Regenerate cli.md based on output of help message

site/content/docs/reference/cli.md

@@ -33,7 +33,6 @@ pinniped get kubeconfig [flags]
 - `-h`, `--help`:
 
   help for kubeconfig
-
 - `--concierge-api-group-suffix string`:
 
   Concierge API group suffix (default "pinniped.dev")
@@ -43,9 +42,21 @@ pinniped get kubeconfig [flags]
 - `--concierge-authenticator-type string`:
 
   Concierge authenticator type (e.g., 'webhook', 'jwt') (default: autodiscover)
-- `--concierge-mode`:
+- `--concierge-ca-bundle path`:
 
-Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestAPI')(default: TokenCredentialRequestAPI)
+  Path to TLS certificate authority bundle (PEM format, optional, can be repeated) to use when connecting to the Concierge
+- `--concierge-credential-issuer string`:
+
+  Concierge CredentialIssuer object to use for autodiscovery (default: autodiscover)
+- `--concierge-endpoint string`:
+
+  API base for the Concierge endpoint
+- `--concierge-mode mode`:
+
+  Concierge mode of operation (default TokenCredentialRequestAPI)
+- `--concierge-skip-wait`:
+
+  Skip waiting for any pending Concierge strategies to become ready (default: false)
 - `--kubeconfig string`:
 
   Path to kubeconfig file
@@ -54,8 +65,8 @@ Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestA
   Kubeconfig context name (default: current active context)
 - `--no-concierge`:
 
-  Generate a configuration which does not use the concierge, but sends the credential to the cluster directly
-- `--oidc-ca-bundle strings`:
+  Generate a configuration which does not use the Concierge, but sends the credential to the cluster directly
+- `--oidc-ca-bundle path`:
 
   Path to TLS certificate authority bundle (PEM format, optional, can be repeated)
 - `--oidc-client-id string`:
@@ -79,9 +90,18 @@ Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestA
 - `--oidc-skip-browser`:
 
   During OpenID Connect login, skip opening the browser (just print the URL)
+- `-o`, `--output string`:
+
+  Output file path (default: stdout)
+- `--skip-validation`:
+
+  Skip final validation of the kubeconfig (default: false)
 - `--static-token string`:
 
   Instead of doing an OIDC-based login, specify a static token
 - `--static-token-env string`:
 
   Instead of doing an OIDC-based login, read a static token from the environment
+- `--timeout duration`:
+
+  Timeout for autodiscovery and validation (default 10m0s)