Skip to content

Commit

Permalink
emphasize deletion of all signatures if using invalid identity
Browse files Browse the repository at this point in the history
  • Loading branch information
Jan Wozniak authored and wozniakjan committed Jun 18, 2018
1 parent 1ca1094 commit 6f2d730
Showing 1 changed file with 8 additions and 2 deletions.
10 changes: 8 additions & 2 deletions admin_guide/image_signatures.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -124,9 +124,15 @@ $ oc adm policy add-cluster-role-to-user system:image-auditor <user_name>
endif::[]
====

[IMPORTANT]
====
Using the `--save` flag on already verified image together with invalid GPG key
or invalid expected identity causes the saved verification status to be removed,
and the image will become unverified.
or invalid expected identity causes the saved verification status and all
signatures to be removed, and the image will become unverified.
In order to avoid deleting all signatures by mistake, you can run the command
without the `--save` flag first and check the logs for potential issues.
====

To verify an image signature use the following format:

Expand Down

0 comments on commit 6f2d730

Please sign in to comment.