2026/11/08 04:08:56 maxprocs: Leaving GOMAXPROCS=64: CPU quota undefined
nothing
Usage:
dns-controller-manager [flags]
Flags:
--accepted-maintainers string accepted maintainer key(s) for crds
--advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--alicloud-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--alicloud-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--alicloud-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--alicloud-dns.ratelimiter.burst int number of burst requests for rate limiter
--alicloud-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--alicloud-dns.ratelimiter.qps int maximum requests/queries per second
--annotation.default.pool.size int Worker pool size for pool default of controller annotation
--annotation.pool.size int Worker pool size of controller annotation
--annotation.setup int number of processors for controller setup of controller annotation
--aws-route53.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--aws-route53.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--aws-route53.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--aws-route53.ratelimiter.burst int number of burst requests for rate limiter
--aws-route53.ratelimiter.enabled enables rate limiter for DNS provider requests
--aws-route53.ratelimiter.qps int maximum requests/queries per second
--azure-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--azure-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--azure-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--azure-dns.ratelimiter.burst int number of burst requests for rate limiter
--azure-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--azure-dns.ratelimiter.qps int maximum requests/queries per second
--azure-private-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--azure-private-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--azure-private-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--azure-private-dns.ratelimiter.burst int number of burst requests for rate limiter
--azure-private-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--azure-private-dns.ratelimiter.qps int maximum requests/queries per second
--bind-address-http string HTTP server bind address
--blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--cache-ttl int Time-to-live for provider hosted zone cache
--cloudflare-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--cloudflare-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--cloudflare-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--cloudflare-dns.ratelimiter.burst int number of burst requests for rate limiter
--cloudflare-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--cloudflare-dns.ratelimiter.qps int maximum requests/queries per second
--compound.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.alicloud-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.alicloud-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.alicloud-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.alicloud-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.alicloud-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.alicloud-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.aws-route53.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.aws-route53.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.aws-route53.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.aws-route53.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.aws-route53.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.aws-route53.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.azure-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.azure-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.azure-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.azure-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.azure-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.azure-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.azure-private-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.azure-private-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.azure-private-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.azure-private-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.azure-private-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.azure-private-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.cache-ttl int Time-to-live for provider hosted zone cache of controller compound
--compound.cloudflare-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.cloudflare-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.cloudflare-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.cloudflare-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.cloudflare-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.cloudflare-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.default.pool.size int Worker pool size for pool default of controller compound
--compound.disable-dnsname-validation disable validation of domain names according to RFC 1123. of controller compound
--compound.disable-provider-types string comma separated list of provider types to disable of controller compound
--compound.disable-zone-state-caching disable use of cached dns zone state on changes of controller compound
--compound.dns-class string identifier used to differentiate responsible controllers for entries of controller compound
--compound.dns-delay duration delay between two dns reconciliations of controller compound
--compound.dns.pool.resync-period duration Period for resynchronization for pool dns of controller compound
--compound.dns.pool.size int Worker pool size for pool dns of controller compound
--compound.dry-run just check, don't modify of controller compound
--compound.entry-failure-backoff-base duration base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again of controller compound
--compound.entry-failure-backoff-factor int multiplier applied per consecutive failure for the entry failure backoff of controller compound
--compound.entry-failure-backoff-max duration maximum delay for the entry failure backoff of controller compound
--compound.gdch-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.gdch-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.gdch-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.gdch-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.gdch-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.gdch-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.google-clouddns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.google-clouddns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.google-clouddns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.google-clouddns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.google-clouddns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.google-clouddns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.infoblox-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.infoblox-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.infoblox-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.infoblox-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.infoblox-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.infoblox-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.local.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.local.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.local.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.local.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.local.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.local.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.lock-status-check-period duration interval for dns lock status checks of controller compound
--compound.netlify-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.netlify-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.netlify-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.netlify-dns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.netlify-dns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.netlify-dns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.openstack-designate.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.openstack-designate.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.openstack-designate.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.openstack-designate.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.openstack-designate.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.openstack-designate.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.pool.resync-period duration Period for resynchronization of controller compound
--compound.pool.size int Worker pool size of controller compound
--compound.powerdns.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.powerdns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.powerdns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.powerdns.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.powerdns.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.powerdns.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.provider-types string comma separated list of provider types to enable of controller compound
--compound.providers.pool.resync-period duration Period for resynchronization for pool providers of controller compound
--compound.providers.pool.size int Worker pool size for pool providers of controller compound
--compound.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.remote-access-cacert string CA who signed client certs file of controller compound
--compound.remote-access-client-id string identifier used for remote access of controller compound
--compound.remote-access-port int port of remote access server for remote-enabled providers of controller compound
--compound.remote-access-server-secret-name string name of secret containing remote access server's certificate of controller compound
--compound.remote.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.remote.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.remote.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.remote.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.remote.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.remote.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.reschedule-delay duration reschedule delay after losing provider of controller compound
--compound.rfc2136.advanced.batch-size int batch size for change requests (currently only used for aws-route53) of controller compound
--compound.rfc2136.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound
--compound.rfc2136.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing. of controller compound
--compound.rfc2136.ratelimiter.burst int number of burst requests for rate limiter of controller compound
--compound.rfc2136.ratelimiter.enabled enables rate limiter for DNS provider requests of controller compound
--compound.rfc2136.ratelimiter.qps int maximum requests/queries per second of controller compound
--compound.secrets.pool.size int Worker pool size for pool secrets of controller compound
--compound.setup int number of processors for controller setup of controller compound
--compound.ttl int Default time-to-live for DNS entries. Defines how long the record is kept in cache by DNS servers or resolvers. of controller compound
--compound.zonepolicies.pool.size int Worker pool size for pool zonepolicies of controller compound
--config string config file
-c, --controllers string comma separated list of controllers to start (<name>,<group>,all)
--cpuprofile string set file for cpu profiling
--default.pool.resync-period duration Period for resynchronization for pool default
--default.pool.size int Worker pool size for pool default
--disable-dnsname-validation disable validation of domain names according to RFC 1123.
