From f06e6fc582dbe06ae99b8ecb7ab542ddcf089a6f Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Tue, 4 Nov 2025 16:27:36 -0500
Subject: [PATCH] Gitops docs changes for #34689 (#35015)

---
 docs/Configuration/yaml-files.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/docs/Configuration/yaml-files.md b/docs/Configuration/yaml-files.md
index 9cc7177a9a..279e68351e 100644
--- a/docs/Configuration/yaml-files.md
+++ b/docs/Configuration/yaml-files.md
@@ -852,6 +852,11 @@ org_settings:
       - name: SCEP_VPN
         url: https://example.com/scep
         challenge: $SCEP_VPN_CHALLENGE
+    custom_est_proxy:
+    - name: EST_WIFI
+      url: https://example.com/est
+      username: $EST_PROXY_USERNAME
+      password: $EST_PROXY_PASSWORD
     hydrant:
       - name: HYDRANT_WIFI
         url: https://example.hydrantid.com/.well-known/est/abc123
@@ -899,6 +904,13 @@ Can only be configured for all teams (`org_settings`).
 - `client_id` is the client ID provided by Hydrant.
 - `client_secret` is the client secret provided by Hydrant.
 
+#### custom_est_proxy
+
+- `name` is the name of the certificate authority that will be used in variables in configuration profiles. Only letters, numbers, and underscores are allowed.
+- `url` is the EST (Enrollment Over Secure Transport) endpoint.
+- `username` is the username for the EST server.
+- `password` is the password for the EST server.
+
 #### smallstep
 
 - `name` is the name of the certificate authority that will be used in variables in configuration profiles. Only letters, numbers, and underscores are allowed.