added airgapped settings

Author: danciaclara

self-hosting/methods/kubernetes.mdx

@@ -114,9 +114,17 @@ If you want to upgrade to a paid plan, see [Plan upgrades](https://docs.plane.so
     | Setting | Default | Required | Description |
     |---|:---:|:---:|---|
     | planeVersion | v1.14.1	 | Yes |  Specifies the version of Plane to be deployed. Copy this from `prime.plane.so.` |
-    | license.licenseServer | `https://prime.plane.so` | Yes | Sets the value of the `licenseServer` that gets you your license and validates it periodically. Don't change this. |
     | license.licenseDomain | 'plane.example.com' | Yes | The fully-qualified domain name (FQDN) in the format `sudomain.domain.tld` or `domain.tld` that the license is bound to. It is also attached to your `ingress` host to access Plane. |
 
+    #### Airgapped settings
+
+    | Setting | Default | Required | Description |
+    |---|:---:|:---:|---|
+    | airgapped.enabled | false | No |  Specifies the airgapped mode the Plane API runs in. |
+    | airgapped.s3SecretName | "s3-custom-ca" | No | Name of the Secret that contains the CA certificate (.crt). The Secret must include a data key whose filename matches the basename of `airgapped.s3SecretKey` (default: `s3-custom-ca.crt`). Used to override S3’s CA when `airgapped.enabled=true`. Applying this secret looks like: `kubectl -n plane create secret generic plane-s3-ca \ --from-file=s3-custom-ca.crt=/path/to/your/ca.crt` | 
+    | airgapped.s3SecretKey | "s3-custom-ca.crt" | No | Key name of the secret to load the Custom Root CA from `airgapped.s3SecretName` |
+        
+
     #### Postgres
 
     | Setting | Default | Required | Description |