2026/11/09 14:42:09 maxprocs: Leaving GOMAXPROCS=64: CPU quota undefined
nothing

Usage:
  dns-controller-manager [flags]

Flags:
      --accepted-maintainers string                                   accepted maintainer key(s) for crds
      --advanced.batch-size int                                       batch size for change requests (currently only used for aws-route53)
      --advanced.max-retries int                                      maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --alicloud-dns.advanced.batch-size int                          batch size for change requests (currently only used for aws-route53)
      --alicloud-dns.advanced.max-retries int                         maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --alicloud-dns.blocked-zone zone-id                             Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --alicloud-dns.ratelimiter.burst int                            number of burst requests for rate limiter
      --alicloud-dns.ratelimiter.enabled                              enables rate limiter for DNS provider requests
      --alicloud-dns.ratelimiter.qps int                              maximum requests/queries per second
      --annotation.default.pool.size int                              Worker pool size for pool default of controller annotation
      --annotation.pool.size int                                      Worker pool size of controller annotation
      --annotation.setup int                                          number of processors for controller setup of controller annotation
      --aws-route53.advanced.batch-size int                           batch size for change requests (currently only used for aws-route53)
      --aws-route53.advanced.max-retries int                          maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --aws-route53.blocked-zone zone-id                              Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --aws-route53.ratelimiter.burst int                             number of burst requests for rate limiter
      --aws-route53.ratelimiter.enabled                               enables rate limiter for DNS provider requests
      --aws-route53.ratelimiter.qps int                               maximum requests/queries per second
      --azure-dns.advanced.batch-size int                             batch size for change requests (currently only used for aws-route53)
      --azure-dns.advanced.max-retries int                            maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --azure-dns.blocked-zone zone-id                                Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --azure-dns.ratelimiter.burst int                               number of burst requests for rate limiter
      --azure-dns.ratelimiter.enabled                                 enables rate limiter for DNS provider requests
      --azure-dns.ratelimiter.qps int                                 maximum requests/queries per second
      --azure-private-dns.advanced.batch-size int                     batch size for change requests (currently only used for aws-route53)
      --azure-private-dns.advanced.max-retries int                    maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --azure-private-dns.blocked-zone zone-id                        Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --azure-private-dns.ratelimiter.burst int                       number of burst requests for rate limiter
      --azure-private-dns.ratelimiter.enabled                         enables rate limiter for DNS provider requests
      --azure-private-dns.ratelimiter.qps int                         maximum requests/queries per second
      --bind-address-http string                                      HTTP server bind address
      --blocked-zone zone-id                                          Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --cache-ttl int                                                 Time-to-live for provider hosted zone cache
      --cloudflare-dns.advanced.batch-size int                        batch size for change requests (currently only used for aws-route53)
      --cloudflare-dns.advanced.max-retries int                       maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --cloudflare-dns.blocked-zone zone-id                           Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --cloudflare-dns.ratelimiter.burst int                          number of burst requests for rate limiter
      --cloudflare-dns.ratelimiter.enabled                            enables rate limiter for DNS provider requests
      --cloudflare-dns.ratelimiter.qps int                            maximum requests/queries per second
      --compound.advanced.batch-size int                              batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.advanced.max-retries int                             maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.alicloud-dns.advanced.batch-size int                 batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.alicloud-dns.advanced.max-retries int                maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.alicloud-dns.blocked-zone zone-id                    Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.alicloud-dns.ratelimiter.burst int                   number of burst requests for rate limiter of controller compound
      --compound.alicloud-dns.ratelimiter.enabled                     enables rate limiter for DNS provider requests of controller compound
      --compound.alicloud-dns.ratelimiter.qps int                     maximum requests/queries per second of controller compound
      --compound.aws-route53.advanced.batch-size int                  batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.aws-route53.advanced.max-retries int                 maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.aws-route53.blocked-zone zone-id                     Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.aws-route53.ratelimiter.burst int                    number of burst requests for rate limiter of controller compound
      --compound.aws-route53.ratelimiter.enabled                      enables rate limiter for DNS provider requests of controller compound
      --compound.aws-route53.ratelimiter.qps int                      maximum requests/queries per second of controller compound
      --compound.azure-dns.advanced.batch-size int                    batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.azure-dns.advanced.max-retries int                   maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.azure-dns.blocked-zone zone-id                       Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.azure-dns.ratelimiter.burst int                      number of burst requests for rate limiter of controller compound
