Story #9513
Updated by ipanova@redhat.com over 2 years ago
Provide an extension of the docker/distribution API.
Assuming a signed image has already been pushed into the Pulp Container Registry, one can read the signature(s)( any user with access to the image) using the following calls:
* `GET /extensions/v2/<namespace>/<name>/signatures/`
* `GET /extensions/v2/<namespace>/<name>/signatures/<imagesha256digest>`
See https://docs.openshift.com/container-platform/3.10/admin_guide/image_signatures.html#reading-image-signatures-via-registry-api and https://github.com/openshift/origin/pull/12504/files
.