--disable-namespace-restriction disable access restriction for namespace local access only
--disable-provider-types string comma separated list of provider types to disable
--disable-zone-state-caching disable use of cached dns zone state on changes
--dns-class string identifier used to differentiate responsible controllers for entries, identifier used to differentiate responsible controllers for providers
--dns-delay duration delay between two dns reconciliations
--dns-target-class string identifier used to differentiate responsible dns controllers for target entries, identifier used to differentiate responsible dns controllers for target providers
--dns.pool.resync-period duration Period for resynchronization for pool dns
--dns.pool.size int Worker pool size for pool dns
--dnsentry-source.default.pool.resync-period duration Period for resynchronization for pool default of controller dnsentry-source
--dnsentry-source.default.pool.size int Worker pool size for pool default of controller dnsentry-source
--dnsentry-source.dns-class string identifier used to differentiate responsible controllers for entries of controller dnsentry-source
--dnsentry-source.dns-target-class string identifier used to differentiate responsible dns controllers for target entries of controller dnsentry-source
--dnsentry-source.exclude-domains stringArray excluded domains of controller dnsentry-source
--dnsentry-source.key string selecting key for annotation of controller dnsentry-source
--dnsentry-source.pool.resync-period duration Period for resynchronization of controller dnsentry-source
--dnsentry-source.pool.size int Worker pool size of controller dnsentry-source
--dnsentry-source.target-creator-label-name string label name to store the creator for generated DNS entries of controller dnsentry-source
--dnsentry-source.target-creator-label-value string label value for creator label of controller dnsentry-source
--dnsentry-source.target-name-prefix string name prefix in target namespace for cross cluster generation of controller dnsentry-source
--dnsentry-source.target-namespace string target namespace for cross cluster generation of controller dnsentry-source
--dnsentry-source.target-realms string realm(s) to use for generated DNS entries of controller dnsentry-source
--dnsentry-source.targets.pool.size int Worker pool size for pool targets of controller dnsentry-source
--dnsprovider-replication.default.pool.resync-period duration Period for resynchronization for pool default of controller dnsprovider-replication
--dnsprovider-replication.default.pool.size int Worker pool size for pool default of controller dnsprovider-replication
--dnsprovider-replication.dns-class string identifier used to differentiate responsible controllers for providers of controller dnsprovider-replication
--dnsprovider-replication.dns-target-class string identifier used to differentiate responsible dns controllers for target providers of controller dnsprovider-replication
--dnsprovider-replication.pool.resync-period duration Period for resynchronization of controller dnsprovider-replication
--dnsprovider-replication.pool.size int Worker pool size of controller dnsprovider-replication
--dnsprovider-replication.target-creator-label-name string label name to store the creator for replicated DNS providers of controller dnsprovider-replication
--dnsprovider-replication.target-creator-label-value string label value for creator label of controller dnsprovider-replication
--dnsprovider-replication.target-name-prefix string name prefix in target namespace for cross cluster replication of controller dnsprovider-replication
--dnsprovider-replication.target-namespace string target namespace for cross cluster generation of controller dnsprovider-replication
--dnsprovider-replication.target-realms string realm(s) to use for replicated DNS provider of controller dnsprovider-replication
--dnsprovider-replication.targets.pool.size int Worker pool size for pool targets of controller dnsprovider-replication
--dry-run just check, don't modify
--enable-profiling enables profiling server at path /debug/pprof (needs option --server-port-http)
--entry-failure-backoff-base duration base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again
--entry-failure-backoff-factor int multiplier applied per consecutive failure for the entry failure backoff
--entry-failure-backoff-max duration maximum delay for the entry failure backoff
--exclude-domains stringArray excluded domains
--force-crd-update enforce update of crds even they are unmanaged
--gdch-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--gdch-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--gdch-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--gdch-dns.ratelimiter.burst int number of burst requests for rate limiter
--gdch-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--gdch-dns.ratelimiter.qps int maximum requests/queries per second
--google-clouddns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--google-clouddns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--google-clouddns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--google-clouddns.ratelimiter.burst int number of burst requests for rate limiter
--google-clouddns.ratelimiter.enabled enables rate limiter for DNS provider requests
--google-clouddns.ratelimiter.qps int maximum requests/queries per second
--grace-period duration inactivity grace period for detecting end of cleanup for shutdown
-h, --help help for dns-controller-manager
--httproutes.pool.size int Worker pool size for pool httproutes
--infoblox-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--infoblox-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--infoblox-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--infoblox-dns.ratelimiter.burst int number of burst requests for rate limiter
--infoblox-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--infoblox-dns.ratelimiter.qps int maximum requests/queries per second
--ingress-dns.default.pool.resync-period duration Period for resynchronization for pool default of controller ingress-dns
--ingress-dns.default.pool.size int Worker pool size for pool default of controller ingress-dns
--ingress-dns.dns-class string identifier used to differentiate responsible controllers for entries of controller ingress-dns
--ingress-dns.dns-target-class string identifier used to differentiate responsible dns controllers for target entries of controller ingress-dns
--ingress-dns.exclude-domains stringArray excluded domains of controller ingress-dns
--ingress-dns.key string selecting key for annotation of controller ingress-dns
--ingress-dns.pool.resync-period duration Period for resynchronization of controller ingress-dns
--ingress-dns.pool.size int Worker pool size of controller ingress-dns
--ingress-dns.target-creator-label-name string label name to store the creator for generated DNS entries of controller ingress-dns
