Important Announcement!

This deprecated version of TLS Protect for Kubernetes, originally known as Jetstack Secure, will be PERMANENTLY SHUTDOWN on May 19, 2025. If you're still using this version, please work with your CyberArk/Venafi account team to transition to the current version of TLS Protect for Kubernetes.

cert-discovery-venafi image flags

Usage of cert-discovery-venafi:
-ca-cert string
PEM-encoded content of trusted CA certificate(s).
-ca-cert-file string
Path to a file containing the PEM-encoded CA certificate(s). If set, takes precedence over --ca-cert.
-enable-leader-election
Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
-kubeconfig string
Paths to a kubeconfig. Only required if out-of-cluster.
-leader-election-id string
The name of the configmap used to coordinate leader election between controller-managers. (default "cert-discovery-venafi-leader-election")
-max-concurrent-reconciles int
Number of workers that may be concurrently call the Venafi TPP API. (default 1)
-metrics-addr string
The address the metric endpoint binds to. (default ":8080")
-tpp-access-token string
The TPP access token. ($VENAFI_TPP_ACCESS_TOKEN)
-tpp-url string
The URL of the TPP Web SDK. ($VENAFI_TPP_URL)
-tpp-zone string
The TPP zone. ($VENAFI_TPP_ZONE)
-zap-devel
Development Mode defaults(encoder=consoleEncoder,logLevel=Debug,stackTraceLevel=Warn). Production Mode defaults(encoder=jsonEncoder,logLevel=Info,stackTraceLevel=Error)
-zap-encoder value
Zap log encoding (one of 'json' or 'console')
-zap-log-level value
Zap Level to configure the verbosity of logging. Can be one of 'debug', 'info', 'error', or any integer value > 0 which corresponds to custom debug levels of increasing verbosity
-zap-stacktrace-level value
Zap Level at and above which stacktraces are captured (one of 'info', 'error', 'panic').
-zap-time-encoding value
Zap time encoding (one of 'epoch', 'millis', 'nano', 'iso8601', 'rfc3339' or 'rfc3339nano'). Defaults to 'epoch'.
Copy to clipboard

On this page