</code></pre></div></div><h3id="-h--help">-h, -help</h3><p>Print usage and exit.</p><h3id="-version">-version</h3><p>Print version and exit.</p><h3id="-server">-server</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-server</code> flag specifies the address of the nfd-master endpoint where to connect to.</p><p>Default: localhost:8080</p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-server</span><spanclass="o">=</span>nfd-master.nfd.svc.cluster.local:443
</code></pre></div></div><h3id="-ca-file">-ca-file</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-ca-file</code> is one of the three flags (together with <codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-key-file</code>) controlling the mutual TLS authentication on the topology-updater side. This flag specifies the TLS root certificate that is used for verifying the authenticity of nfd-master.</p><p>Default: <em>empty</em></p><p>Note: Must be specified together with <codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-key-file</code></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-ca-file</span><spanclass="o">=</span>/opt/nfd/ca.crt <spanclass="nt">-cert-file</span><spanclass="o">=</span>/opt/nfd/updater.crt <spanclass="nt">-key-file</span><spanclass="o">=</span>/opt/nfd/updater.key
</code></pre></div></div><h3id="-cert-file">-cert-file</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code> is one of the three flags (together with <codeclass="language-plaintext highlighter-rouge notranslate">-ca-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-key-file</code>) controlling mutual TLS authentication on the topology-updater side. This flag specifies the TLS certificate presented for authenticating outgoing requests.</p><p>Default: <em>empty</em></p><p>Note: Must be specified together with <codeclass="language-plaintext highlighter-rouge notranslate">-ca-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-key-file</code></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-cert-file</span><spanclass="o">=</span>/opt/nfd/updater.crt <spanclass="nt">-key-file</span><spanclass="o">=</span>/opt/nfd/updater.key <spanclass="nt">-ca-file</span><spanclass="o">=</span>/opt/nfd/ca.crt
</code></pre></div></div><h3id="-key-file">-key-file</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-key-file</code> is one of the three flags (together with <codeclass="language-plaintext highlighter-rouge notranslate">-ca-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code>) controlling the mutual TLS authentication on topology-updater side. This flag specifies the private key corresponding the given certificate file (<codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code>) that is used for authenticating outgoing requests.</p><p>Default: <em>empty</em></p><p>Note: Must be specified together with <codeclass="language-plaintext highlighter-rouge notranslate">-cert-file</code> and <codeclass="language-plaintext highlighter-rouge notranslate">-ca-file</code></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-key-file</span><spanclass="o">=</span>/opt/nfd/updater.key <spanclass="nt">-cert-file</span><spanclass="o">=</span>/opt/nfd/updater.crt <spanclass="nt">-ca-file</span><spanclass="o">=</span>/opt/nfd/ca.crt
</code></pre></div></div><h3id="-server-name-override">-server-name-override</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-server-name-override</code> flag specifies the common name (CN) which to expect from the nfd-master TLS certificate. This flag is mostly intended for development and debugging purposes.</p><p>Default: <em>empty</em></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-server-name-override</span><spanclass="o">=</span>localhost
</code></pre></div></div><h3id="-no-publish">-no-publish</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-no-publish</code> flag disables all communication with the nfd-master, making it a "dry-run" flag for nfd-topology-updater. NFD-Topology-Updater runs resource hardware topology detection normally, but no CR requests are sent to nfd-master.</p><p>Default: <em>false</em></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-no-publish</span>
</code></pre></div></div><h3id="-oneshot">-oneshot</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-oneshot</code> flag causes nfd-topology-updater to exit after one pass of resource hardware topology detection.</p><p>Default: <em>false</em></p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-oneshot</span><spanclass="nt">-no-publish</span>
</code></pre></div></div><h3id="-sleep-interval">-sleep-interval</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-sleep-interval</code> specifies the interval between resource hardware topology re-examination (and CR updates). A non-positive value implies infinite sleep interval, i.e. no re-detection is done.</p><p>Default: 60s</p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-sleep-interval</span><spanclass="o">=</span>1h
</code></pre></div></div><h3id="-watch-namespace">-watch-namespace</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-watch-namespace</code> specifies the namespace to ensure that resource hardware topology examination only happens for the pods running in the specified namespace. Pods that are not running in the specified namespace are not considered during resource accounting. This is particularly useful for testing/debugging purpose. A "*" value would mean that all the pods would be considered during the accounting process.</p><p>Default: "*"</p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-watch-namespace</span><spanclass="o">=</span>rte
</code></pre></div></div><h3id="-kubelet-config-file">-kubelet-config-file</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-kubelet-config-file</code> specifies the path to the Kubelet's configuration file.</p><p>Default: /host-var/lib/kubelet/config.yaml</p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-kubelet-config-file</span><spanclass="o">=</span>/var/lib/kubelet/config.yaml
</code></pre></div></div><h3id="-podresources-socket">-podresources-socket</h3><p>The <codeclass="language-plaintext highlighter-rouge notranslate">-podresources-socket</code> specifies the path to the Unix socket where kubelet exports a gRPC service to enable discovery of in-use CPUs and devices, and to provide metadata for them.</p><p>Default: /host-var/lib/kubelet/pod-resources/kubelet.sock</p><p>Example:</p><divclass="language-bash highlighter-rouge notranslate"><divclass="highlight"><preclass="highlight"><code>nfd-topology-updater <spanclass="nt">-podresources-socket</span><spanclass="o">=</span>/var/lib/kubelet/pod-resources/kubelet.sock