I0128 13:01:24.377024 1 flags.go:64] FLAG: --add-dir-header="false" I0128 13:01:24.377422 1 flags.go:64] FLAG: --allow-paths="[]" I0128 13:01:24.377451 1 flags.go:64] FLAG: --alsologtostderr="false" I0128 13:01:24.377467 1 flags.go:64] FLAG: --auth-header-fields-enabled="false" I0128 13:01:24.377482 1 flags.go:64] FLAG: --auth-header-groups-field-name="x-remote-groups" I0128 13:01:24.377498 1 flags.go:64] FLAG: --auth-header-groups-field-separator="|" I0128 13:01:24.377571 1 flags.go:64] FLAG: --auth-header-user-field-name="x-remote-user" I0128 13:01:24.377588 1 flags.go:64] FLAG: --auth-token-audiences="[]" I0128 13:01:24.377605 1 flags.go:64] FLAG: --client-ca-file="" I0128 13:01:24.377618 1 flags.go:64] FLAG: --config-file="/etc/kube-rbac-proxy/config-file.yaml" I0128 13:01:24.377631 1 flags.go:64] FLAG: --help="false" I0128 13:01:24.377644 1 flags.go:64] FLAG: --http2-disable="false" I0128 13:01:24.377668 1 flags.go:64] FLAG: --http2-max-concurrent-streams="100" I0128 13:01:24.377687 1 flags.go:64] FLAG: --http2-max-size="262144" I0128 13:01:24.377701 1 flags.go:64] FLAG: --ignore-paths="[]" I0128 13:01:24.377717 1 flags.go:64] FLAG: --insecure-listen-address="" I0128 13:01:24.377732 1 flags.go:64] FLAG: --kube-api-burst="0" I0128 13:01:24.377754 1 flags.go:64] FLAG: --kube-api-qps="0" I0128 13:01:24.377955 1 flags.go:64] FLAG: --kubeconfig="" I0128 13:01:24.377973 1 flags.go:64] FLAG: --log-backtrace-at="" I0128 13:01:24.377990 1 flags.go:64] FLAG: --log-dir="" I0128 13:01:24.378005 1 flags.go:64] FLAG: --log-file="" I0128 13:01:24.378019 1 flags.go:64] FLAG: --log-file-max-size="0" I0128 13:01:24.378035 1 flags.go:64] FLAG: --log-flush-frequency="5s" I0128 13:01:24.378051 1 flags.go:64] FLAG: --logtostderr="true" I0128 13:01:24.378065 1 flags.go:64] FLAG: --oidc-ca-file="" I0128 13:01:24.378078 1 flags.go:64] FLAG: --oidc-clientID="" I0128 13:01:24.378092 1 flags.go:64] FLAG: --oidc-groups-claim="groups" I0128 13:01:24.378105 1 flags.go:64] FLAG: --oidc-groups-prefix="" I0128 13:01:24.378119 1 flags.go:64] FLAG: --oidc-issuer="" I0128 13:01:24.378132 1 flags.go:64] FLAG: --oidc-sign-alg="[RS256]" I0128 13:01:24.378152 1 flags.go:64] FLAG: --oidc-username-claim="email" I0128 13:01:24.378167 1 flags.go:64] FLAG: --oidc-username-prefix="" I0128 13:01:24.378183 1 flags.go:64] FLAG: --one-output="false" I0128 13:01:24.378197 1 flags.go:64] FLAG: --proxy-endpoints-port="0" I0128 13:01:24.378222 1 flags.go:64] FLAG: --secure-listen-address="0.0.0.0:8442" I0128 13:01:24.378237 1 flags.go:64] FLAG: --skip-headers="false" I0128 13:01:24.378252 1 flags.go:64] FLAG: --skip-log-headers="false" I0128 13:01:24.378266 1 flags.go:64] FLAG: --stderrthreshold="" I0128 13:01:24.378282 1 flags.go:64] FLAG: --tls-cert-file="/etc/tls/private/tls.crt" I0128 13:01:24.378300 1 flags.go:64] FLAG: --tls-cipher-suites="[TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305]" I0128 13:01:24.378326 1 flags.go:64] FLAG: --tls-min-version="VersionTLS12" I0128 13:01:24.378344 1 flags.go:64] FLAG: --tls-private-key-file="/etc/tls/private/tls.key" I0128 13:01:24.378360 1 flags.go:64] FLAG: --tls-reload-interval="1m0s" I0128 13:01:24.378380 1 flags.go:64] FLAG: --upstream="http://localhost:8082" I0128 13:01:24.378395 1 flags.go:64] FLAG: --upstream-ca-file="" I0128 13:01:24.378411 1 flags.go:64] FLAG: --upstream-client-cert-file="" I0128 13:01:24.378426 1 flags.go:64] FLAG: --upstream-client-key-file="" I0128 13:01:24.378440 1 flags.go:64] FLAG: --upstream-force-h2c="false" I0128 13:01:24.378453 1 flags.go:64] FLAG: --v="3" I0128 13:01:24.378469 1 flags.go:64] FLAG: --version="false" I0128 13:01:24.378491 1 flags.go:64] FLAG: --vmodule="" W0128 13:01:24.378531 1 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I0128 13:01:24.378571 1 kube-rbac-proxy.go:532] Reading config file: /etc/kube-rbac-proxy/config-file.yaml I0128 13:01:24.379400 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0128 13:01:24.379485 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0128 13:01:24.379526 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0128 13:01:24.379550 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0128 13:01:24.380216 1 kube-rbac-proxy.go:235] Valid token audiences: I0128 13:01:24.383269 1 kube-rbac-proxy.go:349] Reading certificate files I0128 13:01:24.383771 1 kube-rbac-proxy.go:397] Starting TCP socket on 0.0.0.0:8442 I0128 13:01:24.384233 1 kube-rbac-proxy.go:404] Listening securely on 0.0.0.0:8442