This container can be pulled via:
  docker pull registry.opensuse.org/devel/kubic/containers/container_arm/kubic/kube-apiserver:latest
  docker pull registry.opensuse.org/devel/kubic/containers/container_arm/kubic/kube-apiserver:v1.19.4
  docker pull registry.opensuse.org/devel/kubic/containers/container_arm/kubic/kube-apiserver:v1.19.4-9.707

Set DOCKER_CONTENT_TRUST=1 to enable image tag verification.