sftp-server
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Default values for sftp.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
replicaCount: 1
5
image:
6
repository: cgr.dev/chainguard-private/atmoz-sftp-fips
7
pullPolicy: IfNotPresent
8
tag: 0.0.0_git20260429-r4@sha256:0de23d6ece01719946c3982651b9288b0bd4166755dca36595cc3d1010abb234
9
sftp:
10
hostKeys:
11
# -- private ED25519 host key. Choose between adding the key itself or reference a already existing key.
12
ed25519:
13
# -- The plain key
14
key: ""
15
# -- Reference to and existing secret with an "ssh_host_ed25519_key" data key and base64 encrypted value.
16
secretKeyRef: ""
17
# -- private RSA host key. Choose between adding the key itself or reference a already existing key.
18
rsa:
19
# -- The plain key
20
key: ""
21
# -- Reference to and existing secret with an "ssh_host_rsa_key" data key and base64 encrypted value.
22
secretKeyRef: ""
23
# -- Reference to and existing secret that provides users' configuration.
24
# If present takes precedence over `.Values.sftp.users` configuration,
25
# whose schema is expected to use within a `users.conf` key
26
usersSecret: ""
27
# Array based configuration of users
28
users:
29
- name: demo
30
pass: demo
31
# -- password is encrypted ([doc](https://github.com/atmoz/sftp/blob/ffeb104beec76cc622abda34ee2132c790b5559c/README.md#encrypted-password))
32
passEncrypted: false
33
uid: ""
34
gid: ""
35
dirs:
36
- upload
37
# -- public user keys ([doc](https://github.com/atmoz/sftp/blob/ffeb104beec76cc622abda34ee2132c790b5559c/README.md#logging-in-with-ssh-keys))
38
pubKeys: []
39
# -- Additional Init containers of the pod.
40
extraInitContainers: []
41
# -- Additional containers of the pod.
42
extraContainers: []
43
# -- Additional volumes of the pod.
44
extraVolumes: []
45
# - name: my-config
46
# configMap:
47
# name: my-config
48
49
# -- Additional volume mounts of the pod.
50
extraVolumeMounts: []
51
# - name: my-config
52
# mountPath: /my-config/
53
54
persistentVolume:
55
enabled: false
56
# -- Must match those of existing PV or dynamic provisioner
57
# ([Kubernetes docs](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes))
58
accessModes:
59
- ReadWriteOnce
60
annotations: {}
61
# -- If defined, PVC must be created manually before volume will be bound
62
existingClaim: ""
63
size: 8Gi
64
# -- If defined, storageClassName: <storageClass>
65
# If set to "-", storageClassName: "", which disables dynamic provisioning
66
# If undefined (the default) or set to null, no storageClassName spec is
67
# set, choosing the default provisioner. (gp2 on AWS, standard on
68
# GKE, AWS & OpenStack)
69
#
70
storageClass: null
71
# -- If defined, volumeBindingMode: <volumeBindingMode>
72
# If undefined (the default) or set to null, no volumeBindingMode spec is
73
# set, choosing the default mode.
74
#
75
volumeBindingMode: null
76
# -- Subdirectory of SFTP server data Persistent Volume to mount
77
# Useful if the volume's root directory is not empty
78
#
79
subPath: ""
80
# -- Persistent Volume Claim Selector
81
# Useful if Persistent Volumes have been provisioned in advance
82
# ([Kubernetes docs](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#selector)
83
#
84
# selector:
85
# matchLabels:
86
# release: "stable"
87
# matchExpressions:
88
# - { key: environment, operator: In, values: [ dev ] }
89
imagePullSecrets: []
90
nameOverride: ""
91
fullnameOverride: ""
92
serviceAccount:
93
# -- Specifies whether a service account should be created
94
create: false
95
# -- Annotations to add to the service account
96
annotations: {}
97
# -- The name of the service account to use.
98
# -- If not set and create is true, a name is generated using the fullname template
99
name: ""
100
podAnnotations: {}
101
podSecurityContext: {}
102
# fsGroup: 2000
103
104
securityContext: {}
105
# capabilities:
106
# drop:
107
# - ALL
108
# readOnlyRootFilesystem: true
109
# runAsNonRoot: true
110
# runAsUser: 1000
111
112
service:
113
type: ClusterIP
114
port: 22
115
# -- When using the NodePort type, you can specify a fixed port ([Kubernetes docs](https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport))
116
nodePort: 0
117
# -- When using the LoadBalancer type.
118
loadBalancerIP: 0
119
externalTraffic:
120
# -- externalTrafficPolicy ([Kubernetes docs](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip))
121
enabled: false
122
policy: "Local"
123
# -- Annotations to add to the service
124
annotations: {}
125
resources: {}
126
# limits:
127
# cpu: 100m
128
# memory: 128Mi
129
# requests:
130
# cpu: 100m
131
# memory: 128Mi
132
133
nodeSelector: {}
134
tolerations: []
135
affinity: {}
136
probes:
137
# -- Enable startup probe
138
startup: true
139
# -- Enable liveness probe
140
liveness: true
141
# -- Enable readiness probe
142
readiness: true
143
# -- Define strategy update of the deployment ([Kubernetes docs](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy))
144
updateStrategy:
145
type: RollingUpdate
146
# -- Extra manifests to deploy as an array
147
extraManifests: []
148
# - apiVersion: v1
149
# kind: ConfigMap
150
# metadata:
151
# name: sftp-extra
152
# data:
153
# extra-data: "value"
154
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.