Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit 563f5de

Browse files
authoredJun 25, 2018
Merge pull request #10122 from wozniakjan/image_signature/emphasize_sig_deletion
emphasize deletion of all signatures if using invalid identity
2 parents 61d0d62 + 6f2d730 commit 563f5de

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed
 

‎admin_guide/image_signatures.adoc

+8-2
Original file line numberDiff line numberDiff line change
@@ -124,9 +124,15 @@ $ oc adm policy add-cluster-role-to-user system:image-auditor <user_name>
124124
endif::[]
125125
====
126126

127+
[IMPORTANT]
128+
====
127129
Using the `--save` flag on already verified image together with invalid GPG key
128-
or invalid expected identity causes the saved verification status to be removed,
129-
and the image will become unverified.
130+
or invalid expected identity causes the saved verification status and all
131+
signatures to be removed, and the image will become unverified.
132+
133+
In order to avoid deleting all signatures by mistake, you can run the command
134+
without the `--save` flag first and check the logs for potential issues.
135+
====
130136

131137
To verify an image signature use the following format:
132138

0 commit comments

Comments
 (0)
Please sign in to comment.