diff --git a/CHANGELOG-0.7.md b/CHANGELOG-0.7.md
index b7942f9894..12833679ef 100644
--- a/CHANGELOG-0.7.md
+++ b/CHANGELOG-0.7.md
@@ -11,6 +11,12 @@
 
 - [#1424](https://github.com/epiphany-platform/epiphany/issues/1424) - Terraform returning an error during deployments on Azure ("A retryable error occurred.")
 - [#1399](https://github.com/epiphany-platform/epiphany/issues/1399) - Epicli upgrade: Kubernetes upgrade may hang
+- [#1398](https://github.com/epiphany-platform/epiphany/issues/1398) - Vault installation fails when using canal/calico network plugin
+- [#1412](https://github.com/epiphany-platform/epiphany/issues/1412) - Certificate in Vault is also generated or copied even if flag in configuration tls_disable is set to true
+
+### Added
+
+- [#1413](https://github.com/epiphany-platform/epiphany/issues/1413) - Set protocol for Vault only in one place in configuration
 - [#1423](https://github.com/epiphany-platform/epiphany/issues/1423) - Error reading generated service principal
 
 ## [0.7.0] 2020-06-30
diff --git a/docs/home/howto/SECURITY.md b/docs/home/howto/SECURITY.md
index 4bc9296241..44bb40a3d2 100644
--- a/docs/home/howto/SECURITY.md
+++ b/docs/home/howto/SECURITY.md
@@ -409,7 +409,7 @@ specification:
       policy: provisioner
   vault_helm_chart_values: # helm chart values overwriting the default package (to be able to use internal registry for offline purposes)
     injector:
-      externalVaultAddr: https://external-vault:8200 # external vault address [IMPORTANT: switch https->http if tls_disable parameter is set to true]
+      externalVaultAddr: https://your-external-address:8200 # external vault address (only if you want to setup address to provide full name to use with signed certificate) [IMPORTANT: switch https->http if tls_disable parameter is set to true]
       image:
         repository: "{{ image_registry_address }}/hashicorp/vault-k8s" # docker image used by vault injector in kubernetes
       agentImage: