Merge pull request #81611 from amolnar-rh/OCPBUGS-31380

OCPBUGS-31380: Add prerequisite to IBU rollback to check for expired certs

Author: ShaunaDiaz

edge_computing/image_based_upgrade/cnf-image-based-upgrade-base.adoc

@@ -29,4 +29,9 @@ include::modules/cnf-image-based-upgrade-with-backup.adoc[leveloffset=+1]
 
 include::modules/cnf-image-based-upgrade-rollback.adoc[leveloffset=+1]
 
+[role="_additional-resources"]
+.Additional resources
+
+* xref:../../backup_and_restore/control_plane_backup_and_restore/disaster_recovery/scenario-3-expired-certs.adoc#dr-scenario-3-recovering-expired-certs_dr-recovering-expired-certs[Recovering from expired control plane certificates]
+
 include::modules/cnf-image-based-upgrade-troubleshooting.adoc[leveloffset=+1]

edge_computing/image_based_upgrade/ztp-image-based-upgrade.adoc

@@ -41,4 +41,9 @@ include::modules/ztp-image-based-upgrade-upgrade.adoc[leveloffset=+1]
 
 include::modules/ztp-image-based-upgrade-rollback.adoc[leveloffset=+1]
 
+[role="_additional-resources"]
+.Additional resources
+
+* xref:../../backup_and_restore/control_plane_backup_and_restore/disaster_recovery/scenario-3-expired-certs.adoc#dr-scenario-3-recovering-expired-certs_dr-recovering-expired-certs[Recovering from expired control plane certificates]
+
 include::modules/cnf-image-based-upgrade-troubleshooting.adoc[leveloffset=+1]

modules/cnf-image-based-upgrade-rollback.adoc

@@ -30,6 +30,7 @@ You can manually roll back the changes if you encounter unresolvable issues afte
 .Prerequisites
 
 * Log in to the hub cluster as a user with `cluster-admin` privileges.
+* Ensure that the control plane certificates on the original stateroot are valid. If the certificates expired, see "Recovering from expired control plane certificates".
 
 .Procedure
 

modules/ztp-image-based-upgrade-rollback.adoc

@@ -7,6 +7,10 @@
 
 If you encounter an issue after upgrade, you can start a manual rollback.
 
+.Prerequisites
+
+* Ensure that the control plane certificates on the original stateroot are valid. If the certificates expired, see "Recovering from expired control plane certificates".
+
 .Procedure
 
 . Revert the `du-profile` or the corresponding policy-binding label to the original platform version in the `SiteConfig` CR: