diff --git a/docs/operations/integrations/container-runtime/containerd.md b/docs/operations/integrations/container-runtime/containerd.md
index cd563b0..6251f57 100644
--- a/docs/operations/integrations/container-runtime/containerd.md
+++ b/docs/operations/integrations/container-runtime/containerd.md
@@ -458,11 +458,12 @@ kubectl apply -f client-secret.yaml
 Create helm charts configuration file `values.yaml`, configuration content is as follows:
 
 - Notice: To support preheating for harbor with self-signed certificates,
-  you need to change the `manager.config.job.preheat.tls.caCert` to the harbor self-signed certificate address.
+  you need to change the `manager.config.job.preheat.tls` configuration,
+  `manager.config.job.preheat.tls.caCert` is a harbor self-signed certificate configuration file.
   If you want to bypass TLS verification, please set `manager.config.job.preheat.tls.insecureSkipVerify` to `true`.
 
 - Notice: `client.config.proxy.registryMirror.addr` is the harbor service address and
-  configure self-signed certificate in `client.config.proxy.registryMirror.addr`.
+  configure self-signed certificate in `client.config.proxy.registryMirror.certs`.
 
 - Notice: To set the containerd container registry to harbor,
   you need to change the `client.dfinit.config.containerRuntime.containerd.registries` configuration,
diff --git a/docs/operations/integrations/container-runtime/cri-o.md b/docs/operations/integrations/container-runtime/cri-o.md
index 901760f..26d30de 100644
--- a/docs/operations/integrations/container-runtime/cri-o.md
+++ b/docs/operations/integrations/container-runtime/cri-o.md
@@ -262,11 +262,12 @@ kubectl apply -f client-secret.yaml
 Create helm charts configuration file `values.yaml`, configuration content is as follows:
 
 - Notice: To support preheating for harbor with self-signed certificates,
-  you need to set `manager.config.job.preheat.tls.caCert` to the harbor self-signed certificate address.
+  you need to change the `manager.config.job.preheat.tls` configuration,
+  `manager.config.job.preheat.tls.caCert` is a harbor self-signed certificate configuration file.
   If you want to bypass TLS verification, please set `manager.config.job.preheat.tls.insecureSkipVerify` to `true`.
 
 - Notice: `client.config.proxy.registryMirror.addr` is the harbor service address and
-  configure self-signed certificate in `client.config.proxy.registryMirror.addr`.
+  configure self-signed certificate in `client.config.proxy.registryMirror.certs`.
 
 - Notice: To set the CRI-O container registry to harbor,
   you need to change the `client.dfinit.config.containerRuntime.crio.registries` configuration,