ingress-nginx-helm/docs/user-guide/cli-arguments.md

Command line arguments

The following command line arguments are accepted by the Ingress controller executable.

They are set in the container spec of the nginx-ingress-controller Deployment manifest (see deploy/with-rbac.yaml or deploy/without-rbac.yaml).

Argument	Description
--alsologtostderr	log to standard error as well as files
--annotations-prefix string	Prefix of the Ingress annotations specific to the NGINX controller. (default "nginx.ingress.kubernetes.io")
--apiserver-host string	Address of the Kubernetes API server. Takes the form "protocol://address:port". If not specified, it is assumed the program runs inside a Kubernetes cluster and local discovery is attempted.
--configmap string	Name of the ConfigMap containing custom global configurations for the controller.
--default-backend-service string	Service used to serve HTTP requests not matching any known server name (catch-all). Takes the form "namespace/name". The controller configures NGINX to forward requests to the first port of this Service.
--default-server-port int	Port to use for exposing the default server (catch-all). (default 8181)
--default-ssl-certificate string	Secret containing a SSL certificate to be used by the default HTTPS server (catch-all). Takes the form "namespace/name".
--election-id string	Election id to use for Ingress status updates. (default "ingress-controller-leader")
--enable-dynamic-configuration	Dynamically refresh backends on topology changes instead of reloading NGINX. Feature backed by OpenResty Lua libraries. (enabled by default)
--enable-ssl-chain-completion	Autocomplete SSL certificate chains with missing intermediate CA certificates. A valid certificate chain is required to enable OCSP stapling. Certificates uploaded to Kubernetes must have the "Authority Information Access" X.509 v3 extension for this to succeed. (default true)
--enable-ssl-passthrough	Enable SSL Passthrough.
--force-namespace-isolation	Force namespace isolation. Prevents Ingress objects from referencing Secrets and ConfigMaps located in a different namespace than their own. May be used together with watch-namespace.
--health-check-path string	URL path of the health check endpoint. Configured inside the NGINX status server. All requests received on the port defined by the healthz-port parameter are forwarded internally to this path. (default "/healthz")
--healthz-port int	Port to use for the healthz endpoint. (default 10254)
--http-port int	Port to use for servicing HTTP traffic. (default 80)
--https-port int	Port to use for servicing HTTPS traffic. (default 443)
--ingress-class string	Name of the ingress class this controller satisfies. The class of an Ingress object is set using the annotation "kubernetes.io/ingress.class". All ingress classes are satisfied if this parameter is left empty.
--kubeconfig string	Path to a kubeconfig file containing authorization and API server information.
--log_backtrace_at traceLocation	when logging hits line file:N, emit a stack trace (default :0)
--log_dir string	If non-empty, write log files in this directory
--logtostderr	log to standard error instead of files (default true)
--profiling	Enable profiling via web interface host:port/debug/pprof/ (default true)
--publish-service string	Service fronting the Ingress controller. Takes the form "namespace/name". When used together with update-status, the controller mirrors the address of this service's endpoints to the load-balancer status of all Ingress objects it satisfies.
--publish-status-address string	Customized address to set as the load-balancer status of Ingress objects this controller satisfies. Requires the update-status parameter.
--report-node-internal-ip-address	Set the load-balancer status of Ingress objects to internal Node addresses instead of external. Requires the update-status parameter.
--sort-backends	Sort servers inside NGINX upstreams.
--ssl-passthrough-proxy-port int	Port to use internally for SSL Passthrough. (default 442)
--status-port int	Port to use for exposing NGINX status pages. (default 18080)
--stderrthreshold severity	logs at or above this threshold go to stderr (default 2)
--sync-period duration	Period at which the controller forces the repopulation of its local object stores. (default 10m0s)
--sync-rate-limit float32	Define the sync frequency upper limit (default 0.3)
--tcp-services-configmap string	Name of the ConfigMap containing the definition of the TCP services to expose. The key in the map indicates the external port to be used. The value is a reference to a Service in the form "namespace/name:port", where "port" can either be a port number or name. TCP ports 80 and 443 are reserved by the controller for servicing HTTP traffic.
--udp-services-configmap string	Name of the ConfigMap containing the definition of the UDP services to expose. The key in the map indicates the external port to be used. The value is a reference to a Service in the form "namespace/name:port", where "port" can either be a port name or number.
--update-status	Update the load-balancer status of Ingress objects this controller satisfies. Requires setting the publish-service parameter to a valid Service reference. (default true)
--update-status-on-shutdown	Update the load-balancer status of Ingress objects when the controller shuts down. Requires the update-status parameter. (default true)
--v Level	log level for V logs
--version	Show release information about the NGINX Ingress controller and exit.
--vmodule moduleSpec	comma-separated list of pattern=N settings for file-filtered logging
--watch-namespace string	Namespace the controller watches for updates to Kubernetes objects. This includes Ingresses, Services and all configuration resources. All namespaces are watched if this parameter is left empty.