      --compound.azure-dns.ratelimiter.enabled                        enables rate limiter for DNS provider requests of controller compound
      --compound.azure-dns.ratelimiter.qps int                        maximum requests/queries per second of controller compound
      --compound.azure-private-dns.advanced.batch-size int            batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.azure-private-dns.advanced.max-retries int           maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.azure-private-dns.blocked-zone zone-id               Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.azure-private-dns.ratelimiter.burst int              number of burst requests for rate limiter of controller compound
      --compound.azure-private-dns.ratelimiter.enabled                enables rate limiter for DNS provider requests of controller compound
      --compound.azure-private-dns.ratelimiter.qps int                maximum requests/queries per second of controller compound
      --compound.blocked-zone zone-id                                 Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.cache-ttl int                                        Time-to-live for provider hosted zone cache of controller compound
      --compound.cloudflare-dns.advanced.batch-size int               batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.cloudflare-dns.advanced.max-retries int              maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.cloudflare-dns.blocked-zone zone-id                  Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.cloudflare-dns.ratelimiter.burst int                 number of burst requests for rate limiter of controller compound
      --compound.cloudflare-dns.ratelimiter.enabled                   enables rate limiter for DNS provider requests of controller compound
      --compound.cloudflare-dns.ratelimiter.qps int                   maximum requests/queries per second of controller compound
      --compound.default.pool.size int                                Worker pool size for pool default of controller compound
      --compound.disable-dnsname-validation                           disable validation of domain names according to RFC 1123. of controller compound
      --compound.disable-provider-types string                        comma separated list of provider types to disable of controller compound
      --compound.disable-zone-state-caching                           disable use of cached dns zone state on changes of controller compound
      --compound.dns-class string                                     identifier used to differentiate responsible controllers for entries of controller compound
      --compound.dns-delay duration                                   delay between two dns reconciliations of controller compound
      --compound.dns.pool.resync-period duration                      Period for resynchronization for pool dns of controller compound
      --compound.dns.pool.size int                                    Worker pool size for pool dns of controller compound
      --compound.dry-run                                              just check, don't modify of controller compound
      --compound.entry-failure-backoff-base duration                  base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again of controller compound
      --compound.entry-failure-backoff-factor int                     multiplier applied per consecutive failure for the entry failure backoff of controller compound
      --compound.entry-failure-backoff-max duration                   maximum delay for the entry failure backoff of controller compound
      --compound.gdch-dns.advanced.batch-size int                     batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.gdch-dns.advanced.max-retries int                    maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.gdch-dns.blocked-zone zone-id                        Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.gdch-dns.ratelimiter.burst int                       number of burst requests for rate limiter of controller compound
      --compound.gdch-dns.ratelimiter.enabled                         enables rate limiter for DNS provider requests of controller compound
      --compound.gdch-dns.ratelimiter.qps int                         maximum requests/queries per second of controller compound
      --compound.google-clouddns.advanced.batch-size int              batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.google-clouddns.advanced.max-retries int             maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.google-clouddns.blocked-zone zone-id                 Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.google-clouddns.ratelimiter.burst int                number of burst requests for rate limiter of controller compound
      --compound.google-clouddns.ratelimiter.enabled                  enables rate limiter for DNS provider requests of controller compound
      --compound.google-clouddns.ratelimiter.qps int                  maximum requests/queries per second of controller compound
      --compound.infoblox-dns.advanced.batch-size int                 batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.infoblox-dns.advanced.max-retries int                maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.infoblox-dns.blocked-zone zone-id                    Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.infoblox-dns.ratelimiter.burst int                   number of burst requests for rate limiter of controller compound
      --compound.infoblox-dns.ratelimiter.enabled                     enables rate limiter for DNS provider requests of controller compound
      --compound.infoblox-dns.ratelimiter.qps int                     maximum requests/queries per second of controller compound
      --compound.local.advanced.batch-size int                        batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.local.advanced.max-retries int                       maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.local.blocked-zone zone-id                           Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.local.ratelimiter.burst int                          number of burst requests for rate limiter of controller compound
      --compound.local.ratelimiter.enabled                            enables rate limiter for DNS provider requests of controller compound
      --compound.local.ratelimiter.qps int                            maximum requests/queries per second of controller compound
      --compound.lock-status-check-period duration                    interval for dns lock status checks of controller compound
