diff --git a/cmd/controller/app/options/options.go b/cmd/controller/app/options/options.go index 324f28905..7b7845a43 100644 --- a/cmd/controller/app/options/options.go +++ b/cmd/controller/app/options/options.go @@ -126,8 +126,9 @@ func (s *ControllerOptions) AddFlags(fs *pflag.FlagSet) { fs.StringVar(&s.DefaultACMEIssuerDNS01ProviderName, "default-acme-issuer-dns01-provider-name", defaultACMEIssuerDNS01ProviderName, ""+ "Required if --default-acme-issuer-challenge-type is set to dns01. The DNS01 provider to use for ingresses using ACME dns01 "+ "validation that do not explicitly state a dns provider.") - fs.StringVar(&s.DNS01Nameservers, "dns01-nameservers", defaultDNS01Nameservers, ""+ - "A list of comma seperated DNS servers used for DNS01 check requests") + fs.StringVar(&s.DNS01Nameservers, "dns01-self-check-nameservers", defaultDNS01Nameservers, ""+ + "A list of comma seperated DNS server endpoints used for DNS01 check requests. "+ + "") } func (o *ControllerOptions) Validate() error { diff --git a/docs/reference/issuers/acme/dns01.rst b/docs/reference/issuers/acme/dns01.rst index 474d85c42..984d2eb5c 100644 --- a/docs/reference/issuers/acme/dns01.rst +++ b/docs/reference/issuers/acme/dns01.rst @@ -33,16 +33,21 @@ it is also possible to have multiple instances of the same DNS provider on a single Issuer (e.g. two clouddns accounts could be set, each with their own name). -Setting nameservers for DNS01 check -=================================== +Setting nameservers for DNS01 self check +======================================== Cert-manager will check the correct DNS records exist before attempting a DNS01 challenge. By default, the DNS servers for this check will be taken from ``/etc/resolv.conf``. If this is not desired (for example with multiple authoritative nameservers or split-horizon DNS), the cert-manager controller -provides the ``--dns01-nameservers`` flag, which allows overriding the default +provides the ``--dns01-self-check-nameservers`` flag, which allows overriding the default nameservers with a comma seperated list of custom nameservers. +Example usage:: + + --dns01-self-check-nameservers "8.8.8.8:53,1.1.1.1:53" + + .. _supported-dns01-providers: *************************