Merge pull request #33533 from skrthomas/BZ1878469

ahardin-rh · web-flow · commit d1ded8222da2 · 2021-06-17T11:48:02.000-04:00
BZ1878469: Corrected note in BareMetal UPI Install
diff --git a/modules/installation-approve-csrs.adoc b/modules/installation-approve-csrs.adoc
@@ -107,7 +107,7 @@ endif::ibm-z,ibm-z-kvm[]
 +
 [NOTE]
 ====
-Because the CSRs rotate automatically, approve your CSRs within an hour of adding the machines to the cluster. If you do not approve them within an hour, the certificates will rotate, and more than two certificates will be present for each node. You must approve all of these certificates. After you approve the initial CSRs, the subsequent node client CSRs are automatically approved by the cluster `kube-controller-manager`.
+Because the CSRs rotate automatically, approve your CSRs within an hour of adding the machines to the cluster. If you do not approve them within an hour, the certificates will rotate, and more than two certificates will be present for each node. You must approve all of these certificates. Once the client CSR is approved, the Kubelet creates a secondary CSR for the serving certificate, which requires manual approval. Then, subsequent serving certificate renewal requests are automatically approved by the `machine-approver` if the Kubelet requests a new certificate with identical parameters.
 ====
 +
 [NOTE]

Original file line number	Diff line number	Diff line change
`@@ -107,7 +107,7 @@ endif::ibm-z,ibm-z-kvm[]`
`107`	`107`	`+`
`108`	`108`	`[NOTE]`
`109`	`109`	`====`
`110`		-Because the CSRs rotate automatically, approve your CSRs within an hour of adding the machines to the cluster. If you do not approve them within an hour, the certificates will rotate, and more than two certificates will be present for each node. You must approve all of these certificates. After you approve the initial CSRs, the subsequent node client CSRs are automatically approved by the cluster `kube-controller-manager`.
	`110`	+Because the CSRs rotate automatically, approve your CSRs within an hour of adding the machines to the cluster. If you do not approve them within an hour, the certificates will rotate, and more than two certificates will be present for each node. You must approve all of these certificates. Once the client CSR is approved, the Kubelet creates a secondary CSR for the serving certificate, which requires manual approval. Then, subsequent serving certificate renewal requests are automatically approved by the `machine-approver` if the Kubelet requests a new certificate with identical parameters.
`111`	`111`	`====`
`112`	`112`	`+`
`113`	`113`	`[NOTE]`