List --registry-use-labels flag in daemon docs
@@ -43,7 +43,7 @@ document.
fluxd requires setup and offers customization though a multitude of flags.
| Flag | Default | Purpose
-| ------------------------------------------------ | ------------------------ | ---
+| ------------------------------------------------ | ---------------------------------- | ---
| --listen -l | `:3030` | listen address where /metrics and API will be served
| --listen-metrics | | listen address for /metrics endpoint
| --kubernetes-kubectl | | optional, explicit path to kubectl tool
@@ -78,10 +78,11 @@ fluxd requires setup and offers customization though a multitude of flags.
| --registry-burst | `125` | maximum number of warmer connections to remote and memcache
| --registry-insecure-host | [] | registry hosts to use HTTP for (instead of HTTPS)
| --registry-exclude-image | `["k8s.gcr.io/*"]` | do not scan images that match these glob expressions
+| --registry-use-labels | `["index.docker.io/weaveworks/*"]` | use the timestamp (RFC3339) from labels for (canonical) image refs that match these glob expressions
| --docker-config | `""` | path to a Docker config file with default image registry credentials
-| --registry-ecr-region | `[]` | Allow these AWS regions when scanning images from ECR (multiple values allowed); defaults to the detected cluster region
-| --registry-ecr-include-id | `[]` | Include these AWS account ID(s) when scanning images in ECR (multiple values allowed); empty means allow all, unless excluded
-| --registry-ecr-exclude-id | `[<EKS SYSTEM ACCOUNT>]` | Exclude these AWS account ID(s) when scanning ECR (multiple values allowed); defaults to the EKS system account, so system images will not be scanned
+| --registry-ecr-region | `[]` | allow these AWS regions when scanning images from ECR (multiple values allowed); defaults to the detected cluster region
+| --registry-ecr-include-id | `[]` | include these AWS account ID(s) when scanning images in ECR (multiple values allowed); empty means allow all, unless excluded
+| --registry-ecr-exclude-id | `[<EKS SYSTEM ACCOUNT>]` | exclude these AWS account ID(s) when scanning ECR (multiple values allowed); defaults to the EKS system account, so system images will not be scanned
| --registry-require | `[]` | exit with an error if the given services are not available. Useful for escalating misconfiguration or outages that might otherwise go undetected. Presently supported values: {`ecr`} |
| **k8s-secret backed ssh keyring configuration**
| --k8s-secret-name | `flux-git-deploy` | name of the k8s secret used to store the private SSH key
