                                                  Optimize ResourceTracker & ApplicationRevision list op by adding index. This will increase the use of memory and accelerate the list operation of ResourceTracker. Default to enable it. If you want to reduce the memory use of KubeVela, you can switch it off. (default true)
      --optimize-mark-with-prob float                                     Optimize ResourceTracker GC by only run mark with probability. Side effect: outdated ResourceTracker might not be able to be removed immediately. Default to 0.1. If you want to cleanup outdated resource for keepLegacyResource mode immediately, set it to 1.0 to disable this optimization. (default 0.1)
      --perf-enabled                                                      Enable performance logging for controllers, disabled by default.
      --profiling-addr string                                             if not empty, start the profiling server at the given address
      --reconcile-termination-graceful-period duration                    graceful period for terminating reconcile (default 5s)
      --reconcile-timeout duration                                        the timeout for controller reconcile (default 3m0s)
      --ref-objects-available-scope namespace                             The available scope for ref-objects component to refer objects. Should be one of namespace, `cluster`, `global` (default "global")
      --remote-cluster-client-cache-prune-probability float               the cache prune probability of remote clusters' RESTMapper (default 0.01)
      --remote-cluster-client-cache-timeout duration                      the timeout of remote cluster's RESTMapper cache (default 30m0s)
      --revision-limit int                                                RevisionLimit is the maximum number of revisions that will be maintained. The default value is 50. (default 50)
      --schedulable-shards strings                                        The shard ids that are available for scheduling. If empty, dynamic discovery will be used.
      --shard-id string                                                   The id for sharding. (default "master")
      --sharding-slave-discovery-resync-period duration                   The resync period for default dynamic discovery scheduler. (default 5m0s)
      --skip_headers                                                      If true, avoid header prefixes in the log messages
      --skip_log_headers                                                  If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity                                          logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)
      --system-definition-namespace string                                define the namespace of the system-level definition (default "vela-system")
      --use-webhook                                                       Enable Admission Webhook
  -v, --v Level                                                           number for the log level verbosity
      --vmodule moduleSpec                                                comma-separated list of pattern=N settings for file-filtered logging
      --webhook-cert-dir string                                           Admission webhook cert/key dir. (default "/k8s-webhook-server/serving-certs")
      --webhook-port int                                                  admission webhook listen address (default 9443)
Options (81)
OptionDescriptionSource
--add_dir_headerIf true, adds the file directory to the header of the log messageshelp
--allow-cross-namespace-resourceIf set to false, application can only apply resources within its namespace.help
--allow-resource-types stringIf not empty, application can only apply resources with specified types.help
--alsologtostderrlog to standard error as well as files (no effect when -logtostderr=true)help
--application-re-sync-period durationRe-sync period for application to re-sync, also known as the state-keep interval.help
--application-revision-definition-storage-prune-duration durationthe duration for running application revision storage pruning (default 1h0m0s)help
--application-revision-limit intapplication-revision-limit is the maximum number of application useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The default value…help
--authentication-default-user stringThe User to impersonate when the User of application is not set.help
--authentication-group-pattern stringDuring authentication, only groups with specified pattern will be carried on application.help
--authentication-with-userIf set to true, User will be carried on application.help
--autogen-workload-definitionAutomatic generated workloadDefinition which componentDefinition refers to.help
--cluster-gateway-ca-file stringSpecify the CA file path for cluster-gateway.help
--cluster-gateway-url stringSpecify the redirect cluster-gateway url for multi-cluster requests.help
--cluster-metrics-interval durationThe interval that ClusterMetricsMgr will collect metrics from clusters, default value is 15 seconds.help
--concurrent-reconciles intconcurrent-reconciles is the concurrent reconcile number of the controller.help
--controller-client-long-running-request-timeout durationThe timeout value for controller client long-running (list) requests.help
--controller-client-mutating-request-timeout durationThe timeout value for controller client mutating (update, patch, delete) requests.help
--controller-client-request-timeout durationThe timeout value for controller client requests.help
--definition-revision-limit intdefinition-revision-limit is the maximum number of component/trait definition useless revisions that will be maintained, if the useless revisions exceed this number, older ones will be GCed first.The…help
--dev-logsEnable ANSI color formatting for console logs (ignored when log-file-path is set)help
--disable-remote-cluster-clientdisable RemoteClusterClient for default multicluster clienthelp
