From 71fe7e7de1fbde5c90b302e188c86f95f4d9d5c0 Mon Sep 17 00:00:00 2001
From: salonichf5 <146118978+salonichf5@users.noreply.github.com>
Date: Mon, 17 Nov 2025 10:22:51 -0700
Subject: [PATCH] add epp flags information

---
 content/ngf/reference/cli-help.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/ngf/reference/cli-help.md b/content/ngf/reference/cli-help.md
index 764a14152..b7a97a692 100644
--- a/content/ngf/reference/cli-help.md
+++ b/content/ngf/reference/cli-help.md
@@ -59,6 +59,8 @@ This command runs the NGINX Gateway Fabric control plane.
 | _nginx-one-tls-skip-verify_         | _bool_   | Skip TLS verification for NGINX One Console connections. |
 | _gateway-api-inference-extension_   | _bool_   | Enable Gateway API Inference Extension support. Allows for configuring InferencePools to route traffic to AI workloads. (Default: `false`) |
 | _agent-tls-secret_                  | _string_ | The name of the base Secret containing TLS CA, certificate, and key for the NGINX Agent to securely communicate with the NGINX Gateway Fabric control plane. Must exist in the same namespace that the NGINX Gateway Fabric control plane is running in (default namespace: nginx-gateway). (Default `agent-tls`) |
+| _endpoint-picker-disable-tls_       | _bool_   | Disables TLS when connecting to the EndpointPicker. Set to true only for development/testing or when using a service mesh for encryption. (Default: `false`) | 
+| _endpoint-picker-tls-skip-verify_   | _bool_   | Disables server certificate verification when connecting to the EndpointPicker, if TLS is enabled. REQUIRED: Must be true until Gateway API Inference Extension EndpointPicker supports mounting certificates. (Default `true`) |
 
 ## Sleep