      --compound.netlify-dns.advanced.batch-size int                  batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.netlify-dns.advanced.max-retries int                 maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.netlify-dns.blocked-zone zone-id                     Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.netlify-dns.ratelimiter.burst int                    number of burst requests for rate limiter of controller compound
      --compound.netlify-dns.ratelimiter.enabled                      enables rate limiter for DNS provider requests of controller compound
      --compound.netlify-dns.ratelimiter.qps int                      maximum requests/queries per second of controller compound
      --compound.openstack-designate.advanced.batch-size int          batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.openstack-designate.advanced.max-retries int         maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.openstack-designate.blocked-zone zone-id             Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.openstack-designate.ratelimiter.burst int            number of burst requests for rate limiter of controller compound
      --compound.openstack-designate.ratelimiter.enabled              enables rate limiter for DNS provider requests of controller compound
      --compound.openstack-designate.ratelimiter.qps int              maximum requests/queries per second of controller compound
      --compound.pool.resync-period duration                          Period for resynchronization of controller compound
      --compound.pool.size int                                        Worker pool size of controller compound
      --compound.powerdns.advanced.batch-size int                     batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.powerdns.advanced.max-retries int                    maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.powerdns.blocked-zone zone-id                        Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.powerdns.ratelimiter.burst int                       number of burst requests for rate limiter of controller compound
      --compound.powerdns.ratelimiter.enabled                         enables rate limiter for DNS provider requests of controller compound
      --compound.powerdns.ratelimiter.qps int                         maximum requests/queries per second of controller compound
      --compound.provider-types string                                comma separated list of provider types to enable of controller compound
      --compound.providers.pool.resync-period duration                Period for resynchronization for pool providers of controller compound
      --compound.providers.pool.size int                              Worker pool size for pool providers of controller compound
      --compound.ratelimiter.burst int                                number of burst requests for rate limiter of controller compound
      --compound.ratelimiter.enabled                                  enables rate limiter for DNS provider requests of controller compound
      --compound.ratelimiter.qps int                                  maximum requests/queries per second of controller compound
      --compound.remote-access-cacert string                          CA who signed client certs file of controller compound
      --compound.remote-access-client-id string                       identifier used for remote access of controller compound
      --compound.remote-access-port int                               port of remote access server for remote-enabled providers of controller compound
      --compound.remote-access-server-secret-name string              name of secret containing remote access server's certificate of controller compound
      --compound.remote.advanced.batch-size int                       batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.remote.advanced.max-retries int                      maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.remote.blocked-zone zone-id                          Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.remote.ratelimiter.burst int                         number of burst requests for rate limiter of controller compound
      --compound.remote.ratelimiter.enabled                           enables rate limiter for DNS provider requests of controller compound
      --compound.remote.ratelimiter.qps int                           maximum requests/queries per second of controller compound
      --compound.reschedule-delay duration                            reschedule delay after losing provider of controller compound
      --compound.rfc2136.advanced.batch-size int                      batch size for change requests (currently only used for aws-route53) of controller compound
      --compound.rfc2136.advanced.max-retries int                     maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
      --compound.rfc2136.blocked-zone zone-id                         Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
      --compound.rfc2136.ratelimiter.burst int                        number of burst requests for rate limiter of controller compound
      --compound.rfc2136.ratelimiter.enabled                          enables rate limiter for DNS provider requests of controller compound
      --compound.rfc2136.ratelimiter.qps int                          maximum requests/queries per second of controller compound
      --compound.secrets.pool.size int                                Worker pool size for pool secrets of controller compound
      --compound.setup int                                            number of processors for controller setup of controller compound
      --compound.ttl int                                              Default time-to-live for DNS entries. Defines how long the record is kept in cache by DNS servers or resolvers. of controller compound
      --compound.zonepolicies.pool.size int                           Worker pool size for pool zonepolicies of controller compound
      --config string                                                 config file
  -c, --controllers string                                            comma separated list of controllers to start (<name>,<group>,all)
      --cpuprofile string                                             set file for cpu profiling
      --default.pool.resync-period duration                           Period for resynchronization for pool default
      --default.pool.size int                                         Worker pool size for pool default
      --disable-dnsname-validation                                    disable validation of domain names according to RFC 1123.
