Skip to content

Commit 0fce8a9

Browse files
susanshiyizha1
andauthored
Update articles/container-registry/container-registry-tutorial-sign-trusted-ca.md
Co-authored-by: Yi Zha <[email protected]>
1 parent 896f6cf commit 0fce8a9

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

articles/container-registry/container-registry-tutorial-sign-trusted-ca.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -138,7 +138,8 @@ Here are the requirements for certificates issued by a CA:
138138
- The `exportable` property must be set to `false`.
139139
- Select a supported key type and size from the [Notary Project specification](https://github.com/notaryproject/specifications/blob/v1.0.0/specs/signature-specification.md#algorithm-selection).
140140

141-
For integration with [Image Integrity](https://learn.microsoft.com/en-us/azure/aks/image-integrity?tabs=azure-cli) the `contentType` should be set to `application/x-pem-file`.
141+
> [!IMPORTANT]
142+
> To ensure successful integration with [Image Integrity](/azure/aks/image-integrity), the content type of the certificate should be PEM.
142143
> [!NOTE]
143144
> This guide uses version 1.0.1 of the AKV plugin. Prior versions of the plugin had a limitation that required a specific certificate order in a certificate chain. Version 1.0.1 of the plugin does not have this limitation so it is recommended that you use version 1.0.1 or later.
144145

0 commit comments

Comments
 (0)