--ingress-dns.target-creator-label-value string label value for creator label of controller ingress-dns
--ingress-dns.target-name-prefix string name prefix in target namespace for cross cluster generation of controller ingress-dns
--ingress-dns.target-namespace string target namespace for cross cluster generation of controller ingress-dns
--ingress-dns.target-realms string realm(s) to use for generated DNS entries of controller ingress-dns
--ingress-dns.targets.pool.size int Worker pool size for pool targets of controller ingress-dns
--istio-gateways-dns.default.pool.resync-period duration Period for resynchronization for pool default of controller istio-gateways-dns
--istio-gateways-dns.default.pool.size int Worker pool size for pool default of controller istio-gateways-dns
--istio-gateways-dns.dns-class string identifier used to differentiate responsible controllers for entries of controller istio-gateways-dns
--istio-gateways-dns.dns-target-class string identifier used to differentiate responsible dns controllers for target entries of controller istio-gateways-dns
--istio-gateways-dns.exclude-domains stringArray excluded domains of controller istio-gateways-dns
--istio-gateways-dns.key string selecting key for annotation of controller istio-gateways-dns
--istio-gateways-dns.pool.resync-period duration Period for resynchronization of controller istio-gateways-dns
--istio-gateways-dns.pool.size int Worker pool size of controller istio-gateways-dns
--istio-gateways-dns.target-creator-label-name string label name to store the creator for generated DNS entries of controller istio-gateways-dns
--istio-gateways-dns.target-creator-label-value string label value for creator label of controller istio-gateways-dns
--istio-gateways-dns.target-name-prefix string name prefix in target namespace for cross cluster generation of controller istio-gateways-dns
--istio-gateways-dns.target-namespace string target namespace for cross cluster generation of controller istio-gateways-dns
--istio-gateways-dns.target-realms string realm(s) to use for generated DNS entries of controller istio-gateways-dns
--istio-gateways-dns.targets.pool.size int Worker pool size for pool targets of controller istio-gateways-dns
--istio-gateways-dns.targetsources.pool.size int Worker pool size for pool targetsources of controller istio-gateways-dns
--istio-gateways-dns.virtualservices.pool.size int Worker pool size for pool virtualservices of controller istio-gateways-dns
--k8s-gateways-dns.default.pool.resync-period duration Period for resynchronization for pool default of controller k8s-gateways-dns
--k8s-gateways-dns.default.pool.size int Worker pool size for pool default of controller k8s-gateways-dns
--k8s-gateways-dns.dns-class string identifier used to differentiate responsible controllers for entries of controller k8s-gateways-dns
--k8s-gateways-dns.dns-target-class string identifier used to differentiate responsible dns controllers for target entries of controller k8s-gateways-dns
--k8s-gateways-dns.exclude-domains stringArray excluded domains of controller k8s-gateways-dns
--k8s-gateways-dns.httproutes.pool.size int Worker pool size for pool httproutes of controller k8s-gateways-dns
--k8s-gateways-dns.key string selecting key for annotation of controller k8s-gateways-dns
--k8s-gateways-dns.pool.resync-period duration Period for resynchronization of controller k8s-gateways-dns
--k8s-gateways-dns.pool.size int Worker pool size of controller k8s-gateways-dns
--k8s-gateways-dns.target-creator-label-name string label name to store the creator for generated DNS entries of controller k8s-gateways-dns
--k8s-gateways-dns.target-creator-label-value string label value for creator label of controller k8s-gateways-dns
--k8s-gateways-dns.target-name-prefix string name prefix in target namespace for cross cluster generation of controller k8s-gateways-dns
--k8s-gateways-dns.target-namespace string target namespace for cross cluster generation of controller k8s-gateways-dns
--k8s-gateways-dns.target-realms string realm(s) to use for generated DNS entries of controller k8s-gateways-dns
--k8s-gateways-dns.targets.pool.size int Worker pool size for pool targets of controller k8s-gateways-dns
--key string selecting key for annotation
--kubeconfig string default cluster access
--kubeconfig.burst int option to set the maximum burst to the apiserver of the cluster default (default 100)
--kubeconfig.conditional-deploy-crds deployment of required crds for cluster default only if there is no managed resource in garden namespace deploying it
--kubeconfig.crds-shoot-no-cleanup-label add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster default
--kubeconfig.disable-deploy-crds disable deployment of required crds for cluster default
--kubeconfig.id string id for cluster default
--kubeconfig.migration-ids string migration id for cluster default
--kubeconfig.qps int option to set the maximum QPS to the apiserver of the cluster default (default 50)
--lease-duration duration lease duration
--lease-name string name for lease object
--lease-renew-deadline duration lease renew deadline
--lease-resource-lock string determines which resource lock to use for leader election, defaults to 'leases'
--lease-retry-period duration lease retry period
--local.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--local.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--local.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--local.ratelimiter.burst int number of burst requests for rate limiter
--local.ratelimiter.enabled enables rate limiter for DNS provider requests
--local.ratelimiter.qps int maximum requests/queries per second
--lock-status-check-period duration interval for dns lock status checks
-D, --log-level string logrus log level
--maintainer string maintainer key for crds (default "dns-controller-manager")
--name string name used for controller manager (default "dns-controller-manager")
--namespace string namespace for lease (default "kube-system")
-n, --namespace-local-access-only enable access restriction for namespace local access only (deprecated)
--netlify-dns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--netlify-dns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--netlify-dns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--netlify-dns.ratelimiter.burst int number of burst requests for rate limiter
--netlify-dns.ratelimiter.enabled enables rate limiter for DNS provider requests
--netlify-dns.ratelimiter.qps int maximum requests/queries per second
--omit-lease omit lease for development
--openstack-designate.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--openstack-designate.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--openstack-designate.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--openstack-designate.ratelimiter.burst int number of burst requests for rate limiter
