/usr/bin/cert-manager-csi-driver

Container Storage Interface driver to issue certificates from cert-manager

Usage:
  cert-manager-csi-driver [flags]

App flags:

      --continue-on-not-ready            Continue mounting the volume even if driver is not ready to create certificate request yet. Useful in deferring certificate issuance until after pod initialization or until after sandbox creation. Pods MUST handle the absence of certificate data at startup (e.g. via init container).
      --data-root string                 The directory that the driver will write and mount volumes from. (default "/csi-data-dir")
      --driver-name string               The name of this CSI driver which will be shared with the Kubelet. (default "csi.cert-manager.io")
      --endpoint string                  The endpoint that the driver will connect to the Kubelet.
      --gate-backoff-cap duration        Maximum duration between gate-pending retries. A value of 0 disables the cap, allowing unbounded exponential growth. (default 10s)
      --gate-backoff-duration duration   Base duration between gate-pending retries when --pod-readiness-gate is set. (default 1s)
      --gate-backoff-factor float        Multiplier applied to gate-backoff-duration after each failed gate check. (default 2)
      --gate-backoff-jitter float        Random jitter (+/- fraction of duration) applied to each gate-pending wait. (default 0.5)
      --kube-api-burst int               the maximum burst queries-per-second of requests sent to the Kubernetes apiserver
      --kube-api-qps float32             indicates the maximum queries-per-second requests to the Kubernetes apiserver
  -v, --log-level string                 Log level (1-5). (default "1")
      --metrics-bind-address string      TCP address for exposing HTTP Prometheus metrics which will be served on the HTTP path '/metrics'. The value "0" will disable exposing metrics. (default "0")
      --node-id string                   The name of the node which is hosting this driver instance.
      --pod-readiness-gate stringArray   Defer certificate issuance until the pod satisfies all specified gates. Repeat the flag to require multiple conditions (all must pass). Each gate has the form <type>:<value>. Supported types:
                                           pod-ip:<family>                    family: any | ipv4 | ipv6
                                           pod-condition:<Type>[=<Status>]    Status defaults to True
                                           pod-annotation:<key>               annotation key must be present
                                         Must be combined with --continue-on-not-ready=true to avoid blocking NodePublishVolume.
      --use-token-request                Use the empty audience token request for creating CertificateRequests. Requires the token request to be defined on the CSIDriver manifest.

Kubernetes flags:

      --as string                      Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
      --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string                  UID to impersonate for the operation.
      --as-user-extra stringArray      User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.
      --cache-dir string               Default cache directory (default "/tmp/.kube/cache")
      --certificate-authority string   Path to a cert file for the certificate authority
      --client-certificate string      Path to a client certificate file for TLS
      --client-key string              Path to a client key file for TLS
      --cluster string                 The name of the kubeconfig cluster to use
      --context string                 The name of the kubeconfig context to use
      --disable-compression            If true, opt-out of response compression for all requests to the server
      --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kubeconfig string              Path to the kubeconfig file to use for CLI requests.
  -n, --namespace string               If present, the namespace scope for this CLI request
      --proxy-url string               Proxy URL to use for requests to the API server
      --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                  The address and port of the Kubernetes API server
      --tls-server-name string         Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
      --token string                   Bearer token for authentication to the API server
      --user string                    The name of the kubeconfig user to use