Skip to content

dangerous-flags.md

Latest commit

 

History

History
16 lines (9 loc) · 947 Bytes

dangerous-flags.md

File metadata and controls

16 lines (9 loc) · 947 Bytes
Raw

Dangerous Flags

There are several flags available for kapp-controller binary that are strongly discouraged in a production setting.

--dangerous-allow-shared-service-account

This flag enables App CRs to use service account associated with kapp-controller Pod, instead of requiring each App CR to specify service account with appropriate privileges to deploy/delete resources. We plan to remove this flag in future.

--dangerous-enable-pprof=true

This flag enables Go's pprof server within kapp-controller process. It runs on 0.0.0.0:6060. It allows to inspect running Go process in various ways, for example:

  • list goroutines: http://x.x.x.x/debug/pprof/goroutine?debug=2
  • collect CPU samples: go tool pprof x.x.x.x/debug/pprof/profile?seconds=60 (useful commands: top10, tree)

Next: Examples