--openstack-designate.ratelimiter.enabled enables rate limiter for DNS provider requests
--openstack-designate.ratelimiter.qps int maximum requests/queries per second
--plugin-file string directory containing go plugins
--pool.resync-period duration Period for resynchronization
--pool.size int Worker pool size
--powerdns.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--powerdns.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--powerdns.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--powerdns.ratelimiter.burst int number of burst requests for rate limiter
--powerdns.ratelimiter.enabled enables rate limiter for DNS provider requests
--powerdns.ratelimiter.qps int maximum requests/queries per second
--provider-types string comma separated list of provider types to enable
--providers string cluster to look for provider objects
--providers.burst int option to set the maximum burst to the apiserver of the cluster provider (default 100)
--providers.conditional-deploy-crds deployment of required crds for cluster provider only if there is no managed resource in garden namespace deploying it
--providers.crds-shoot-no-cleanup-label add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster provider
--providers.disable-deploy-crds disable deployment of required crds for cluster provider
--providers.id string id for cluster provider
--providers.migration-ids string migration id for cluster provider
--providers.pool.resync-period duration Period for resynchronization for pool providers
--providers.pool.size int Worker pool size for pool providers
--providers.qps int option to set the maximum QPS to the apiserver of the cluster provider (default 50)
--ratelimiter.burst int number of burst requests for rate limiter
--ratelimiter.enabled enables rate limiter for DNS provider requests
--ratelimiter.qps int maximum requests/queries per second
--remote-access-cacert string CA who signed client certs file
--remote-access-client-id string identifier used for remote access
--remote-access-port int port of remote access server for remote-enabled providers
--remote-access-server-secret-name string name of secret containing remote access server's certificate
--remote.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--remote.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--remote.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--remote.ratelimiter.burst int number of burst requests for rate limiter
--remote.ratelimiter.enabled enables rate limiter for DNS provider requests
--remote.ratelimiter.qps int maximum requests/queries per second
--reschedule-delay duration reschedule delay after losing provider
--rfc2136.advanced.batch-size int batch size for change requests (currently only used for aws-route53)
--rfc2136.advanced.max-retries int maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53)
--rfc2136.blocked-zone zone-id Blocks a zone given in the format zone-id from a provider as if the zone is not existing.
--rfc2136.ratelimiter.burst int number of burst requests for rate limiter
--rfc2136.ratelimiter.enabled enables rate limiter for DNS provider requests
--rfc2136.ratelimiter.qps int maximum requests/queries per second
--secrets.pool.size int Worker pool size for pool secrets
--server-port-http int HTTP server port (serving /healthz, /metrics, ...)
--service-dns.default.pool.resync-period duration Period for resynchronization for pool default of controller service-dns
--service-dns.default.pool.size int Worker pool size for pool default of controller service-dns
--service-dns.dns-class string identifier used to differentiate responsible controllers for entries of controller service-dns
--service-dns.dns-target-class string identifier used to differentiate responsible dns controllers for target entries of controller service-dns
--service-dns.exclude-domains stringArray excluded domains of controller service-dns
--service-dns.key string selecting key for annotation of controller service-dns
--service-dns.pool.resync-period duration Period for resynchronization of controller service-dns
--service-dns.pool.size int Worker pool size of controller service-dns
--service-dns.target-creator-label-name string label name to store the creator for generated DNS entries of controller service-dns
--service-dns.target-creator-label-value string label value for creator label of controller service-dns
--service-dns.target-name-prefix string name prefix in target namespace for cross cluster generation of controller service-dns
--service-dns.target-namespace string target namespace for cross cluster generation of controller service-dns
--service-dns.target-realms string realm(s) to use for generated DNS entries of controller service-dns
--service-dns.targets.pool.size int Worker pool size for pool targets of controller service-dns
--setup int number of processors for controller setup
--target string target cluster for dns requests
--target-creator-label-name string label name to store the creator for generated DNS entries, label name to store the creator for replicated DNS providers
--target-creator-label-value string label value for creator label
--target-name-prefix string name prefix in target namespace for cross cluster generation, name prefix in target namespace for cross cluster replication
--target-namespace string target namespace for cross cluster generation
--target-realms string realm(s) to use for generated DNS entries, realm(s) to use for replicated DNS provider
--target.burst int option to set the maximum burst to the apiserver of the cluster target (default 100)
--target.conditional-deploy-crds deployment of required crds for cluster target only if there is no managed resource in garden namespace deploying it
--target.crds-shoot-no-cleanup-label add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster target
--target.disable-deploy-crds disable deployment of required crds for cluster target
--target.id string id for cluster target
--target.migration-ids string migration id for cluster target
--target.qps int option to set the maximum QPS to the apiserver of the cluster target (default 50)
--targets.pool.size int Worker pool size for pool targets
--targetsources.pool.size int Worker pool size for pool targetsources
--ttl int Default time-to-live for DNS entries. Defines how long the record is kept in cache by DNS servers or resolvers.
-v, --version version for dns-controller-manager
--virtualservices.pool.size int Worker pool size for pool virtualservices
--watch-gateways-crds.default.pool.size int Worker pool size for pool default of controller watch-gateways-crds
--watch-gateways-crds.pool.size int Worker pool size of controller watch-gateways-crds
--zonepolicies.pool.size int Worker pool size for pool zonepolicies
time="2026-11-08T04:08:56Z" level=info msg="waiting for everything to shutdown (max. 120 seconds)"
time="2026-11-08T04:08:56Z" level=info msg="dns-controller-manager exits."
