Usage of config: -allow-kubeconfig-changes Allow Headlamp to make changes to the known kubeconfigs when needed. E.g. to remove a cluster via the UI. May not be recommendable when Headlamp is deployed as a service. -base-url string Base URL path. eg. /headlamp -cache-enabled K8s cache in backend -dev Allow connections from other origins -enable-dynamic-clusters Enable dynamic clusters, which stores stateless clusters in the frontend. -enable-helm Enable Helm operations -html-static-dir string Static HTML directory to serve -in-cluster Set when running from a k8s cluster -in-cluster-context-name string Name to use for the in-cluster Kubernetes context (default "main") -insecure-ssl Accept/Ignore all server SSL certificates -kubeconfig string Absolute path to the kubeconfig file -listen-addr string Address to listen on; default is empty, which means listening to any address -log-level string Set backend log verbosity. Options: debug, info (default), warn, error (default "info") -me-email-path string Comma separated JMESPath expressions used to read email from the JWT payload (default "email") -me-groups-path string Comma separated JMESPath expressions used to read groups from the JWT payload (default "groups,realm_access.roles") -me-user-info-url string URL to fetch additional user info for the /me endpoint. For oauth2proxy /oauth2/userinfo can be used. -me-username-path string Comma separated JMESPath expressions used to read username from the JWT payload (default "preferred_username,upn,username,name") -metrics-enabled Enable metrics collection -no-browser Disable automatically opening the browser when using embedded frontend -oidc-ca-file string CA file for OIDC -oidc-callback-url string Callback URL for OIDC -oidc-client-id string ClientID for OIDC -oidc-client-secret string ClientSecret for OIDC -oidc-idp-issuer-url string Identity provider issuer URL for OIDC -oidc-scopes string A comma separated list of scopes needed from the OIDC provider (default "profile,email") -oidc-skip-tls-verify Skip TLS verification for OIDC -oidc-use-access-token Setup oidc to pass through the access_token instead of the default id_token -oidc-use-cookie Enable OIDC cookie usage even when not running in-cluster -oidc-use-pkce Use PKCE (Proof Key for Code Exchange) for enhanced security in OIDC flow -oidc-validator-client-id string Override ClientID for OIDC during validation -oidc-validator-idp-issuer-url string Override Identity provider issuer URL for OIDC during validation -otlp-endpoint string OTLP collector endpoint (default "localhost:4317") -plugins-dir string Specify the plugins directory to build the backend with (default "/tmp/.config/Headlamp/plugins") -port uint Port to listen from (default 4466) -proxy-urls string Allow proxy requests to specified URLs -sampling-rate float Sampling rate for traces (default 1) -service-name string Service name for telemetry (default "headlamp") -service-version string Service version for telemetry (default "0.30.0") -session-ttl int The time in seconds for the session to be valid(Default: 86400/24h, Min: 1 , Max: 31536000/1yr ) (default 86400) -skipped-kube-contexts string Context name which should be ignored in kubeconfig file -stdout-trace-enabled Enable tracing output to stdout -tls-cert-path string Certificate for serving TLS -tls-key-path string Key for serving TLS -tracing-enabled Enable distributed tracing -use-otlp-http Use HTTP instead of gRPC for OTLP export -user-plugins-dir string Specify the user-installed plugins directory (default "/tmp/.config/Headlamp/user-plugins") -version Print version information and exit -watch-plugins-changes Reloads plugins when there are changes to them or their directory (default true) {"level":"error","source":"github.com/kubernetes-sigs/headlamp/backend/pkg/config/config.go","line":176,"error":"flag: help requested","time":"2026-11-10T13:50:08Z","message":"parsing flags"} {"level":"error","source":"github.com/kubernetes-sigs/headlamp/backend/cmd/server.go","line":54,"error":"error parsing flags: flag: help requested","time":"2026-11-10T13:50:08Z","message":"fetching config:%v"}