From 76b23602131053db0e7d898460ba42be40afb169 Mon Sep 17 00:00:00 2001
From: hc-github-team-nomad-core
 <82989552+hc-github-team-nomad-core@users.noreply.github.com>
Date: Tue, 24 Oct 2023 18:23:44 -0500
Subject: [PATCH] backport of commit 9b3c38b3ed886f06cd945a3dfd34aa7d8f8817c1
 (#18859)

Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
---
 .../hcl2/functions/crypto/rsadecrypt.mdx             | 12 ++++++++++++
 website/data/docs-nav-data.json                      |  7 ++++++-
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx b/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
index 24e760c92..6f964b533 100644
--- a/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
+++ b/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
@@ -6,6 +6,18 @@ description: The rsadecrypt function decrypts an RSA-encrypted message.
 
 # `rsadecrypt` Function
 
+<Note title="Deprecated">
+This function is deprecated and may be removed in the future.
+</Note>
+
+<Warning>
+While it is possible to use safely, it encourages use of cryptographic
+primitives with <a href="https://en.wikipedia.org/wiki/PKCS_1#Attacks">known
+weaknesses</a>. <a href="/nomad/docs/concepts/variables">Nomad Variables</a>
+and <a href="/nomad/docs/integrations/vault-integration">HashiCorp Vault</a> are
+the recommended ways to provide secrets to workloads.
+</Warning>
+
 `rsadecrypt` decrypts an RSA-encrypted ciphertext, returning the corresponding
 cleartext.
 
diff --git a/website/data/docs-nav-data.json b/website/data/docs-nav-data.json
index 93ee0ca23..5e2b99706 100644
--- a/website/data/docs-nav-data.json
+++ b/website/data/docs-nav-data.json
@@ -1308,7 +1308,12 @@
                   },
                   {
                     "title": "rsadecrypt",
-                    "path": "job-specification/hcl2/functions/crypto/rsadecrypt"
+                    "path": "job-specification/hcl2/functions/crypto/rsadecrypt",
+                    "badge": {
+                      "text": "Deprecated",
+                      "type": "outlined",
+                      "color": "neutral"
+                    }
                   },
                   {
                     "title": "sha1",