Skip to content

Commit 6988fab

Browse files
committed
Copy edits
1 parent 01392d5 commit 6988fab

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

articles/openshift/confidential-containers-deploy.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -619,7 +619,6 @@ Create a secure route with edge TLS termination for Trustee. External ingress tr
619619
`$ oc apply -f kbs-config-cm.yaml`
620620
621621
622-
623622
### Configure attestation policies
624623
625624
Configure the following attestation policy settings:
@@ -667,7 +666,7 @@ Don't confuse the Trustee policy engine with the Attestation Service policy engi
667666
668667
-->
669668
670-
**Attestation policy**
669+
**Create your own attestation policy**
671670
672671
You can overwrite the default attestation policy by creating your own attestation policy.
673672
@@ -923,8 +922,11 @@ If you use container image signature verification, you must create a secret that
923922
924923
**Create the container image signature verification policy**
925924
926-
You create the container image signature verification policy because signature verification is always enabled. **If this policy is missing, the pods will not start.** If you are not using container image signature verification, you create the policy without signature verification.
925+
You must create the container image signature verification policy because signature verification is always enabled.
927926
927+
> [!IMPORTANT]
928+
> If this policy is missing, the pods will not start. If you are not using container image signature verification, you create the policy without signature verification.
929+
>
928930
1. Create a security-policy-config.json file according to the following examples:
929931
930932
Without signature verification:

0 commit comments

Comments
 (0)