weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

update doku on flags

Browse Source 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
This commit is contained in:
Florian Liebhart 2023-06-20 15:42:28 +02:00
parent b47c5a1361
commit 9ef3edcd95
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
cmd/controller/app/options/options.go
View File

@ -367,12 +367,11 @@ func (s *ControllerOptions) AddFlags(fs *pflag.FlagSet) {
"Group of the Issuer to use when the tls is requested but issuer group is not specified on the ingress resource.")
fs.StringSliceVar(&s.DNS01RecursiveNameservers, "dns01-recursive-nameservers",
[]string{}, "A list of comma separated dns server endpoints used for "+
"DNS01 and DNS-over-HTTPS (DoH) check requests. This should be a list containing entries of the following format: "+
"For DNS01 checks: `<ip address>:<port>`, for example: `8.8.8.8:53,8.8.4.4:53`. For DoH checks: "+
"`https://<DoH RFC 8484 server address>`, for example: `https://1.1.1.1/dns-query,https://8.8.8.8/dns-query`. "+
"In the case of using DoH checks, `dns01-recursive-nameservers-only` should be set to true. ")
[]string{}, "A list of comma separated dns server endpoints used for DNS01 and DNS-over-HTTPS (DoH) check requests. "+
"This should be a list containing entries of the following formats: `<ip address>:<port>` or `https://<DoH RFC 8484 server address>`. "+
"For example: `8.8.8.8:53,8.8.4.4:53` or `https://1.1.1.1/dns-query,https://8.8.8.8/dns-query`. "+
"To make sure ALL DNS requests happen through DoH, `dns01-recursive-nameservers-only` should also be set to true.")
fs.BoolVar(&s.DNS01RecursiveNameserversOnly, "dns01-recursive-nameservers-only",
defaultDNS01RecursiveNameserversOnly,
"When true, cert-manager will only ever query the configured DNS resolvers "+