Options (387)
| Option | Description | Source |
|---|---|---|
--accepted-maintainers string | accepted maintainer key(s) for crds | help |
--advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--alicloud-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--alicloud-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--alicloud-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--alicloud-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--alicloud-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--alicloud-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--annotation.default.pool.size int | Worker pool size for pool default of controller annotation | help |
--annotation.pool.size int | Worker pool size of controller annotation | help |
--annotation.setup int | number of processors for controller setup of controller annotation | help |
--aws-route53.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--aws-route53.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--aws-route53.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--aws-route53.ratelimiter.burst int | number of burst requests for rate limiter | help |
--aws-route53.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--aws-route53.ratelimiter.qps int | maximum requests/queries per second | help |
--azure-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--azure-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--azure-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--azure-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--azure-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--azure-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--azure-private-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--azure-private-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--azure-private-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--azure-private-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--azure-private-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--azure-private-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--bind-address-http string | HTTP server bind address | help |
--blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--cache-ttl int | Time-to-live for provider hosted zone cache | help |
--cloudflare-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--cloudflare-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--cloudflare-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--cloudflare-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--cloudflare-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--cloudflare-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--compound.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.alicloud-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.alicloud-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.alicloud-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.alicloud-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.alicloud-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.alicloud-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.aws-route53.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.aws-route53.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.aws-route53.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.aws-route53.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.aws-route53.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.aws-route53.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.azure-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.azure-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.azure-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.azure-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.azure-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.azure-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.azure-private-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.azure-private-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.azure-private-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.azure-private-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.azure-private-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.azure-private-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.cache-ttl int | Time-to-live for provider hosted zone cache of controller compound | help |
--compound.cloudflare-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.cloudflare-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.cloudflare-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.cloudflare-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.cloudflare-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.cloudflare-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.default.pool.size int | Worker pool size for pool default of controller compound | help |
--compound.disable-dnsname-validation | disable validation of domain names according to RFC 1123. | help |
--compound.disable-provider-types string | comma separated list of provider types to disable of controller compound | help |
--compound.disable-zone-state-caching | disable use of cached dns zone state on changes of controller compound | help |
--compound.dns-class string | identifier used to differentiate responsible controllers for entries of controller compound | help |
--compound.dns-delay duration | delay between two dns reconciliations of controller compound | help |
--compound.dns.pool.resync-period duration | Period for resynchronization for pool dns of controller compound | help |
--compound.dns.pool.size int | Worker pool size for pool dns of controller compound | help |
--compound.dry-run | just check, don't modify of controller compound | help |
--compound.entry-failure-backoff-base duration | base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again of controller compound | help |
--compound.entry-failure-backoff-factor int | multiplier applied per consecutive failure for the entry failure backoff of controller compound | help |
--compound.entry-failure-backoff-max duration | maximum delay for the entry failure backoff of controller compound | help |
--compound.gdch-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.gdch-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.gdch-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.gdch-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.gdch-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.gdch-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.google-clouddns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.google-clouddns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.google-clouddns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.google-clouddns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.google-clouddns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.google-clouddns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.infoblox-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.infoblox-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.infoblox-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.infoblox-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.infoblox-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.infoblox-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.local.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.local.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.local.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.local.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.local.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.local.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.lock-status-check-period duration | interval for dns lock status checks of controller compound | help |
--compound.netlify-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.netlify-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.netlify-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.netlify-dns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.netlify-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.netlify-dns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.openstack-designate.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.openstack-designate.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.openstack-designate.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.openstack-designate.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.openstack-designate.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.openstack-designate.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.pool.resync-period duration | Period for resynchronization of controller compound | help |
