diff --git a/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md b/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md
index 9207802bc03..64b9da1b53e 100644
--- a/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md
+++ b/docs/pages-for-subheaders/install-upgrade-on-a-kubernetes-cluster.md
@@ -200,7 +200,9 @@ Because `rancher` is the default option for `ingress.tls.source`, we are not spe
 
 - Set the `hostname` to the DNS name you pointed at your load balancer.
 - Set the `bootstrapPassword` to something unique for the `admin` user.
-- To install a specific Rancher version, use the `--version` flag, example: `--version 2.3.6`
+- To install a specific Rancher version, use the `--version` flag, example: `--version 2.7.0`
+
+- For Kubernetes v1.25 or later, set `global.cattle.psp.enabled` to `false'.
 
 ```
 helm install rancher rancher-<CHART_REPO>/rancher \
@@ -242,6 +244,8 @@ In the following command,
 - `letsEncrypt.email` is set to the email address used for communication about your certificate (for example, expiry notices)
 - Set `letsEncrypt.ingress.class` to whatever your ingress controller is, e.g., `traefik`, `nginx`, `haproxy`, etc.
 
+- For Kubernetes v1.25 or later, set `global.cattle.psp.enabled` to `false'.
+
 ```
 helm install rancher rancher-<CHART_REPO>/rancher \
   --namespace cattle-system \
@@ -284,6 +288,8 @@ If you want to check if your certificates are correct, see [How do I check Commo
 - Set the `bootstrapPassword` to something unique for the `admin` user.
 - Set `ingress.tls.source` to `secret`.
 
+- For Kubernetes v1.25 or later, set `global.cattle.psp.enabled` to `false'.
+
 ```
 helm install rancher rancher-<CHART_REPO>/rancher \
   --namespace cattle-system \