Merge pull request #58173 from xenolinux/renew

OCPBUGS#5899: Bootstrap CA renewal

Author: kelbrown20

security/certificate_types_descriptions/bootstrap-certificates.adoc

@@ -21,6 +21,11 @@ This bootstrap CA is valid for 10 years.
 
 The kubelet-managed certificate is valid for one year and rotates automatically at around the 80 percent mark of that one year.
 
+[NOTE]
+====
+OpenShift Lifecycle Manager (OLM) does not update the certificates of Operators that it manages in proxy environments. These certificates must be managed by the user using the subscription config.
+====
+
 == Customization
 
 You cannot customize the bootstrap certificates.