notaryproject / roadmap

Roadmap for Notary Project
7 stars 6 forks source link

[User Story] Support Notation with Distribution 1.0 Spec Based Registries (Interop) #48

Closed iamsamirzon closed 1 year ago

iamsamirzon commented 2 years ago

As a user I want to sign and verify images stored in OCI 1.0 based registries that have not yet implemented the "referrers API"

Summary Fallback support for existing registries which haven't yet implemented the OCI artifact specification

Intended Outcome The specification PR is merged

Additional context

  1. This will require client tooling work for Notation.
  2. This should not require any work on the Registry side.
  3. Related to issue https://github.com/notaryproject/notaryproject/issues/112
  4. Related to issue https://github.com/notaryproject/notaryproject/issues/214
SteveLasker commented 2 years ago

Requirements being captured here: https://hackmd.io/dwf12_dlTHacUDKFyGsOqw

iamsamirzon commented 2 years ago

@SteveLasker - Is this needed for RC-2 or beyond?

yizha1 commented 1 year ago

Maybe this roadmap issue should be changed to "OCI artifact manifest" support

iamsamirzon commented 1 year ago

Closing this item, as the work for OCI 1.1 based registries is already completed after we brought in the latest ORAS-go client into notation that supports OCI 1.1 based registry candidate spec. The support for "Fallback" will come in via this open issue - https://github.com/notaryproject/notation/issues/444

cc: @vaninrao10 , @SteveLasker , @yizha1 , @dtzar

iamsamirzon commented 1 year ago

Reopening this roadmap item as spec needs to be updated to reflect that Notary v2 will support OCI 1.0 and OCI 1.1 based registries both. This decision is based on the agreement in NV2 community call on 12/5/2022.

cc: @vaninrao10 , @toddysm , @SteveLasker , @sajayantony , @priteshbandi

yizha1 commented 1 year ago

IMO, the scope is the same as this one https://github.com/notaryproject/notation/issues/444

iamsamirzon commented 1 year ago

Yes, @yizha1 . The scope is the same. This issue #48 in the roadmap repo will be closed once we complete the work in https://github.com/notaryproject/notation/issues/444 and another other item we identify along the way.

yizha1 commented 1 year ago

Closed as released in rc.2