From caa6b05c9209182569c18015bf06c3814e53360e Mon Sep 17 00:00:00 2001
From: Artemis Tosini <artemis@fleetdm.com>
Date: Tue, 17 Jan 2023 18:28:36 -0500
Subject: [PATCH] docs: Remove deprecated vulnerability_settings options
 (#9281)

Fixes #8697
---
 docs/Using-Fleet/Vulnerability-Processing.md   |  2 +-
 docs/Using-Fleet/configuration-files/README.md | 18 +++++++++++++-----
 2 files changed, 14 insertions(+), 6 deletions(-)

diff --git a/docs/Using-Fleet/Vulnerability-Processing.md b/docs/Using-Fleet/Vulnerability-Processing.md
index b070d01d12..308c4e756b 100644
--- a/docs/Using-Fleet/Vulnerability-Processing.md
+++ b/docs/Using-Fleet/Vulnerability-Processing.md
@@ -111,7 +111,7 @@ data feeds. This can be done by setting the following app config:
 apiVersion: v1
 kind: config
 spec:
-  vulnerability_settings:
+  vulnerabilities:
     databases_path: /some/path
 ```
 
diff --git a/docs/Using-Fleet/configuration-files/README.md b/docs/Using-Fleet/configuration-files/README.md
index a12b06adcb..3a57e9d4df 100644
--- a/docs/Using-Fleet/configuration-files/README.md
+++ b/docs/Using-Fleet/configuration-files/README.md
@@ -236,8 +236,16 @@ spec:
     issuer_uri: ""
     metadata: ""
     metadata_url: ""
-  vulnerability_settings:
-    databases_path: ""
+  vulnerabilities:
+    databases_path: "/tmp/vulndbs"
+    periodicity: 1h
+    cpe_database_url: ""
+    cpe_translations_url: ""
+    cve_feed_prefix_url: ""
+    current_instance_checks: "auto"
+    disable_data_sync: false
+    recent_vulnerability_max_age: 30d
+    disable_win_os_vulnerabilities: false
   webhook_settings:
     failing_policies_webhook:
       destination_url: ""
@@ -642,15 +650,15 @@ A URL that references the identity provider metadata.
 
 #### Vulnerability settings
 
-##### vulnerability_settings.databases_path
+##### vulnerabilities.databases_path
 
 Path to a directory on the local filesystem (accessible to the Fleet server) where the various vulnerability databases will be stored.
 
 - Optional setting, must be set to enable vulnerability detection (string).
-- Default value: "".
+- Default value: "/tmp/vulndb".
 - Config file format:
   ```yaml
-  vulnerability_settings:
+  vulnerabilities:
     databases_path: "/path/to/dir"
   ```