@@ -243,7 +243,7 @@
+ ng-class="repository.tag_operations_disabled ? 'disabled-option' : ''">
Add New Tag
Edit Labels
+ ng-class="repository.tag_operations_disabled ? 'disabled-option' : ''">
Delete Tag
diff --git a/static/directives/tag-operations-dialog.html b/static/directives/tag-operations-dialog.html
index 53277a958..5f5f7b2be 100644
--- a/static/directives/tag-operations-dialog.html
+++ b/static/directives/tag-operations-dialog.html
@@ -144,16 +144,17 @@
manifest-digest="restoreTagInfo.manifest_digest">?
-
-
+
+
- Cannot execute with trust enabled
+ Tag operations have been disabled.
- The selected operation cannot be performed on this repository because Quay Trust is
- enabled, which requires that all operations be signed by a user.
+ The selected operation cannot be performed on this repository because tag operations have been disabled
+ by an administrator. Trust is enabled for this repo, so any tag changes
+ should be performed by users with signing keys.
diff --git a/static/js/directives/ui/repository-signing-config/repository-signing-config.component.html b/static/js/directives/ui/repository-signing-config/repository-signing-config.component.html
index 6c57e2660..795225029 100644
--- a/static/js/directives/ui/repository-signing-config/repository-signing-config.component.html
+++ b/static/js/directives/ui/repository-signing-config/repository-signing-config.component.html
@@ -18,7 +18,11 @@
Signing is enabled on this repository and all tag operations must be signed via Docker Content Trust.
- Note that due to this feature being enabled, all UI-based tag operations and all build support is disabled on this repository.
+ When this feature is enabled, it will be possible to use the UI or client tools to change tag data without
+ signing.
+ This can make a signed tag point to a different image than the actual tag, and the underlying data could
+ be garbage collected. It is important to have a strict separation between tags that are signed and tags
+ that are not.