Skip to content

Commit 772e4a1

Browse files
authored
Update container-registry-tutorial-sign-trusted-ca.md
1 parent 8f4df37 commit 772e4a1

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

articles/container-registry/container-registry-tutorial-sign-trusted-ca.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -139,6 +139,7 @@ Here are the requirements for certificates issued by a CA:
139139
- The `contentType` should be set to `application/x-pem-file` for better integration with [Image Integrity Policy](https://learn.microsoft.com/en-us/azure/aks/image-integrity?tabs=azure-cli)
140140
- Select a supported key type and size from the [Notary Project specification](https://github.com/notaryproject/specifications/blob/v1.0.0/specs/signature-specification.md#algorithm-selection).
141141

142+
For integration with [Image Integrity](https://learn.microsoft.com/en-us/azure/aks/image-integrity?tabs=azure-cli) the `contentType` should be set to `application/x-pem-file`.
142143
> [!NOTE]
143144
> This guide uses version 1.0.1 of the AKV plugin. Prior versions of the plugin had a limitation that required a specific certificate order in a certificate chain. Version 1.0.1 of the plugin does not have this limitation so it is recommended that you use version 1.0.1 or later.
144145

0 commit comments

Comments
 (0)