Re: [atomic-devel] image signing and signature verification in OCP-3.6

[Tom McKay <thomasmckay redhat com>]

And of course I immediately find some docs[1]:

$ oc adm verify-image-signature <image> --expected-identity=<pull_spec> [--save] [options]



[1] https://docs.openshift.com/container-platform/3.5/dev_guide/image_signatures.html#verifying-image-signatures-using-openshift-cli

On Wed, Aug 16, 2017 at 9:17 AM, Tom McKay <thomasmckay redhat com> wrote:

I am looking for instructions on how to verify a signature of an image pushed to OCP. I can add a signature as it is 'atomic push' to OCP but it is marked as "unverified".

Find me on #atomic for further discussion about details. I'll be sure to follow up this email with solution and other details.

Thanks!