From 001f819616aa36616f1c5539b7925a2dcfe1624a Mon Sep 17 00:00:00 2001
From: jianglai <jianglai@google.com>
Date: Mon, 16 Apr 2018 08:41:59 -0700
Subject: [PATCH] Create certificate bucket before running terraform

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=193044934
---
 docs/proxy-setup.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docs/proxy-setup.md b/docs/proxy-setup.md
index b9a60db22..dafc8859c 100644
--- a/docs/proxy-setup.md
+++ b/docs/proxy-setup.md
@@ -88,6 +88,13 @@ not only the certificate for your domain, but also certificates from
 intermediate CAs, these certificates must appear in order. The previous
 certificate's issuer must be the next certificate's subject.
 
+The certificate will be encrypted by KMS and uploaded to a GCS bucket. To create
+the bucket:
+
+```bash
+$ gsutil mb -p <proxy-project> gs://<certificate-bucket-name>/
+```
+
 ### Setup proxy project
 
 First setup the [Application Default
@@ -181,7 +188,7 @@ This encrypted file is then uploaded to a GCS bucket specified in the
 `config.tf` file.
 
 ```bash
-$ gsutil cp <combined_secret.pem.enc> gs://<your-gcs-bucket>
+$ gsutil cp <combined_secret.pem.enc> gs://<your-certificate-bucket>
 ```
 
 ### Edit proxy config file