--enable-cluster-gatewayEnable cluster-gateway to use multicluster, disabled by default.help
--enable-cluster-metricsEnable cluster-metrics-management to collect metrics from clusters with cluster-gateway, disabled by default.help
--enable-external-package-for-default-compilerEnable external package for default compiler (default true)help
--enable-external-package-watch-for-default-compilerEnable external package watch for default compilerhelp
--enable-leader-electionEnable leader election for controller manager.help
--enable-shardingWhen sharding enabled, the controller will run as master (shard-id=master) or slave mode (shard-id is any non-empty string except master).help
--feature-gates mapStringBoolA set of key=value pairs that describe feature gates for alpha/experimental features.help
--health-addr stringThe address the health endpoint binds to.help
-h, --helphelp for vela-corehelp
--ignore-app-without-controller-versionIf true, application controller will not process the app without 'app.oam.dev/controller-version-require' annotationhelp
--ignore-definition-without-controller-versionIf true, trait/component/workflowstep definition controller will not process the definition without 'definition.oam.dev/controller-version-require' annotationhelp
--informer-sync-period durationThe re-sync period for informer in controller-runtime.help
--kube-api-burst intthe burst for reconcile clients.help
--kube-api-qps floatthe qps for reconcile clients.help
--leader-election-lease-duration durationThe duration that non-leader candidates will wait to force acquire leadership (default 15s)help
--leader-election-namespace stringDetermines the namespace in which the leader election configmap will be created.help
--leader-election-renew-deadline durationThe duration that the acting controlplane will retry refreshing leadership before giving up (default 10s)help
--leader-election-retry-period durationThe duration the LeaderElector clients should wait between tries of actions (default 2s)help
--log-debugEnable debug logs for development purposehelp
--log-file-max-size uintDefines the maximum size a log file can grow to, Unit is megabytes.help
--log-file-path stringThe file to write logs to.help
--log_backtrace_at traceLocationwhen logging hits line file:N, emit a stack trace (default :0)help
--log_dir stringIf non-empty, write log files in this directory (no effect when -logtostderr=true)help
--log_file stringIf non-empty, use this log file (no effect when -logtostderr=true)help
--log_file_max_size uintDefines the maximum size a log file can grow to (no effect when -logtostderr=true).help
--logtostderrlog to standard error instead of files (default true)help
--max-dispatch-concurrent intSet the max dispatch concurrent number, default is 10 (default 10)help
--max-workflow-failed-backoff-time intSet the max workflow failed backoff time, default is 300 (default 300)help
--max-workflow-step-error-retry-times intSet the max workflow step error retry times, default is 10 (default 10)help
--max-workflow-wait-backoff-time intSet the max workflow wait backoff time, default is 60 (default 60)help
--metrics-addr stringThe address the metric endpoint binds to.help
--one_outputIf true, only write logs to their native severity level (vs also writing to each lower severity level;help
--optimize-cached-gvks stringTypes of resources to be cached.help
--optimize-disable-application-revisionOptimize ApplicationRevision by disabling the creation and gc.help
--optimize-disable-component-revisionOptimize ComponentRevision by disabling the creation and gc.help
--optimize-disable-resource-apply-double-checkOptimize workflow by ignoring resource double check after apply.help
--optimize-enable-in-memory-workflow-contextOptimize workflow by use in-memory context.help
--optimize-enable-resource-tracker-delete-only-triggerOptimize resourcetracker by only trigger reconcile when resourcetracker is deleted.help
--optimize-list-opOptimize ResourceTracker & ApplicationRevision list op by adding index.help
--optimize-mark-with-prob floatOptimize ResourceTracker GC by only run mark with probability.help
--perf-enabledEnable performance logging for controllers, disabled by default.help
--profiling-addr stringif not empty, start the profiling server at the given addresshelp
--reconcile-termination-graceful-period durationgraceful period for terminating reconcile (default 5s)help
--reconcile-timeout durationthe timeout for controller reconcile (default 3m0s)help
--ref-objects-available-scope namespaceThe available scope for ref-objects component to refer objects.help
--remote-cluster-client-cache-prune-probability floatthe cache prune probability of remote clusters' RESTMapper (default 0.01)help
--remote-cluster-client-cache-timeout durationthe timeout of remote cluster's RESTMapper cache (default 30m0s)help
--revision-limit intRevisionLimit is the maximum number of revisions that will be maintained.help
--schedulable-shards stringsThe shard ids that are available for scheduling.help
--shard-id stringThe id for sharding.help
--sharding-slave-discovery-resync-period durationThe resync period for default dynamic discovery scheduler.help
--skip_headersIf true, avoid header prefixes in the log messageshelp
--skip_log_headersIf true, avoid headers when opening log files (no effect when -logtostderr=true)help
--stderrthreshold severitylogs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true) (default 2)help
--system-definition-namespace stringdefine the namespace of the system-level definition (default "vela-system")help
--use-webhookEnable Admission Webhookhelp
-v, --v Levelnumber for the log level verbosityhelp
--vmodule moduleSpeccomma-separated list of pattern=N settings for file-filtered logginghelp
--webhook-cert-dir stringAdmission webhook cert/key dir.help
--webhook-port intadmission webhook listen address (default 9443)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.