Skip to content

docs(crd): clarify ctlog:{} disables tlog verification#1923

Open
1seal wants to merge 1 commit intosigstore:mainfrom
1seal:docs/ctlog-empty-disables-tlog
Open

docs(crd): clarify ctlog:{} disables tlog verification#1923
1seal wants to merge 1 commit intosigstore:mainfrom
1seal:docs/ctlog-empty-disables-tlog

Conversation

@1seal
Copy link

@1seal 1seal commented Jan 16, 2026

this updates the clusterimagepolicy crd/docs wording to match the intended behavior discussed in sigstore/policy-controller#

  • document that ctlog: {} (ctlog present but no trustRootRef and no url) disables tlog verification
  • remove the implication that there is a default public rekor url in the ctlog: {} case

changes are doc-only (no behavior changes).

note: i see go test ./... failing on current main locally due to an expired tuf root.json in testdata; this pr doesn’t modify that.

Signed-off-by: konkoleg <konko.oleg@gmail.com>
@1seal 1seal force-pushed the docs/ctlog-empty-disables-tlog branch from 678aa14 to 048185e Compare January 17, 2026 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant