edit

Author: paigecalvert

docs/reference/custom-resource-configvalues.mdx

@@ -67,10 +67,6 @@ spec:
 
 The user-supplied value for the application configuration item.
 
-:::note
-In the ConfigValues resource that is automatically generated by the Admin Console as part of installation, the `value` property might also be set to a value rendered by a Replicated template function. For example, a [`hidden`](/reference/custom-resource-config#hidden) item defined in the Config resource might use the Replicated RandomString template function to set the value with `value: repl{{ RandomString 40}}`. For more information about using Replicated template functions, see [About Template Functions](/reference/template-functions-about).
-:::
-
 #### Example
 
 ```yaml
@@ -90,11 +86,18 @@ spec:
       value: "443"  
 ```
 
+:::note
+In the ConfigValues resource that is automatically generated by the Admin Console as part of installation, the `value` property might also be set to one of the following:
+* A value rendered by a Replicated template function. For example, a [`hidden`](/reference/custom-resource-config#hidden) item defined in the Config resource could use the Replicated [RandomString](/reference/template-functions-static-context#randomstring) template function to set the value with `value: repl{{ RandomString 40}}`. In this case, the value for the item in the ConfigValues would be generated by the template function and not user-supplied. For more information about using Replicated template functions, see [About Template Functions](/reference/template-functions-about).
+* An encrypted empty string. For any `password` configuration items without a user-supplied value, the Admin Console sets the value to an empty string. In the ConfigValues generated for the installation, this empty string is automatically encrypted.
+* An empty mapping (`{}`). For configuration items without a user-supplied `value` or a `default` set, the value is set to `{}`.
+:::
+
 ### values.[item_name].valuePlainText {#valueplaintext}
 
 A plain text value. For any configuration items of type [`password`](/reference/custom-resource-config#password), the password must be provided in plain text in a `valuePlainText` property rather than in the `value` property.
 
-During installation, the Admin Console encrypts the values set in `valuePlainText`. In the ConfigValues resource that is automatically generated as part of installation, these encrypted values are saved in `value` properties. The image below shows how a `valuePlainText` value is encrypted during installation:
+During installation, the Admin Console encrypts the values set in `valuePlainText`. In the ConfigValues resource that is automatically generated as part of installation, these encrypted values are saved in `value` properties. The image below shows how a `valuePlainText` value is encrypted and added to a `value` property during installation:
 
 ![valuesPlainText field in ConfigValues](/images/configvalues-plaintext.png)