Skip to content

Commit 6f2d730

Browse files
Jan Wozniakwozniakjan
Jan Wozniak
authored andcommitted
emphasize deletion of all signatures if using invalid identity
1 parent 1ca1094 commit 6f2d730

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

Diff for: admin_guide/image_signatures.adoc

+8-2
Original file line numberDiff line numberDiff line change
@@ -124,9 +124,15 @@ $ oc adm policy add-cluster-role-to-user system:image-auditor <user_name>
124124
endif::[]
125125
====
126126

127+
[IMPORTANT]
128+
====
127129
Using the `--save` flag on already verified image together with invalid GPG key
128-
or invalid expected identity causes the saved verification status to be removed,
129-
and the image will become unverified.
130+
or invalid expected identity causes the saved verification status and all
131+
signatures to be removed, and the image will become unverified.
132+
133+
In order to avoid deleting all signatures by mistake, you can run the command
134+
without the `--save` flag first and check the logs for potential issues.
135+
====
130136

131137
To verify an image signature use the following format:
132138

0 commit comments

Comments
 (0)