      --disable-namespace-restriction                                 disable access restriction for namespace local access only
      --disable-provider-types string                                 comma separated list of provider types to disable
      --disable-zone-state-caching                                    disable use of cached dns zone state on changes
      --dns-class string                                              identifier used to differentiate responsible controllers for entries, identifier used to differentiate responsible controllers for providers
      --dns-delay duration                                            delay between two dns reconciliations
      --dns-target-class string                                       identifier used to differentiate responsible dns controllers for target entries, identifier used to differentiate responsible dns controllers for target providers
      --dns.pool.resync-period duration                               Period for resynchronization for pool dns
      --dns.pool.size int                                             Worker pool size for pool dns
      --dnsentry-source.default.pool.resync-period duration           Period for resynchronization for pool default of controller dnsentry-source
      --dnsentry-source.default.pool.size int                         Worker pool size for pool default of controller dnsentry-source
      --dnsentry-source.dns-class string                              identifier used to differentiate responsible controllers for entries of controller dnsentry-source
      --dnsentry-source.dns-target-class string                       identifier used to differentiate responsible dns controllers for target entries of controller dnsentry-source
      --dnsentry-source.exclude-domains stringArray                   excluded domains of controller dnsentry-source
      --dnsentry-source.key string                                    selecting key for annotation of controller dnsentry-source
      --dnsentry-source.pool.resync-period duration                   Period for resynchronization of controller dnsentry-source
      --dnsentry-source.pool.size int                                 Worker pool size of controller dnsentry-source
      --dnsentry-source.target-creator-label-name string              label name to store the creator for generated DNS entries of controller dnsentry-source
      --dnsentry-source.target-creator-label-value string             label value for creator label of controller dnsentry-source
      --dnsentry-source.target-name-prefix string                     name prefix in target namespace for cross cluster generation of controller dnsentry-source
      --dnsentry-source.target-namespace string                       target namespace for cross cluster generation of controller dnsentry-source
      --dnsentry-source.target-realms string                          realm(s) to use for generated DNS entries of controller dnsentry-source
      --dnsentry-source.targets.pool.size int                         Worker pool size for pool targets of controller dnsentry-source
      --dnsprovider-replication.default.pool.resync-period duration   Period for resynchronization for pool default of controller dnsprovider-replication
      --dnsprovider-replication.default.pool.size int                 Worker pool size for pool default of controller dnsprovider-replication
      --dnsprovider-replication.dns-class string                      identifier used to differentiate responsible controllers for providers of controller dnsprovider-replication
      --dnsprovider-replication.dns-target-class string               identifier used to differentiate responsible dns controllers for target providers of controller dnsprovider-replication
      --dnsprovider-replication.pool.resync-period duration           Period for resynchronization of controller dnsprovider-replication
      --dnsprovider-replication.pool.size int                         Worker pool size of controller dnsprovider-replication
      --dnsprovider-replication.target-creator-label-name string      label name to store the creator for replicated DNS providers of controller dnsprovider-replication
      --dnsprovider-replication.target-creator-label-value string     label value for creator label of controller dnsprovider-replication
      --dnsprovider-replication.target-name-prefix string             name prefix in target namespace for cross cluster replication of controller dnsprovider-replication
      --dnsprovider-replication.target-namespace string               target namespace for cross cluster generation of controller dnsprovider-replication
      --dnsprovider-replication.target-realms string                  realm(s) to use for replicated DNS provider of controller dnsprovider-replication
      --dnsprovider-replication.targets.pool.size int                 Worker pool size for pool targets of controller dnsprovider-replication
      --dry-run                                                       just check, don't modify
      --enable-profiling                                              enables profiling server at path /debug/pprof (needs option --server-port-http)
      --entry-failure-backoff-base duration                           base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again
      --entry-failure-backoff-factor int                              multiplier applied per consecutive failure for the entry failure backoff
      --entry-failure-backoff-max duration                            maximum delay for the entry failure backoff
      --exclude-domains stringArray                                   excluded domains
      --force-crd-update                                              enforce update of crds even they are unmanaged
      --gdch-dns.advanced.batch-size int                              batch size for change requests (currently only used for aws-route53)
