From 9ef3edcd951f4be0f4e4e854eb9572f86c6d04b5 Mon Sep 17 00:00:00 2001 From: Florian Liebhart Date: Tue, 20 Jun 2023 15:42:28 +0200 Subject: [PATCH] update doku on flags Signed-off-by: Florian Liebhart --- cmd/controller/app/options/options.go | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/cmd/controller/app/options/options.go b/cmd/controller/app/options/options.go index da71c7ac2..0657542d5 100644 --- a/cmd/controller/app/options/options.go +++ b/cmd/controller/app/options/options.go @@ -367,12 +367,11 @@ func (s *ControllerOptions) AddFlags(fs *pflag.FlagSet) { "Group of the Issuer to use when the tls is requested but issuer group is not specified on the ingress resource.") fs.StringSliceVar(&s.DNS01RecursiveNameservers, "dns01-recursive-nameservers", - []string{}, "A list of comma separated dns server endpoints used for "+ - "DNS01 and DNS-over-HTTPS (DoH) check requests. This should be a list containing entries of the following format: "+ - "For DNS01 checks: `:`, for example: `8.8.8.8:53,8.8.4.4:53`. For DoH checks: "+ - "`https://`, for example: `https://1.1.1.1/dns-query,https://8.8.8.8/dns-query`. "+ - "In the case of using DoH checks, `dns01-recursive-nameservers-only` should be set to true. ") - + []string{}, "A list of comma separated dns server endpoints used for DNS01 and DNS-over-HTTPS (DoH) check requests. "+ + "This should be a list containing entries of the following formats: `:` or `https://`. "+ + "For example: `8.8.8.8:53,8.8.4.4:53` or `https://1.1.1.1/dns-query,https://8.8.8.8/dns-query`. "+ + "To make sure ALL DNS requests happen through DoH, `dns01-recursive-nameservers-only` should also be set to true.") + fs.BoolVar(&s.DNS01RecursiveNameserversOnly, "dns01-recursive-nameservers-only", defaultDNS01RecursiveNameserversOnly, "When true, cert-manager will only ever query the configured DNS resolvers "+