From acb2e470481e7b4b6747acee939ef693092cbfd0 Mon Sep 17 00:00:00 2001
From: Max Goltzsche <max.goltzsche@gmail.com>
Date: Thu, 10 Oct 2019 22:21:00 +0200
Subject: [PATCH] Add cainjector usage documentation.

Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
---
 docs/reference/cainjector.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/reference/cainjector.rst b/docs/reference/cainjector.rst
index e43301368..1a7626e4d 100644
--- a/docs/reference/cainjector.rst
+++ b/docs/reference/cainjector.rst
@@ -1,3 +1,12 @@
 =====================
 cainjector controller
 =====================
+
+The cainjector controller injects a Certificate into the ``caBundle`` field
+of ValidatingWebhookConfiguration, MutatingWebhookConfiguration or
+APIService resources annotated with:
+
+* ``cert-manager.io/inject-apiserver-ca: "true"``  
+  Injects the cluster CA.
+* ``cert-manager.io/inject-ca-from: <NAMESPACE>/<CERTIFICATE>``  
+  Injects the CA from the specified :doc:`certificate </reference/certificates>`.