      --gdch-dns.advanced.max-retries int                             maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --gdch-dns.blocked-zone zone-id                                 Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --gdch-dns.ratelimiter.burst int                                number of burst requests for rate limiter
      --gdch-dns.ratelimiter.enabled                                  enables rate limiter for DNS provider requests
      --gdch-dns.ratelimiter.qps int                                  maximum requests/queries per second
      --google-clouddns.advanced.batch-size int                       batch size for change requests (currently only used for aws-route53)
      --google-clouddns.advanced.max-retries int                      maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --google-clouddns.blocked-zone zone-id                          Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --google-clouddns.ratelimiter.burst int                         number of burst requests for rate limiter
      --google-clouddns.ratelimiter.enabled                           enables rate limiter for DNS provider requests
      --google-clouddns.ratelimiter.qps int                           maximum requests/queries per second
      --grace-period duration                                         inactivity grace period for detecting end of cleanup for shutdown
  -h, --help                                                          help for dns-controller-manager
      --httproutes.pool.size int                                      Worker pool size for pool httproutes
      --infoblox-dns.advanced.batch-size int                          batch size for change requests (currently only used for aws-route53)
      --infoblox-dns.advanced.max-retries int                         maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --infoblox-dns.blocked-zone zone-id                             Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --infoblox-dns.ratelimiter.burst int                            number of burst requests for rate limiter
      --infoblox-dns.ratelimiter.enabled                              enables rate limiter for DNS provider requests
      --infoblox-dns.ratelimiter.qps int                              maximum requests/queries per second
      --ingress-dns.default.pool.resync-period duration               Period for resynchronization for pool default of controller ingress-dns
      --ingress-dns.default.pool.size int                             Worker pool size for pool default of controller ingress-dns
      --ingress-dns.dns-class string                                  identifier used to differentiate responsible controllers for entries of controller ingress-dns
      --ingress-dns.dns-target-class string                           identifier used to differentiate responsible dns controllers for target entries of controller ingress-dns
      --ingress-dns.exclude-domains stringArray                       excluded domains of controller ingress-dns
      --ingress-dns.key string                                        selecting key for annotation of controller ingress-dns
      --ingress-dns.pool.resync-period duration                       Period for resynchronization of controller ingress-dns
      --ingress-dns.pool.size int                                     Worker pool size of controller ingress-dns
      --ingress-dns.target-creator-label-name string                  label name to store the creator for generated DNS entries of controller ingress-dns
      --ingress-dns.target-creator-label-value string                 label value for creator label of controller ingress-dns
      --ingress-dns.target-name-prefix string                         name prefix in target namespace for cross cluster generation of controller ingress-dns
      --ingress-dns.target-namespace string                           target namespace for cross cluster generation of controller ingress-dns
      --ingress-dns.target-realms string                              realm(s) to use for generated DNS entries of controller ingress-dns
      --ingress-dns.targets.pool.size int                             Worker pool size for pool targets of controller ingress-dns
      --istio-gateways-dns.default.pool.resync-period duration        Period for resynchronization for pool default of controller istio-gateways-dns
      --istio-gateways-dns.default.pool.size int                      Worker pool size for pool default of controller istio-gateways-dns
      --istio-gateways-dns.dns-class string                           identifier used to differentiate responsible controllers for entries of controller istio-gateways-dns
      --istio-gateways-dns.dns-target-class string                    identifier used to differentiate responsible dns controllers for target entries of controller istio-gateways-dns
      --istio-gateways-dns.exclude-domains stringArray                excluded domains of controller istio-gateways-dns
      --istio-gateways-dns.key string                                 selecting key for annotation of controller istio-gateways-dns
      --istio-gateways-dns.pool.resync-period duration                Period for resynchronization of controller istio-gateways-dns
      --istio-gateways-dns.pool.size int                              Worker pool size of controller istio-gateways-dns
      --istio-gateways-dns.target-creator-label-name string           label name to store the creator for generated DNS entries of controller istio-gateways-dns
      --istio-gateways-dns.target-creator-label-value string          label value for creator label of controller istio-gateways-dns
      --istio-gateways-dns.target-name-prefix string                  name prefix in target namespace for cross cluster generation of controller istio-gateways-dns
      --istio-gateways-dns.target-namespace string                    target namespace for cross cluster generation of controller istio-gateways-dns
      --istio-gateways-dns.target-realms string                       realm(s) to use for generated DNS entries of controller istio-gateways-dns
