blob/master/content/en/docs/installation/upgrading/upgrading-1.7-1.8.md includes instructions for checking for certs that need to be updated due to the validation of rotationPolicy.

When I actually run this I get many false positive results because the command does not exclude certs when rotationPolicy=null.

For example all of my certificates are created via the ingress shim which doesn't set this value.