--compound.pool.size int | Worker pool size of controller compound | help |
--compound.powerdns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.powerdns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.powerdns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.powerdns.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.powerdns.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.powerdns.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.provider-types string | comma separated list of provider types to enable of controller compound | help |
--compound.providers.pool.resync-period duration | Period for resynchronization for pool providers of controller compound | help |
--compound.providers.pool.size int | Worker pool size for pool providers of controller compound | help |
--compound.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.remote-access-cacert string | CA who signed client certs file of controller compound | help |
--compound.remote-access-client-id string | identifier used for remote access of controller compound | help |
--compound.remote-access-port int | port of remote access server for remote-enabled providers of controller compound | help |
--compound.remote-access-server-secret-name string | name of secret containing remote access server's certificate of controller compound | help |
--compound.remote.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.remote.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.remote.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.remote.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.remote.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.remote.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.reschedule-delay duration | reschedule delay after losing provider of controller compound | help |
--compound.rfc2136.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) of controller compound | help |
--compound.rfc2136.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) of controller compound | help |
--compound.rfc2136.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--compound.rfc2136.ratelimiter.burst int | number of burst requests for rate limiter of controller compound | help |
--compound.rfc2136.ratelimiter.enabled | enables rate limiter for DNS provider requests of controller compound | help |
--compound.rfc2136.ratelimiter.qps int | maximum requests/queries per second of controller compound | help |
--compound.secrets.pool.size int | Worker pool size for pool secrets of controller compound | help |
--compound.setup int | number of processors for controller setup of controller compound | help |
--compound.ttl int | Default time-to-live for DNS entries. | help |
--compound.zonepolicies.pool.size int | Worker pool size for pool zonepolicies of controller compound | help |
--config string | config file | help |
-c, --controllers string | comma separated list of controllers to start (<name>,<group>,all) | help |
--cpuprofile string | set file for cpu profiling | help |
--default.pool.resync-period duration | Period for resynchronization for pool default | help |
--default.pool.size int | Worker pool size for pool default | help |
--disable-dnsname-validation | disable validation of domain names according to RFC 1123. | help |
--disable-namespace-restriction | disable access restriction for namespace local access only | help |
--disable-provider-types string | comma separated list of provider types to disable | help |
--disable-zone-state-caching | disable use of cached dns zone state on changes | help |
--dns-class string | identifier used to differentiate responsible controllers for entries, identifier used to differentiate responsible controllers for providers | help |
--dns-delay duration | delay between two dns reconciliations | help |
--dns-target-class string | identifier used to differentiate responsible dns controllers for target entries, identifier used to differentiate responsible dns controllers for target providers | help |
--dns.pool.resync-period duration | Period for resynchronization for pool dns | help |
--dns.pool.size int | Worker pool size for pool dns | help |
--dnsentry-source.default.pool.resync-period duration | Period for resynchronization for pool default of controller dnsentry-source | help |
--dnsentry-source.default.pool.size int | Worker pool size for pool default of controller dnsentry-source | help |
--dnsentry-source.dns-class string | identifier used to differentiate responsible controllers for entries of controller dnsentry-source | help |
--dnsentry-source.dns-target-class string | identifier used to differentiate responsible dns controllers for target entries of controller dnsentry-source | help |
--dnsentry-source.exclude-domains stringArray | excluded domains of controller dnsentry-source | help |
--dnsentry-source.key string | selecting key for annotation of controller dnsentry-source | help |
--dnsentry-source.pool.resync-period duration | Period for resynchronization of controller dnsentry-source | help |
--dnsentry-source.pool.size int | Worker pool size of controller dnsentry-source | help |
--dnsentry-source.target-creator-label-name string | label name to store the creator for generated DNS entries of controller dnsentry-source | help |
--dnsentry-source.target-creator-label-value string | label value for creator label of controller dnsentry-source | help |
--dnsentry-source.target-name-prefix string | name prefix in target namespace for cross cluster generation of controller dnsentry-source | help |
--dnsentry-source.target-namespace string | target namespace for cross cluster generation of controller dnsentry-source | help |
--dnsentry-source.target-realms string | realm(s) to use for generated DNS entries of controller dnsentry-source | help |
--dnsentry-source.targets.pool.size int | Worker pool size for pool targets of controller dnsentry-source | help |
--dnsprovider-replication.default.pool.resync-period duration | Period for resynchronization for pool default of controller dnsprovider-replication | help |
--dnsprovider-replication.default.pool.size int | Worker pool size for pool default of controller dnsprovider-replication | help |
--dnsprovider-replication.dns-class string | identifier used to differentiate responsible controllers for providers of controller dnsprovider-replication | help |
--dnsprovider-replication.dns-target-class string | identifier used to differentiate responsible dns controllers for target providers of controller dnsprovider-replication | help |
--dnsprovider-replication.pool.resync-period duration | Period for resynchronization of controller dnsprovider-replication | help |
--dnsprovider-replication.pool.size int | Worker pool size of controller dnsprovider-replication | help |
--dnsprovider-replication.target-creator-label-name string | label name to store the creator for replicated DNS providers of controller dnsprovider-replication | help |
--dnsprovider-replication.target-creator-label-value string | label value for creator label of controller dnsprovider-replication | help |
--dnsprovider-replication.target-name-prefix string | name prefix in target namespace for cross cluster replication of controller dnsprovider-replication | help |
--dnsprovider-replication.target-namespace string | target namespace for cross cluster generation of controller dnsprovider-replication | help |
--dnsprovider-replication.target-realms string | realm(s) to use for replicated DNS provider of controller dnsprovider-replication | help |
--dnsprovider-replication.targets.pool.size int | Worker pool size for pool targets of controller dnsprovider-replication | help |
--dry-run | just check, don't modify | help |
--enable-profiling | enables profiling server at path /debug/pprof (needs option --server-port-http) | help |
--entry-failure-backoff-base duration | base delay for the exponential backoff applied to persistently failing entries before they trigger a hosted zone reconciliation again | help |
--entry-failure-backoff-factor int | multiplier applied per consecutive failure for the entry failure backoff | help |
--entry-failure-backoff-max duration | maximum delay for the entry failure backoff | help |
--exclude-domains stringArray | excluded domains | help |
--force-crd-update | enforce update of crds even they are unmanaged | help |