      --istio-gateways-dns.targets.pool.size int                      Worker pool size for pool targets of controller istio-gateways-dns
      --istio-gateways-dns.targetsources.pool.size int                Worker pool size for pool targetsources of controller istio-gateways-dns
      --istio-gateways-dns.virtualservices.pool.size int              Worker pool size for pool virtualservices of controller istio-gateways-dns
      --k8s-gateways-dns.default.pool.resync-period duration          Period for resynchronization for pool default of controller k8s-gateways-dns
      --k8s-gateways-dns.default.pool.size int                        Worker pool size for pool default of controller k8s-gateways-dns
      --k8s-gateways-dns.dns-class string                             identifier used to differentiate responsible controllers for entries of controller k8s-gateways-dns
      --k8s-gateways-dns.dns-target-class string                      identifier used to differentiate responsible dns controllers for target entries of controller k8s-gateways-dns
      --k8s-gateways-dns.exclude-domains stringArray                  excluded domains of controller k8s-gateways-dns
      --k8s-gateways-dns.httproutes.pool.size int                     Worker pool size for pool httproutes of controller k8s-gateways-dns
      --k8s-gateways-dns.key string                                   selecting key for annotation of controller k8s-gateways-dns
      --k8s-gateways-dns.pool.resync-period duration                  Period for resynchronization of controller k8s-gateways-dns
      --k8s-gateways-dns.pool.size int                                Worker pool size of controller k8s-gateways-dns
      --k8s-gateways-dns.target-creator-label-name string             label name to store the creator for generated DNS entries of controller k8s-gateways-dns
      --k8s-gateways-dns.target-creator-label-value string            label value for creator label of controller k8s-gateways-dns
      --k8s-gateways-dns.target-name-prefix string                    name prefix in target namespace for cross cluster generation of controller k8s-gateways-dns
      --k8s-gateways-dns.target-namespace string                      target namespace for cross cluster generation of controller k8s-gateways-dns
      --k8s-gateways-dns.target-realms string                         realm(s) to use for generated DNS entries of controller k8s-gateways-dns
      --k8s-gateways-dns.targets.pool.size int                        Worker pool size for pool targets of controller k8s-gateways-dns
      --key string                                                    selecting key for annotation
      --kubeconfig string                                             default cluster access
      --kubeconfig.burst int                                          option to set the maximum burst to the apiserver of the cluster default (default 100)
      --kubeconfig.conditional-deploy-crds                            deployment of required crds for cluster default only if there is no managed resource in garden namespace deploying it
      --kubeconfig.crds-shoot-no-cleanup-label                        add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster default
      --kubeconfig.disable-deploy-crds                                disable deployment of required crds for cluster default
      --kubeconfig.id string                                          id for cluster default
      --kubeconfig.migration-ids string                               migration id for cluster default
      --kubeconfig.qps int                                            option to set the maximum QPS to the apiserver of the cluster default (default 50)
      --lease-duration duration                                       lease duration
      --lease-name string                                             name for lease object
      --lease-renew-deadline duration                                 lease renew deadline
      --lease-resource-lock string                                    determines which resource lock to use for leader election, defaults to 'leases'
      --lease-retry-period duration                                   lease retry period
      --local.advanced.batch-size int                                 batch size for change requests (currently only used for aws-route53)
      --local.advanced.max-retries int                                maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --local.blocked-zone zone-id                                    Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --local.ratelimiter.burst int                                   number of burst requests for rate limiter
      --local.ratelimiter.enabled                                     enables rate limiter for DNS provider requests
      --local.ratelimiter.qps int                                     maximum requests/queries per second
      --lock-status-check-period duration                             interval for dns lock status checks
  -D, --log-level string                                              logrus log level
      --maintainer string                                             maintainer key for crds (default "dns-controller-manager")
      --name string                                                   name used for controller manager (default "dns-controller-manager")
      --namespace string                                              namespace for lease (default "kube-system")
  -n, --namespace-local-access-only                                   enable access restriction for namespace local access only (deprecated)
      --netlify-dns.advanced.batch-size int                           batch size for change requests (currently only used for aws-route53)
      --netlify-dns.advanced.max-retries int                          maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --netlify-dns.blocked-zone zone-id                              Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --netlify-dns.ratelimiter.burst int                             number of burst requests for rate limiter
