weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

dns01-nameservers -> dns01-self-check-nameservers

Browse Source
This commit is contained in:
Louis Taylor 2018-07-05 14:22:43 +01:00
parent d8f0419851
commit ea6a5472e2
No known key found for this signature in database
GPG Key ID: 8E81A6DAE13E7098
2 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cmd/controller/app/options/options.go
View File

@ -126,8 +126,9 @@ func (s *ControllerOptions) AddFlags(fs *pflag.FlagSet) {
fs.StringVar(&s.DefaultACMEIssuerDNS01ProviderName, "default-acme-issuer-dns01-provider-name", defaultACMEIssuerDNS01ProviderName, ""+
"Required if --default-acme-issuer-challenge-type is set to dns01. The DNS01 provider to use for ingresses using ACME dns01 "+
"validation that do not explicitly state a dns provider.")
fs.StringVar(&s.DNS01Nameservers, "dns01-nameservers", defaultDNS01Nameservers, ""+
"A list of comma seperated DNS servers used for DNS01 check requests")
fs.StringVar(&s.DNS01Nameservers, "dns01-self-check-nameservers", defaultDNS01Nameservers, ""+
"A list of comma seperated DNS server endpoints used for DNS01 check requests. "+
"")
}
func (o *ControllerOptions) Validate() error {

11
docs/reference/issuers/acme/dns01.rst
View File

@ -33,16 +33,21 @@ it is also possible to have multiple instances of the same DNS provider on a
single Issuer (e.g. two clouddns accounts could be set, each with their own
name).
Setting nameservers for DNS01 check
===================================
Setting nameservers for DNS01 self check
========================================
Cert-manager will check the correct DNS records exist before attempting a DNS01
challenge. By default, the DNS servers for this check will be taken from
``/etc/resolv.conf``. If this is not desired (for example with multiple
authoritative nameservers or split-horizon DNS), the cert-manager controller
provides the ``--dns01-nameservers`` flag, which allows overriding the default
provides the ``--dns01-self-check-nameservers`` flag, which allows overriding the default
nameservers with a comma seperated list of custom nameservers.
Example usage::
--dns01-self-check-nameservers "8.8.8.8:53,1.1.1.1:53"
.. _supported-dns01-providers:
*************************