Skip to content

Commit 0166a82

Browse files
authored
Merge pull request #10403 from openshift-cherrypick-robot/cherry-pick-10122-to-enterprise-3.7
[enterprise-3.7] emphasize deletion of all signatures if using invalid identity
2 parents a87438a + 05f527e commit 0166a82

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

Diff for: admin_guide/image_signatures.adoc

+8-2
Original file line numberDiff line numberDiff line change
@@ -124,9 +124,15 @@ $ oc adm policy add-cluster-role-to-user system:image-auditor <user_name>
124124
endif::[]
125125
====
126126

127+
[IMPORTANT]
128+
====
127129
Using the `--save` flag on already verified image together with invalid GPG key
128-
or invalid expected identity causes the saved verification status to be removed,
129-
and the image will become unverified.
130+
or invalid expected identity causes the saved verification status and all
131+
signatures to be removed, and the image will become unverified.
132+
133+
In order to avoid deleting all signatures by mistake, you can run the command
134+
without the `--save` flag first and check the logs for potential issues.
135+
====
130136

131137
To verify an image signature use the following format:
132138

0 commit comments

Comments
 (0)