      --netlify-dns.ratelimiter.enabled                               enables rate limiter for DNS provider requests
      --netlify-dns.ratelimiter.qps int                               maximum requests/queries per second
      --omit-lease                                                    omit lease for development
      --openstack-designate.advanced.batch-size int                   batch size for change requests (currently only used for aws-route53)
      --openstack-designate.advanced.max-retries int                  maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --openstack-designate.blocked-zone zone-id                      Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --openstack-designate.ratelimiter.burst int                     number of burst requests for rate limiter
      --openstack-designate.ratelimiter.enabled                       enables rate limiter for DNS provider requests
      --openstack-designate.ratelimiter.qps int                       maximum requests/queries per second
      --plugin-file string                                            directory containing go plugins
      --pool.resync-period duration                                   Period for resynchronization
      --pool.size int                                                 Worker pool size
      --powerdns.advanced.batch-size int                              batch size for change requests (currently only used for aws-route53)
      --powerdns.advanced.max-retries int                             maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --powerdns.blocked-zone zone-id                                 Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --powerdns.ratelimiter.burst int                                number of burst requests for rate limiter
      --powerdns.ratelimiter.enabled                                  enables rate limiter for DNS provider requests
      --powerdns.ratelimiter.qps int                                  maximum requests/queries per second
      --provider-types string                                         comma separated list of provider types to enable
      --providers string                                              cluster to look for provider objects
      --providers.burst int                                           option to set the maximum burst to the apiserver of the cluster provider (default 100)
      --providers.conditional-deploy-crds                             deployment of required crds for cluster provider only if there is no managed resource in garden namespace deploying it
      --providers.crds-shoot-no-cleanup-label                         add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster provider
      --providers.disable-deploy-crds                                 disable deployment of required crds for cluster provider
      --providers.id string                                           id for cluster provider
      --providers.migration-ids string                                migration id for cluster provider
      --providers.pool.resync-period duration                         Period for resynchronization for pool providers
      --providers.pool.size int                                       Worker pool size for pool providers
      --providers.qps int                                             option to set the maximum QPS to the apiserver of the cluster provider (default 50)
      --ratelimiter.burst int                                         number of burst requests for rate limiter
      --ratelimiter.enabled                                           enables rate limiter for DNS provider requests
      --ratelimiter.qps int                                           maximum requests/queries per second
      --remote-access-cacert string                                   CA who signed client certs file
      --remote-access-client-id string                                identifier used for remote access
      --remote-access-port int                                        port of remote access server for remote-enabled providers
      --remote-access-server-secret-name string                       name of secret containing remote access server's certificate
      --remote.advanced.batch-size int                                batch size for change requests (currently only used for aws-route53)
      --remote.advanced.max-retries int                               maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --remote.blocked-zone zone-id                                   Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --remote.ratelimiter.burst int                                  number of burst requests for rate limiter
      --remote.ratelimiter.enabled                                    enables rate limiter for DNS provider requests
      --remote.ratelimiter.qps int                                    maximum requests/queries per second
      --reschedule-delay duration                                     reschedule delay after losing provider
      --rfc2136.advanced.batch-size int                               batch size for change requests (currently only used for aws-route53)
      --rfc2136.advanced.max-retries int                              maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
      --rfc2136.blocked-zone zone-id                                  Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
      --rfc2136.ratelimiter.burst int                                 number of burst requests for rate limiter
      --rfc2136.ratelimiter.enabled                                   enables rate limiter for DNS provider requests
      --rfc2136.ratelimiter.qps int                                   maximum requests/queries per second
      --secrets.pool.size int                                         Worker pool size for pool secrets
      --server-port-http int                                          HTTP server port (serving /healthz, /metrics, ...)
