ROX-27623: Document CRD upgrade steps for Helm

This is an important step in the 4.8 upgrade for Helm users.
Without it, the upgrade command will fail.

Author: kylape

modules/upgrade-crd-helm.adoc

@@ -0,0 +1,30 @@
+// Module included in the following assemblies:
+//
+// * upgrading/upgrade-helm.adoc
+:_mod-docs-content-type: PROCEDURE
+[id="upgrade-crd-helm{context}"]
+= Preparing the custom resource definition for upgrade
+
+[role="_abstract"]
+If upgrading from version 4.6 or 4.7, you must prepare the `SecurityPolicy` custom resource definition (CRD) to avoid upgrade errors.
+
+.Procedure
+* Apply Helm-specific labels and annotations to the CRD by running the following commands:
+
+[source,terminal]
+----
+$ oc annotate crd/securitypolicies.config.stackrox.io meta.helm.sh/release-name=stackrox-central-services <1>
+----
+<1> If you use Kubernetes, enter `kubectl` instead of `oc`. Adjust the value of the `release-name` from the above default of `stackrox-central-services` as needed.
+
+[source,terminal]
+----
+$ oc annotate crd/securitypolicies.config.stackrox.io meta.helm.sh/release-namespace=stackrox <1>
+----
+<1> If you use Kubernetes, enter `kubectl` instead of `oc`. Adjust the value of the `release-namespace` from the above default of `stackrox` as needed.
+
+[source,terminal]
+----
+$ oc label crd/securitypolicies.config.stackrox.io app.kubernetes.io/managed-by=Helm <1>
+----
+<1> If you use Kubernetes, enter `kubectl` instead of `oc`.

upgrading/upgrade-helm.adoc

@@ -40,6 +40,7 @@ include::modules/updating-helm-repository.adoc[leveloffset=+1]
 * xref:../installing/installing_ocp/install-central-ocp.adoc#install-using-helm-no-customizations-ocp[Installing Central using Helm charts]
 * xref:../installing/installing_ocp/install-secured-cluster-ocp.adoc#installing-sc-helm[Installing {product-title-short} on secured clusters by using Helm charts]
 
+include::modules/upgrade-crd-helm.adoc[leveloffset=+1]
 include::modules/upgrade-helm-chart.adoc[leveloffset=+1]
 
 include::modules/rollback-helm-upgrade.adoc[leveloffset=+1]