From df9cc3d9228cb07474dd046736c6f83513c4923d Mon Sep 17 00:00:00 2001
From: cyli <cyli@twistedmatrix.com>
Date: Thu, 31 Mar 2016 10:56:19 -0700
Subject: [PATCH] Request pull credentials when using trusted reference

Signed-off-by: cyli <cyli@twistedmatrix.com>
---
 api/client/trust.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/client/trust.go b/api/client/trust.go
index 057fc3abdd..bf22d3a211 100644
--- a/api/client/trust.go
+++ b/api/client/trust.go
@@ -252,7 +252,7 @@ func (cli *DockerCli) trustedReference(ref reference.NamedTagged) (reference.Can
 	// Resolve the Auth config relevant for this server
 	authConfig := cli.resolveAuthConfig(repoInfo.Index)
 
-	notaryRepo, err := cli.getNotaryRepository(repoInfo, authConfig)
+	notaryRepo, err := cli.getNotaryRepository(repoInfo, authConfig, "pull")
 	if err != nil {
 		fmt.Fprintf(cli.out, "Error establishing connection to trust repository: %s\n", err)
 		return nil, err