      --service-dns.default.pool.resync-period duration               Period for resynchronization for pool default of controller service-dns
      --service-dns.default.pool.size int                             Worker pool size for pool default of controller service-dns
      --service-dns.dns-class string                                  identifier used to differentiate responsible controllers for entries of controller service-dns
      --service-dns.dns-target-class string                           identifier used to differentiate responsible dns controllers for target entries of controller service-dns
      --service-dns.exclude-domains stringArray                       excluded domains of controller service-dns
      --service-dns.key string                                        selecting key for annotation of controller service-dns
      --service-dns.pool.resync-period duration                       Period for resynchronization of controller service-dns
      --service-dns.pool.size int                                     Worker pool size of controller service-dns
      --service-dns.target-creator-label-name string                  label name to store the creator for generated DNS entries of controller service-dns
      --service-dns.target-creator-label-value string                 label value for creator label of controller service-dns
      --service-dns.target-name-prefix string                         name prefix in target namespace for cross cluster generation of controller service-dns
      --service-dns.target-namespace string                           target namespace for cross cluster generation of controller service-dns
      --service-dns.target-realms string                              realm(s) to use for generated DNS entries of controller service-dns
      --service-dns.targets.pool.size int                             Worker pool size for pool targets of controller service-dns
      --setup int                                                     number of processors for controller setup
      --target string                                                 target cluster for dns requests
      --target-creator-label-name string                              label name to store the creator for generated DNS entries, label name to store the creator for replicated DNS providers
      --target-creator-label-value string                             label value for creator label
      --target-name-prefix string                                     name prefix in target namespace for cross cluster generation, name prefix in target namespace for cross cluster replication
      --target-namespace string                                       target namespace for cross cluster generation
      --target-realms string                                          realm(s) to use for generated DNS entries, realm(s) to use for replicated DNS provider
      --target.burst int                                              option to set the maximum burst to the apiserver of the cluster target (default 100)
      --target.conditional-deploy-crds                                deployment of required crds for cluster target only if there is no managed resource in garden namespace deploying it
      --target.crds-shoot-no-cleanup-label                            add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster target
      --target.disable-deploy-crds                                    disable deployment of required crds for cluster target
      --target.id string                                              id for cluster target
      --target.migration-ids string                                   migration id for cluster target
      --target.qps int                                                option to set the maximum QPS to the apiserver of the cluster target (default 50)
      --targets.pool.size int                                         Worker pool size for pool targets
      --targetsources.pool.size int                                   Worker pool size for pool targetsources
      --ttl int                                                       Default time-to-live for DNS entries. Defines how long the record is kept in cache by DNS servers or resolvers.
  -v, --version                                                       version for dns-controller-manager
      --virtualservices.pool.size int                                 Worker pool size for pool virtualservices
      --watch-gateways-crds.default.pool.size int                     Worker pool size for pool default of controller watch-gateways-crds
      --watch-gateways-crds.pool.size int                             Worker pool size of controller watch-gateways-crds
      --zonepolicies.pool.size int                                    Worker pool size for pool zonepolicies
time="2026-11-09T14:42:09Z" level=info msg="waiting for everything to shutdown (max. 120 seconds)"
time="2026-11-09T14:42:09Z" level=info msg="dns-controller-manager exits."