Usage of rollout-operator:
  -kubernetes.api-url string
    	The Kubernetes server API URL. If not specified, it will be auto-detected when running within a Kubernetes cluster.
  -kubernetes.client-burst int
    	Maximum burst for throttle. If zero, the client-go default (10) is used.
  -kubernetes.client-qps float
    	Maximum QPS to the API server from this client. If zero, the client-go default (5) is used.
  -kubernetes.client-timeout duration
    	HTTP client timeout. This applies to requests issued to both the Kubernetes API and Kubernetes resource endpoints. (default 5m0s)
  -kubernetes.cluster-domain string
    	The Kubernetes cluster domain. (default "cluster.local.")
  -kubernetes.config-file string
    	The Kubernetes config file path. If not specified, it will be auto-detected when running within a Kubernetes cluster.
  -kubernetes.namespace string
    	The Kubernetes namespace for which this operator is running.
  -log.format string
    	The log format. Supported values: logfmt, json. Defaults to logfmt. (default "logfmt")
  -log.level string
    	The log level. Supported values: debug, info, warn, error. (default "debug")
  -reconcile.interval duration
    	The minimum interval of reconciliation. (default 5s)
  -server-tls.cert-file string
    	Path to the TLS certificate file if not using the self-signed certificate.
  -server-tls.enabled
    	Enable TLS server for webhook connections.
  -server-tls.key-file string
    	Path to the TLS private key file if not using the self-signed certificate.
  -server-tls.port int
    	Port to use for exposing TLS server for webhook connections (if enabled). (default 8443)
  -server-tls.self-signed-cert.dns-name string
    	DNS name to use for the self-signed certificate (if enabled). If left empty, then 'rollout-operator.<namespace>.svc' will be used.
  -server-tls.self-signed-cert.enabled
    	Generate a self-signed certificate for the TLS server. (default true)
  -server-tls.self-signed-cert.expiration value
    	Expiration time for the self-signed certificate in Prometheus duration format (Go format plus support for days, weeks and years as 1d/1w/1y).
  -server-tls.self-signed-cert.org string
    	Organization name to use for the self-signed certificate (if enabled). (default "Grafana Labs")
  -server-tls.self-signed-cert.secret-name string
    	Secret name to store the self-signed certificate (if enabled). (default "rollout-operator-self-signed-certificate")
  -server.cluster-validation.http.enabled
    	When enabled, cluster label validation is executed: configured cluster validation label is compared with the cluster validation label received through the requests.
  -server.cluster-validation.http.excluded-paths value
    	Comma-separated list of url paths that are excluded from the cluster validation check.
  -server.cluster-validation.http.excluded-user-agents value
    	Comma-separated list of user agents that are excluded from the cluster validation check.
  -server.cluster-validation.http.soft-validation
    	When enabled, soft cluster label validation is executed. Can be enabled only together with server.cluster-validation.http.enabled
  -server.port int
    	Port to use for exposing instrumentation and readiness probe endpoints. (default 8001)
  -use-zone-tracker
    	Use the zone tracker to prevent simultaneous downscales in different zones
  -webhooks.update-ca-bundle
    	Update the CA bundle in the properly labeled webhook configurations with the self-signed certificate (-server-tls.self-signed-cert.enabled should be enabled). (default true)
  -zone-tracker.config-map-name string
    	The name of the ConfigMap to use for the zone tracker (default "rollout-operator-zone-tracker")
  -zpdb.pod-ready-annotation-patch-timeout duration
    	Timeout for the Kubernetes API calls that maintain the grafana.com/ready-time annotation on observed pods (used to enforce ZPDB crossZoneEvictionDelay). (default 5s)