values.yaml

---
# Fulcio
fulcio:
  enabled: true
  namespace:
    name: fulcio-system
    create: true
  forceNamespace: fulcio-system
  server:
    fullnameOverride: fulcio-server
  createcerts:
    fullnameOverride: fulcio-createcerts
  ctlog:
    enabled: false
    createctconfig:
      logPrefix: sigstorescaffolding
  tolerations: []
  nodeSelector: {}
  affinity: {}

# CTLog
ctlog:
  enabled: true
  namespace:
    name: ctlog-system
    create: true
  forceNamespace: ctlog-system
  fullnameOverride: ctlog
  createcerts:
    fullnameOverride: ctlog-createcerts
  createtree:
    fullnameOverride: ctlog-createtree
    displayName: ctlog-tree
  tolerations: []
  nodeSelector: {}
  affinity: {}

# Rekor
rekor:
  enabled: true
  namespace:
    name: rekor-system
    create: true
  forceNamespace: rekor-system
  fullnameOverride: rekor
  server:
    fullnameOverride: rekor-server
  redis:
    fullnameOverride: rekor-redis
  trillian:
    enabled: false
  tolerations: []
  nodeSelector: {}
  affinity: {}

# Trillian
trillian:
  enabled: true
  namespace:
    name: trillian-system
    create: true
  forceNamespace: trillian-system
  fullnameOverride: trillian
  logServer:
    name: trillian-logserver
    fullnameOverride: trillian-logserver
    portHTTP: 8090
    portRPC: 8091
  logSigner:
    name: trillian-logsigner
    fullnameOverride: trillian-logsigner
  mysql:
    fullnameOverride: trillian-mysql
  tolerations: []
  nodeSelector: {}
  affinity: {}

tuf:
  enabled: false
  namespace:
    name: tuf-system
    create: true
  forceNamespace: tuf-system
  fullnameOverride: tuf
  tolerations: []
  nodeSelector: {}
  affinity: {}

  secrets:
    rekor:
      name: rekor-public-key
      path: rekor.pub
    fulcio:
      name: fulcio-server-secret
      path: fulcio_v1.crt.pem
    ctlog:
      name: ctlog-public-key
      path: ctfe.pub
    tsa:
      name: tsa-cert-chain
      path: tsa.certchain.pem

copySecretJob:
  enabled: false
  name: copy-secrets-job
  registry: docker.io
  repository: alpine/k8s
  version: sha256:fb0d2db81fb0f98abb1adf5246d6f0f4d19f34031afe4759cb7ad8e2eb8d2c01
  imagePullPolicy: IfNotPresent
  serviceaccount: tuf-secret-copy-job
  backoffLimit: 6
  tolerations: []
  nodeSelector: {}
  affinity: {}

tsa:
  enabled: false
  namespace:
    name: tsa-system
    create: true
  forceNamespace: tsa-system
  server:
    fullnameOverride: tsa-server
  tolerations: []
  nodeSelector: {}
  affinity: {}