ImageSignature [image.openshift.io/v1]

    ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature’s content by the server. They serve just an informative purpose.

    Type

    Required

    • type

    • content

    .conditions

    Description

    Conditions represent the latest available observations of a signature’s current state.

    Type

    array

    .conditions[]

    SignatureCondition describes an image signature condition of particular kind at particular probe time.

    Type

    Required

    • type

    PropertyTypeDescription

    lastProbeTime

    Time meta/v1

    Last time the condition was checked.

    lastTransitionTime

    Last time the condition transit from one status to another.

    message

    string

    Human readable message indicating details about last transition.

    reason

    string

    (brief) reason for the condition’s last transition.

    status

    string

    Status of the condition, one of True, False, Unknown.

    type

    string

    Type of signature condition, Complete or Failed.

    .issuedBy

    Description

    SignatureIssuer holds information about an issuer of signing certificate or key.

    Type

    object

    PropertyTypeDescription

    commonName

    string

    Common name (e.g. openshift-signing-service).

    organization

    string

    Organization name.

    .issuedTo

    Description

    SignatureSubject holds information about a person or entity who created the signature.

    Type

    object

    Required

    • publicKeyID

    API endpoints

    The following API endpoints are available:

      • POST: create an ImageSignature
    Table 1. Global query parameters
    ParameterTypeDescription

    dryRun

    string

    When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed

    fieldManager

    string

    fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by .

    pretty

    string

    If ‘true’, then the output is pretty printed.

    HTTP method

    POST

    Description

    create an ImageSignature

    Table 2. Body parameters
    ParameterTypeDescription

    body

    ImageSignature image.openshift.io/v1

    /apis/image.openshift.io/v1/imagesignatures/{name}

    Table 4. Global path parameters
    ParameterTypeDescription

    name

    string

    name of the ImageSignature

    Table 5. Global query parameters
    ParameterTypeDescription

    dryRun

    string

    When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed

    gracePeriodSeconds

    integer

    The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.

    orphanDependents

    boolean

    Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the “orphan” finalizer will be added to/removed from the object’s finalizers list. Either this field or PropagationPolicy may be set, but not both.

    pretty

    string

    If ‘true’, then the output is pretty printed.

    propagationPolicy

    string

    Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: ‘Orphan’ - orphan the dependents; ‘Background’ - allow the garbage collector to delete the dependents in the background; ‘Foreground’ - a cascading policy that deletes all dependents in the foreground.

    HTTP method

    DELETE

    Description

    delete an ImageSignature

    Table 7. HTTP responses
    HTTP codeReponse body

    200 - OK