The Disabling IPsec encryption document contains the following note that needs to be removed.

> If you enabled IPsec when you installed your cluster, you cannot disable IPsec with this procedure.

The note does not reflect the true situation where IPsec an be disabled after it was enabled at cluster install but the daemonsets are retained.