Usage of /usr/bin/policy-controller:
  -disable-tuf
    	Disable TUF support.
  -mutating-webhook-name string
    	The name of the mutating webhook configuration as well as the webhook name that is automatically configured, if exists, with different rules and client settings setting how the admission requests to be dispatched to policy-webhook. (default "defaulting.clusterimagepolicy.sigstore.dev")
  -policy-resync-period duration
    	The resync period for ClusterImagePolicies. The default is 10h. (default 10h0m0s)
  -secure-port int
    	The port on which to serve HTTPS. (default 8443)
  -trustroot-resync-period duration
    	The resync period for ClusterImagePolicies. The default is 24h. (default 24h0m0s)
  -tuf-mirror string
    	Alternate TUF mirror. If left blank, public sigstore one is used (default "https://tuf-repo-cdn.sigstore.dev")
  -tuf-root string
    	Alternate TUF root.json. If left blank, public sigstore one is used
  -validating-webhook-name string
    	The name of the validating webhook configuration as well as the webhook name that is automatically configured, if exists, with different rules and client settings setting how the admission requests to be dispatched to policy-webhook. (default "validating.clusterimagepolicy.sigstore.dev")
  -webhook-name string
    	The name of the validating and mutating webhook configurations as well as the webhook name that is automatically configured, if exists, with different rules and client settings setting how the admission requests to be dispatched to policy-controller. (default "policy.sigstore.dev")