diff --git a/modules/cnf-image-based-upgrade-generate-seed-image.adoc b/modules/cnf-image-based-upgrade-generate-seed-image.adoc index 398e4509daa..9e9cced1a6a 100644 --- a/modules/cnf-image-based-upgrade-generate-seed-image.adoc +++ b/modules/cnf-image-based-upgrade-generate-seed-image.adoc @@ -141,8 +141,6 @@ The cluster reboots and loses API capabilities while the {lcao} generates the se Applying the `SeedGenerator` CR stops the `kubelet` and the CRI-O operations, then it starts the image generation. ==== -If you want to generate more seed images, you must provision a new seed cluster with the version that you want to generate a seed image from. - .Verification * After the cluster recovers and it is available, you can check the status of the `SeedGenerator` CR by running the following command: @@ -171,4 +169,11 @@ status: type: SeedGenCompleted <1> observedGeneration: 1 ---- -<1> The seed image generation is complete. \ No newline at end of file +<1> The seed image generation is complete. + +[IMPORTANT] +==== +After the seed image generation completes, do not use the seed cluster. Do not continue to run `oc` commands against the seed cluster or use it to manage managed clusters. + +If you access the seed cluster after generating the seed image, you can meet TLS certificate validation errors because the seed cluster certificates expire during seed image generation. If you need to generate another seed image, provision a new seed cluster. +====