helm-charts/charts/tsa/values.yaml at main · sigstore/helm-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
namespace:
  create: false
  name: tsa-system

server:
  replicaCount: 1
  name: server
  svcPort: 80
  secret: tsa-server-secret
  additionalArgs: []
  configMap:
    additionalKeys: {}
  logging:
    production: false
  env:
    # Credentials file read by kms/tink if set. Unset by default
    GOOGLE_APPLICATION_CREDENTIALS: ""
  image:
    registry: ghcr.io
    repository: sigstore/timestamp-server
    pullPolicy: IfNotPresent
    # crane digest ghcr.io/sigstore/timestamp-server:v2.1.0
    version: v2.1.0@sha256:8637f0482ed1ecb229b44ebd0afc760f6f57114a4d53c6953cf65c00218896b2
  args:
    port: 5555
    # Valid values: tink, kms, file
    signer: tink
    # PEM encoded cert chain here. Order from active intermedate first to root last
    cert_chain: chain
    tink_enc_keyset: keyset
    tink_key_resource: resource
    tink_hcvault_token: token
    kms_key_resource: resource
  serviceAccount:
    create: true
    name: ""
    annotations: {}
    mountToken: true
  service:
    type: ClusterIP
    ports:
      - name: http
        port: 80  # must match .Values.server.svcPort
        protocol: TCP
        targetPort: 5555
      - name: metrics
        port: 2112
        protocol: TCP
        targetPort: 2112
  ingress:
    http:
      enabled: true
      className: "nginx"
      annotations: {}
      hosts:
      - path: /
        host: "timestamp.localhost"
      tls: []
  securityContext:
    runAsNonRoot: true
    runAsUser: 65533
  tolerations: []
  nodeSelector: {}
  affinity: {}

neg:
  http:
    name: ""
    port: 80

# Force namespace of namespaced resources
forceNamespace: ""