DOCSP-46411 -- add irsaEnabled info to fields (#2095)

* DOCSP-46411 -- add irsaEnabled info to fields

* DOCSP-46411 -- fix typo

Author: jvincent-mongodb

source/reference/k8s-operator-om-specification.txt

@@ -1222,13 +1222,19 @@ You can use |tls| for both |s3| and your {+appdb+}, or for
 
    *Type*: string
 
-   *Required to store the oplog using an S3 store.* Name of the secret
-   that contains the ``accessKey`` and ``secretKey`` fields. The
-   :opsmgr:`backup daemon service </core/system-overview/#backup-daemon-service>`
+   Required to store the oplog using an S3 store if ``spec.backup.s3OpLogStores.irsaEnabled`` 
+   is not set to ``true``.
+   
+   Name of the secret that contains the ``accessKey`` and ``secretKey`` fields. 
+   The :opsmgr:`backup daemon service </core/system-overview/#backup-daemon-service>`
    uses the values of these fields as credentials to access your
    |aws| |s3| or |s3|-compatible bucket. To configure the |s3| oplog 
    store, you must specify both keys in the secret.
 
+   If you set ``spec.backup.s3OpLogStores.irsaEnabled`` to ``true``, you don't need 
+   to set the ``s3SecretRef``, because the AWS S3 credentials are mounted as 
+   pod environment variables.
+
 .. opsmgrkube:: spec.backup.s3OpLogStores.pathStyleAccessEnabled
 
    *Type*: boolean
@@ -1446,13 +1452,19 @@ You can use |tls| for both |s3| and your {+appdb+}, or for
 
    *Type*: string
 
-   *Required if you enable Backup using an S3 store.* Name of the secret
-   that contains the ``accessKey`` and ``secretKey`` fields. The
-   :opsmgr:`backup daemon service </core/system-overview/#backup-daemon-service>`
+   Required if you enable Backup using an S3 store and you don't set 
+   ``spec.backup.s3Stores.irsaEnabled`` to ``true``.
+   
+   Name of the secret that contains the ``accessKey`` and ``secretKey`` fields. 
+   The :opsmgr:`backup daemon service </core/system-overview/#backup-daemon-service>`
    uses the values of these fields as credentials to access your
    |aws| |s3| or |s3|-compatible bucket. The |s3| snapshot store
    can't be configured if the secret is missing either key.
 
+   If you set ``spec.backup.s3Stores.irsaEnabled`` to ``true``, you don't need 
+   to set the ``s3SecretRef``, because the AWS S3 credentials are mounted as 
+   pod environment variables.
+
 .. opsmgrkube:: spec.backup.s3Stores.pathStyleAccessEnabled
 
    *Type*: boolean