--gdch-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--gdch-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--gdch-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--gdch-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--gdch-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--gdch-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--google-clouddns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--google-clouddns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--google-clouddns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--google-clouddns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--google-clouddns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--google-clouddns.ratelimiter.qps int | maximum requests/queries per second | help |
--grace-period duration | inactivity grace period for detecting end of cleanup for shutdown | help |
-h, --help | help for dns-controller-manager | help |
--httproutes.pool.size int | Worker pool size for pool httproutes | help |
--infoblox-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--infoblox-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--infoblox-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--infoblox-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--infoblox-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--infoblox-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--ingress-dns.default.pool.resync-period duration | Period for resynchronization for pool default of controller ingress-dns | help |
--ingress-dns.default.pool.size int | Worker pool size for pool default of controller ingress-dns | help |
--ingress-dns.dns-class string | identifier used to differentiate responsible controllers for entries of controller ingress-dns | help |
--ingress-dns.dns-target-class string | identifier used to differentiate responsible dns controllers for target entries of controller ingress-dns | help |
--ingress-dns.exclude-domains stringArray | excluded domains of controller ingress-dns | help |
--ingress-dns.key string | selecting key for annotation of controller ingress-dns | help |
--ingress-dns.pool.resync-period duration | Period for resynchronization of controller ingress-dns | help |
--ingress-dns.pool.size int | Worker pool size of controller ingress-dns | help |
--ingress-dns.target-creator-label-name string | label name to store the creator for generated DNS entries of controller ingress-dns | help |
--ingress-dns.target-creator-label-value string | label value for creator label of controller ingress-dns | help |
--ingress-dns.target-name-prefix string | name prefix in target namespace for cross cluster generation of controller ingress-dns | help |
--ingress-dns.target-namespace string | target namespace for cross cluster generation of controller ingress-dns | help |
--ingress-dns.target-realms string | realm(s) to use for generated DNS entries of controller ingress-dns | help |
--ingress-dns.targets.pool.size int | Worker pool size for pool targets of controller ingress-dns | help |
--istio-gateways-dns.default.pool.resync-period duration | Period for resynchronization for pool default of controller istio-gateways-dns | help |
--istio-gateways-dns.default.pool.size int | Worker pool size for pool default of controller istio-gateways-dns | help |
--istio-gateways-dns.dns-class string | identifier used to differentiate responsible controllers for entries of controller istio-gateways-dns | help |
--istio-gateways-dns.dns-target-class string | identifier used to differentiate responsible dns controllers for target entries of controller istio-gateways-dns | help |
--istio-gateways-dns.exclude-domains stringArray | excluded domains of controller istio-gateways-dns | help |
--istio-gateways-dns.key string | selecting key for annotation of controller istio-gateways-dns | help |
--istio-gateways-dns.pool.resync-period duration | Period for resynchronization of controller istio-gateways-dns | help |
--istio-gateways-dns.pool.size int | Worker pool size of controller istio-gateways-dns | help |
--istio-gateways-dns.target-creator-label-name string | label name to store the creator for generated DNS entries of controller istio-gateways-dns | help |
--istio-gateways-dns.target-creator-label-value string | label value for creator label of controller istio-gateways-dns | help |
--istio-gateways-dns.target-name-prefix string | name prefix in target namespace for cross cluster generation of controller istio-gateways-dns | help |
--istio-gateways-dns.target-namespace string | target namespace for cross cluster generation of controller istio-gateways-dns | help |
--istio-gateways-dns.target-realms string | realm(s) to use for generated DNS entries of controller istio-gateways-dns | help |
--istio-gateways-dns.targets.pool.size int | Worker pool size for pool targets of controller istio-gateways-dns | help |
--istio-gateways-dns.targetsources.pool.size int | Worker pool size for pool targetsources of controller istio-gateways-dns | help |
--istio-gateways-dns.virtualservices.pool.size int | Worker pool size for pool virtualservices of controller istio-gateways-dns | help |
--k8s-gateways-dns.default.pool.resync-period duration | Period for resynchronization for pool default of controller k8s-gateways-dns | help |
--k8s-gateways-dns.default.pool.size int | Worker pool size for pool default of controller k8s-gateways-dns | help |
--k8s-gateways-dns.dns-class string | identifier used to differentiate responsible controllers for entries of controller k8s-gateways-dns | help |
--k8s-gateways-dns.dns-target-class string | identifier used to differentiate responsible dns controllers for target entries of controller k8s-gateways-dns | help |
--k8s-gateways-dns.exclude-domains stringArray | excluded domains of controller k8s-gateways-dns | help |
--k8s-gateways-dns.httproutes.pool.size int | Worker pool size for pool httproutes of controller k8s-gateways-dns | help |
--k8s-gateways-dns.key string | selecting key for annotation of controller k8s-gateways-dns | help |
--k8s-gateways-dns.pool.resync-period duration | Period for resynchronization of controller k8s-gateways-dns | help |
--k8s-gateways-dns.pool.size int | Worker pool size of controller k8s-gateways-dns | help |
--k8s-gateways-dns.target-creator-label-name string | label name to store the creator for generated DNS entries of controller k8s-gateways-dns | help |
--k8s-gateways-dns.target-creator-label-value string | label value for creator label of controller k8s-gateways-dns | help |
--k8s-gateways-dns.target-name-prefix string | name prefix in target namespace for cross cluster generation of controller k8s-gateways-dns | help |
--k8s-gateways-dns.target-namespace string | target namespace for cross cluster generation of controller k8s-gateways-dns | help |
--k8s-gateways-dns.target-realms string | realm(s) to use for generated DNS entries of controller k8s-gateways-dns | help |
--k8s-gateways-dns.targets.pool.size int | Worker pool size for pool targets of controller k8s-gateways-dns | help |
--key string | selecting key for annotation | help |
--kubeconfig string | default cluster access | help |
--kubeconfig.burst int | option to set the maximum burst to the apiserver of the cluster default (default 100) | help |
--kubeconfig.conditional-deploy-crds | deployment of required crds for cluster default only if there is no managed resource in garden namespace deploying it | help |
--kubeconfig.crds-shoot-no-cleanup-label | add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster default | help |
--kubeconfig.disable-deploy-crds | disable deployment of required crds for cluster default | help |
--kubeconfig.id string | id for cluster default | help |
--kubeconfig.migration-ids string | migration id for cluster default | help |
--kubeconfig.qps int | option to set the maximum QPS to the apiserver of the cluster default (default 50) | help |
--lease-duration duration | lease duration | help |
--lease-name string | name for lease object | help |
--lease-renew-deadline duration | lease renew deadline | help |
--lease-resource-lock string | determines which resource lock to use for leader election, defaults to 'leases' | help |
--lease-retry-period duration | lease retry period | help |
--local.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--local.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--local.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--local.ratelimiter.burst int | number of burst requests for rate limiter | help |
--local.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--local.ratelimiter.qps int | maximum requests/queries per second | help |
--lock-status-check-period duration | interval for dns lock status checks | help |
-D, --log-level string | logrus log level | help |
