I0423 13:14:02.827064 1 flags.go:64] FLAG: --add-dir-header="false" I0423 13:14:02.827181 1 flags.go:64] FLAG: --allow-paths="[]" I0423 13:14:02.827188 1 flags.go:64] FLAG: --alsologtostderr="false" I0423 13:14:02.827192 1 flags.go:64] FLAG: --auth-header-fields-enabled="false" I0423 13:14:02.827195 1 flags.go:64] FLAG: --auth-header-groups-field-name="x-remote-groups" I0423 13:14:02.827200 1 flags.go:64] FLAG: --auth-header-groups-field-separator="|" I0423 13:14:02.827208 1 flags.go:64] FLAG: --auth-header-user-field-name="x-remote-user" I0423 13:14:02.827212 1 flags.go:64] FLAG: --auth-token-audiences="[]" I0423 13:14:02.827230 1 flags.go:64] FLAG: --client-ca-file="" I0423 13:14:02.827233 1 flags.go:64] FLAG: --config-file="" I0423 13:14:02.827236 1 flags.go:64] FLAG: --help="false" I0423 13:14:02.827239 1 flags.go:64] FLAG: --http2-disable="true" I0423 13:14:02.827243 1 flags.go:64] FLAG: --http2-max-concurrent-streams="100" I0423 13:14:02.827248 1 flags.go:64] FLAG: --http2-max-size="262144" I0423 13:14:02.827252 1 flags.go:64] FLAG: --ignore-paths="[]" I0423 13:14:02.827271 1 flags.go:64] FLAG: --insecure-listen-address="" I0423 13:14:02.827274 1 flags.go:64] FLAG: --kube-api-burst="0" I0423 13:14:02.827279 1 flags.go:64] FLAG: --kube-api-qps="0" I0423 13:14:02.827284 1 flags.go:64] FLAG: --kubeconfig="" I0423 13:14:02.827287 1 flags.go:64] FLAG: --log-backtrace-at="" I0423 13:14:02.827290 1 flags.go:64] FLAG: --log-dir="" I0423 13:14:02.827293 1 flags.go:64] FLAG: --log-file="" I0423 13:14:02.827295 1 flags.go:64] FLAG: --log-file-max-size="0" I0423 13:14:02.827307 1 flags.go:64] FLAG: --log-flush-frequency="5s" I0423 13:14:02.827310 1 flags.go:64] FLAG: --logtostderr="true" I0423 13:14:02.827312 1 flags.go:64] FLAG: --oidc-ca-file="" I0423 13:14:02.827327 1 flags.go:64] FLAG: --oidc-clientID="" I0423 13:14:02.827332 1 flags.go:64] FLAG: --oidc-groups-claim="groups" I0423 13:14:02.827335 1 flags.go:64] FLAG: --oidc-groups-prefix="" I0423 13:14:02.827340 1 flags.go:64] FLAG: --oidc-issuer="" I0423 13:14:02.827423 1 flags.go:64] FLAG: --oidc-sign-alg="[RS256]" I0423 13:14:02.827495 1 flags.go:64] FLAG: --oidc-username-claim="email" I0423 13:14:02.827508 1 flags.go:64] FLAG: --oidc-username-prefix="" I0423 13:14:02.827510 1 flags.go:64] FLAG: --one-output="false" I0423 13:14:02.827513 1 flags.go:64] FLAG: --proxy-endpoints-port="0" I0423 13:14:02.827516 1 flags.go:64] FLAG: --secure-listen-address="0.0.0.0:8443" I0423 13:14:02.827519 1 flags.go:64] FLAG: --skip-headers="false" I0423 13:14:02.827521 1 flags.go:64] FLAG: --skip-log-headers="false" I0423 13:14:02.827523 1 flags.go:64] FLAG: --stderrthreshold="" I0423 13:14:02.827524 1 flags.go:64] FLAG: --tls-cert-file="" I0423 13:14:02.827526 1 flags.go:64] FLAG: --tls-cipher-suites="[]" I0423 13:14:02.827531 1 flags.go:64] FLAG: --tls-min-version="VersionTLS12" I0423 13:14:02.827533 1 flags.go:64] FLAG: --tls-private-key-file="" I0423 13:14:02.827535 1 flags.go:64] FLAG: --tls-reload-interval="1m0s" I0423 13:14:02.827538 1 flags.go:64] FLAG: --upstream="http://127.0.0.1:8080/" I0423 13:14:02.827540 1 flags.go:64] FLAG: --upstream-ca-file="" I0423 13:14:02.827542 1 flags.go:64] FLAG: --upstream-client-cert-file="" I0423 13:14:02.827544 1 flags.go:64] FLAG: --upstream-client-key-file="" I0423 13:14:02.827546 1 flags.go:64] FLAG: --upstream-force-h2c="false" I0423 13:14:02.827550 1 flags.go:64] FLAG: --v="10" I0423 13:14:02.827552 1 flags.go:64] FLAG: --version="false" I0423 13:14:02.827555 1 flags.go:64] FLAG: --vmodule="" W0423 13:14:02.827559 1 options.go:150] ==== Deprecation Warning ====================== Insecure listen address will be removed. Using --insecure-listen-address won't be possible! The ability to run kube-rbac-proxy without TLS certificates will be removed. Not using --tls-cert-file and --tls-private-key-file won't be possible! For more information, please go to https://github.com/brancz/kube-rbac-proxy/issues/187 =============================================== W0423 13:14:02.827574 1 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I0423 13:14:02.828010 1 kube-rbac-proxy.go:233] Valid token audiences: I0423 13:14:02.829368 1 kube-rbac-proxy.go:331] Generating self signed cert as no cert is provided I0423 13:14:03.525266 1 kube-rbac-proxy.go:395] Starting TCP socket on 0.0.0.0:8443 I0423 13:14:03.525452 1 kube-rbac-proxy.go:402] Listening securely on 0.0.0.0:8443