From 7808c3c7cf35f9e3209c8a3c19cf481567673f0b Mon Sep 17 00:00:00 2001 From: Ashley Davis Date: Wed, 4 Dec 2024 18:27:13 +0000 Subject: [PATCH] reword approver policy install line Signed-off-by: Ashley Davis --- .../docs/policy/approval/approver-policy/installation.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/content/docs/policy/approval/approver-policy/installation.md b/content/docs/policy/approval/approver-policy/installation.md index 9204c454217..24e7361dd98 100644 --- a/content/docs/policy/approval/approver-policy/installation.md +++ b/content/docs/policy/approval/approver-policy/installation.md @@ -30,10 +30,13 @@ you can disable the default approver by [Customizing the Chart Before Installing disableAutoApproval: true ``` -Here's a example which reconfigure an installed cert-manager to run without auto-approver: +If you already have cert-manager installed, you can reconfigure it to disable the default approver +as in the example below. Note that doing this in a running cluster with no other approval configured +will stop all issuance (as no certificate requests will be approved)! ```terminal -# ⚠️ This Helm option is only available in cert-manager v1.15.0 and later. +# ⚠️ The disableAutoApproval Helm option is only available in cert-manager v1.15.0 and later. +# ⚠️ DANGER: Only do this in a cluster if you're sure it's safe! existing_cert_manager_version=$(helm get metadata -n cert-manager cert-manager | grep '^VERSION' | awk '{ print $2 }') helm upgrade cert-manager jetstack/cert-manager \