--maintainer string | maintainer key for crds (default "dns-controller-manager") | help |
--name string | name used for controller manager (default "dns-controller-manager") | help |
--namespace string | namespace for lease (default "kube-system") | help |
-n, --namespace-local-access-only | enable access restriction for namespace local access only (deprecated) | help |
--netlify-dns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--netlify-dns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--netlify-dns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--netlify-dns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--netlify-dns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--netlify-dns.ratelimiter.qps int | maximum requests/queries per second | help |
--omit-lease | omit lease for development | help |
--openstack-designate.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--openstack-designate.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--openstack-designate.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--openstack-designate.ratelimiter.burst int | number of burst requests for rate limiter | help |
--openstack-designate.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--openstack-designate.ratelimiter.qps int | maximum requests/queries per second | help |
--plugin-file string | directory containing go plugins | help |
--pool.resync-period duration | Period for resynchronization | help |
--pool.size int | Worker pool size | help |
--powerdns.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--powerdns.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--powerdns.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--powerdns.ratelimiter.burst int | number of burst requests for rate limiter | help |
--powerdns.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--powerdns.ratelimiter.qps int | maximum requests/queries per second | help |
--provider-types string | comma separated list of provider types to enable | help |
--providers string | cluster to look for provider objects | help |
--providers.burst int | option to set the maximum burst to the apiserver of the cluster provider (default 100) | help |
--providers.conditional-deploy-crds | deployment of required crds for cluster provider only if there is no managed resource in garden namespace deploying it | help |
--providers.crds-shoot-no-cleanup-label | add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster provider | help |
--providers.disable-deploy-crds | disable deployment of required crds for cluster provider | help |
--providers.id string | id for cluster provider | help |
--providers.migration-ids string | migration id for cluster provider | help |
--providers.pool.resync-period duration | Period for resynchronization for pool providers | help |
--providers.pool.size int | Worker pool size for pool providers | help |
--providers.qps int | option to set the maximum QPS to the apiserver of the cluster provider (default 50) | help |
--ratelimiter.burst int | number of burst requests for rate limiter | help |
--ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--ratelimiter.qps int | maximum requests/queries per second | help |
--remote-access-cacert string | CA who signed client certs file | help |
--remote-access-client-id string | identifier used for remote access | help |
--remote-access-port int | port of remote access server for remote-enabled providers | help |
--remote-access-server-secret-name string | name of secret containing remote access server's certificate | help |
--remote.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--remote.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--remote.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--remote.ratelimiter.burst int | number of burst requests for rate limiter | help |
--remote.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--remote.ratelimiter.qps int | maximum requests/queries per second | help |
--reschedule-delay duration | reschedule delay after losing provider | help |
--rfc2136.advanced.batch-size int | batch size for change requests (currently only used for aws-route53) | help |
--rfc2136.advanced.max-retries int | maximum number of retries to avoid paging stops on throttling (currently only used for aws-route53) | help |
--rfc2136.blocked-zone zone-id | Blocks a zone given in the format zone-id from a provider as if the zone is not existing. | help |
--rfc2136.ratelimiter.burst int | number of burst requests for rate limiter | help |
--rfc2136.ratelimiter.enabled | enables rate limiter for DNS provider requests | help |
--rfc2136.ratelimiter.qps int | maximum requests/queries per second | help |
--secrets.pool.size int | Worker pool size for pool secrets | help |
--server-port-http int | HTTP server port (serving /healthz, /metrics, ...) | help |
--service-dns.default.pool.resync-period duration | Period for resynchronization for pool default of controller service-dns | help |
--service-dns.default.pool.size int | Worker pool size for pool default of controller service-dns | help |
--service-dns.dns-class string | identifier used to differentiate responsible controllers for entries of controller service-dns | help |
--service-dns.dns-target-class string | identifier used to differentiate responsible dns controllers for target entries of controller service-dns | help |
--service-dns.exclude-domains stringArray | excluded domains of controller service-dns | help |
--service-dns.key string | selecting key for annotation of controller service-dns | help |
--service-dns.pool.resync-period duration | Period for resynchronization of controller service-dns | help |
--service-dns.pool.size int | Worker pool size of controller service-dns | help |
--service-dns.target-creator-label-name string | label name to store the creator for generated DNS entries of controller service-dns | help |
--service-dns.target-creator-label-value string | label value for creator label of controller service-dns | help |
--service-dns.target-name-prefix string | name prefix in target namespace for cross cluster generation of controller service-dns | help |
--service-dns.target-namespace string | target namespace for cross cluster generation of controller service-dns | help |
--service-dns.target-realms string | realm(s) to use for generated DNS entries of controller service-dns | help |
--service-dns.targets.pool.size int | Worker pool size for pool targets of controller service-dns | help |
--setup int | number of processors for controller setup | help |
--target string | target cluster for dns requests | help |
--target-creator-label-name string | label name to store the creator for generated DNS entries, label name to store the creator for replicated DNS providers | help |
--target-creator-label-value string | label value for creator label | help |
--target-name-prefix string | name prefix in target namespace for cross cluster generation, name prefix in target namespace for cross cluster replication | help |
--target-namespace string | target namespace for cross cluster generation | help |
--target-realms string | realm(s) to use for generated DNS entries, realm(s) to use for replicated DNS provider | help |
--target.burst int | option to set the maximum burst to the apiserver of the cluster target (default 100) | help |
--target.conditional-deploy-crds | deployment of required crds for cluster target only if there is no managed resource in garden namespace deploying it | help |
--target.crds-shoot-no-cleanup-label | add the label 'shoot.gardener.cloud/no-cleanup=true' for CRDS deployed on cluster target | help |
--target.disable-deploy-crds | disable deployment of required crds for cluster target | help |
--target.id string | id for cluster target | help |
--target.migration-ids string | migration id for cluster target | help |
--target.qps int | option to set the maximum QPS to the apiserver of the cluster target (default 50) | help |
--targets.pool.size int | Worker pool size for pool targets | help |
--targetsources.pool.size int | Worker pool size for pool targetsources | help |
--ttl int | Default time-to-live for DNS entries. | help |
-v, --version | version for dns-controller-manager | help |
--virtualservices.pool.size int | Worker pool size for pool virtualservices | help |
--watch-gateways-crds.default.pool.size int | Worker pool size for pool default of controller watch-gateways-crds | help |
--watch-gateways-crds.pool.size int | Worker pool size of controller watch-gateways-crds | help |
--zonepolicies.pool.size int | Worker pool size for pool zonepolicies | help |