From 8b16dd75e17a7fe22dce7e0433b6ef45e7b9acd2 Mon Sep 17 00:00:00 2001
From: Luke Kysow <1034429+lkysow@users.noreply.github.com>
Date: Fri, 10 Feb 2023 20:29:09 +0000
Subject: [PATCH] backport of commit d16135140e706f94ec64f2c27fc46e78c63bfbc0

---
 charts/consul/values.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/charts/consul/values.yaml b/charts/consul/values.yaml
index 4f70b27018..19d7512a02 100644
--- a/charts/consul/values.yaml
+++ b/charts/consul/values.yaml
@@ -389,8 +389,9 @@ global:
     #
     # Note that we need the CA key so that we can generate server and client certificates.
     # It is particularly important for the client certificates since they need to have host IPs
-    # as Subject Alternative Names. In the future, we may support bringing your own server
-    # certificates.
+    # as Subject Alternative Names. If you are setting server certs yourself via `server.serverCert`
+    # and you are not enabling clients (or clients are enabled with autoEncrypt) then you do not
+    # need to provide the CA key.
     caKey:
       # The name of the Kubernetes or Vault secret that holds the CA key.
       # @type: string