I1001 02:29:45.431210 1 flags.go:64] FLAG: --add-dir-header="false" I1001 02:29:45.431280 1 flags.go:64] FLAG: --allow-paths="[]" I1001 02:29:45.431285 1 flags.go:64] FLAG: --alsologtostderr="false" I1001 02:29:45.431287 1 flags.go:64] FLAG: --auth-header-fields-enabled="false" I1001 02:29:45.431289 1 flags.go:64] FLAG: --auth-header-groups-field-name="x-remote-groups" I1001 02:29:45.431292 1 flags.go:64] FLAG: --auth-header-groups-field-separator="|" I1001 02:29:45.431294 1 flags.go:64] FLAG: --auth-header-user-field-name="x-remote-user" I1001 02:29:45.431296 1 flags.go:64] FLAG: --auth-token-audiences="[]" I1001 02:29:45.431299 1 flags.go:64] FLAG: --client-ca-file="" I1001 02:29:45.431301 1 flags.go:64] FLAG: --config-file="" I1001 02:29:45.431303 1 flags.go:64] FLAG: --help="false" I1001 02:29:45.431305 1 flags.go:64] FLAG: --http2-disable="true" I1001 02:29:45.431306 1 flags.go:64] FLAG: --http2-max-concurrent-streams="100" I1001 02:29:45.431309 1 flags.go:64] FLAG: --http2-max-size="262144" I1001 02:29:45.431311 1 flags.go:64] FLAG: --ignore-paths="[]" I1001 02:29:45.431313 1 flags.go:64] FLAG: --insecure-listen-address="" I1001 02:29:45.431315 1 flags.go:64] FLAG: --kube-api-burst="0" I1001 02:29:45.431317 1 flags.go:64] FLAG: --kube-api-qps="0" I1001 02:29:45.431320 1 flags.go:64] FLAG: --kubeconfig="" I1001 02:29:45.431321 1 flags.go:64] FLAG: --log-backtrace-at="" I1001 02:29:45.431323 1 flags.go:64] FLAG: --log-dir="" I1001 02:29:45.431325 1 flags.go:64] FLAG: --log-file="" I1001 02:29:45.431326 1 flags.go:64] FLAG: --log-file-max-size="0" I1001 02:29:45.431328 1 flags.go:64] FLAG: --log-flush-frequency="5s" I1001 02:29:45.431331 1 flags.go:64] FLAG: --logtostderr="true" I1001 02:29:45.431333 1 flags.go:64] FLAG: --oidc-ca-file="" I1001 02:29:45.431334 1 flags.go:64] FLAG: --oidc-clientID="" I1001 02:29:45.431339 1 flags.go:64] FLAG: --oidc-groups-claim="groups" I1001 02:29:45.431341 1 flags.go:64] FLAG: --oidc-groups-prefix="" I1001 02:29:45.431343 1 flags.go:64] FLAG: --oidc-issuer="" I1001 02:29:45.431344 1 flags.go:64] FLAG: --oidc-sign-alg="[RS256]" I1001 02:29:45.431350 1 flags.go:64] FLAG: --oidc-username-claim="email" I1001 02:29:45.431352 1 flags.go:64] FLAG: --oidc-username-prefix="" I1001 02:29:45.431354 1 flags.go:64] FLAG: --one-output="false" I1001 02:29:45.431355 1 flags.go:64] FLAG: --proxy-endpoints-port="0" I1001 02:29:45.431357 1 flags.go:64] FLAG: --secure-listen-address="0.0.0.0:8443" I1001 02:29:45.431359 1 flags.go:64] FLAG: --skip-headers="false" I1001 02:29:45.431360 1 flags.go:64] FLAG: --skip-log-headers="false" I1001 02:29:45.431362 1 flags.go:64] FLAG: --stderrthreshold="" I1001 02:29:45.431363 1 flags.go:64] FLAG: --tls-cert-file="" I1001 02:29:45.431365 1 flags.go:64] FLAG: --tls-cipher-suites="[]" I1001 02:29:45.431367 1 flags.go:64] FLAG: --tls-min-version="VersionTLS12" I1001 02:29:45.431369 1 flags.go:64] FLAG: --tls-private-key-file="" I1001 02:29:45.431371 1 flags.go:64] FLAG: --tls-reload-interval="1m0s" I1001 02:29:45.431373 1 flags.go:64] FLAG: --upstream="http://127.0.0.1:8080/" I1001 02:29:45.431375 1 flags.go:64] FLAG: --upstream-ca-file="" I1001 02:29:45.431377 1 flags.go:64] FLAG: --upstream-client-cert-file="" I1001 02:29:45.431379 1 flags.go:64] FLAG: --upstream-client-key-file="" I1001 02:29:45.431380 1 flags.go:64] FLAG: --upstream-force-h2c="false" I1001 02:29:45.431382 1 flags.go:64] FLAG: --v="10" I1001 02:29:45.431384 1 flags.go:64] FLAG: --version="false" I1001 02:29:45.431387 1 flags.go:64] FLAG: --vmodule="" W1001 02:29:45.431393 1 options.go:150] ==== Deprecation Warning ====================== Insecure listen address will be removed. Using --insecure-listen-address won't be possible! The ability to run kube-rbac-proxy without TLS certificates will be removed. Not using --tls-cert-file and --tls-private-key-file won't be possible! For more information, please go to https://github.com/brancz/kube-rbac-proxy/issues/187 =============================================== W1001 02:29:45.431402 1 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I1001 02:29:45.431689 1 kube-rbac-proxy.go:233] Valid token audiences: I1001 02:29:45.432445 1 kube-rbac-proxy.go:331] Generating self signed cert as no cert is provided I1001 02:29:45.866668 1 kube-rbac-proxy.go:395] Starting TCP socket on 0.0.0.0:8443 I1001 02:29:45.866869 1 kube-rbac-proxy.go:402] Listening securely on 0.0.0.0:8443