From d16135140e706f94ec64f2c27fc46e78c63bfbc0 Mon Sep 17 00:00:00 2001
From: Luke Kysow <1034429+lkysow@users.noreply.github.com>
Date: Fri, 10 Feb 2023 12:29:09 -0800
Subject: [PATCH] Update docs for global.tls.caKey

It's no longer required since https://github.com/hashicorp/consul-helm/pull/1046
---
 charts/consul/values.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/charts/consul/values.yaml b/charts/consul/values.yaml
index 63c2a63cbf..dfe98f6bab 100644
--- a/charts/consul/values.yaml
+++ b/charts/consul/values.yaml
@@ -364,8 +364,9 @@ global:
     #
     # Note that we need the CA key so that we can generate server and client certificates.
     # It is particularly important for the client certificates since they need to have host IPs
-    # as Subject Alternative Names. In the future, we may support bringing your own server
-    # certificates.
+    # as Subject Alternative Names. If you are setting server certs yourself via `server.serverCert`
+    # and you are not enabling clients (or clients are enabled with autoEncrypt) then you do not
+    # need to provide the CA key.
     caKey:
       # The name of the Kubernetes or Vault secret that holds the CA key.
       # @type: string