(DOCSP-12173): add tls ca step to upgrade instructions (#373)

* (DOCSP-12173): add tls ca step to upgrade instructions

* (DOCSP-12173): copy review feedback

* (DOCSP-12173): tech review feedback

Author: jwilliams-mongo

source/includes/steps-install-master.yaml

@@ -50,6 +50,21 @@ replacement:
     .. code-block:: sh
 
        oc apply -f mongodb-enterprise-openshift.yaml
-...
+---
+title: "If all of the following are true, you must provide the name of the ConfigMap for your |tls| |certauth| with the :opsmgrkube:`spec.security.tls.ca` setting:"
+level: 4
+ref: upgrade-to-1.7.1
+content: |
 
+  - You secure your |onprem| deployment using |tls| certificates.
+  - You sign your |tls| certificates using a custom |certauth|.
+  - You want to upgrade the |k8s-op-short| from a version earlier than
+    1.7.1 to version 1.7.1 or later.
 
+  Use the following command to add the
+  :opsmgrkube:`spec.security.tls.ca` setting to your |onprem| resource
+  definition:
+
+  {{command}}
+
+...

source/includes/steps-upgrade-k8s-offline-helm-host.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-k8s-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       kubectl patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-k8s-offline-host
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the latest version of the |k8s-op-short| with modified pull policy values using the following ``helm`` command:"
 content: |

source/includes/steps-upgrade-k8s-offline-helm-internet.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-k8s-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       kubectl patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-k8s-offline-internet
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the latest version of the |k8s-op-short| with modified pull policy values using the following ``helm`` command:"
 content: |

source/includes/steps-upgrade-k8s-online-helm.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-k8s-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       kubectl patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-k8s-online-ug
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the |k8s-op-short| using the following ``kubectl``
   and ``helm`` commands:"

source/includes/steps-upgrade-kubectl.yaml

@@ -28,11 +28,25 @@ replacement:
   optionsinclude: |
     .. include:: /includes/list-tables/k8s-kubectl-install-options.rst
 ---
+ref: upgrade-kubectl-tls
+stepnum: 4
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       kubectl patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: upgrade-kubectl-upgrade
 inherit:
   file: steps-install-master.yaml
   ref: install-master-install
-stepnum: 4
+stepnum: 5
 replacement:
   method: "Upgrade the |k8s-op-short| using the following
    |kubectl| command:"

source/includes/steps-upgrade-oc.yaml

@@ -38,11 +38,25 @@ replacement:
     
     .. include:: /includes/list-tables/k8s-oc-install-options.rst
 ---
+ref: upgrade-oc-tls
+stepnum: 4
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       oc patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: upgrade-oc-upgrade
 inherit:
   file: steps-install-master.yaml
   ref: install-master-install
-stepnum: 4
+stepnum: 5
 replacement:
   method: "Upgrade the |k8s-op-short| using the following
    |oc| command:"

source/includes/steps-upgrade-os-offline-helm-host.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-oc-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       oc patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-os-offline-host
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the latest version of the |k8s-op-short| with
   modified pull policy values."

source/includes/steps-upgrade-os-offline-helm-internet.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-oc-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       oc patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-os-offline-internet
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the latest version of the |k8s-op-short| with
   modified pull policy values."

source/includes/steps-upgrade-os-online-helm.yaml

@@ -1,9 +1,23 @@
 ---
+ref: upgrade-oc-tls
+stepnum: 1
+inherit:
+  file: steps-install-master.yaml
+  ref: upgrade-to-1.7.1
+replacement:
+  command: |
+    
+    .. code-block:: none
+
+       oc patch opsmanagers/<opsmgr-resource-metadata.name> \
+       --patch '{"spec": {"security": {"tls": {"ca": "<ca-configmap>"}}}}' \ 
+       --type merge
+---
 ref: helm-os-online-ug
 inherit:
   file: steps-helm-master.yaml
   ref: helm-master-install
-stepnum: 1
+stepnum: 2
 replacement:
   method: "Upgrade the |k8s-op-short|."
 content: |