8 secret: tsa-server-secret
15 # Credentials file read by kms/tink if set. Unset by default
16 GOOGLE_APPLICATION_CREDENTIALS: ""
19 repository: chainguard-private/timestamp-authority-server
20 pullPolicy: IfNotPresent
21 # crane digest ghcr.io/sigstore/timestamp-server:v2.2.0
22 version: 2.2.0-r3@sha256:7c18506864f4073e94ff3fbc2273214b80d65296e5983b46856e7280c9391273
25 # Valid values: tink, kms, file
27 # PEM encoded cert chain here. Order from active intermedate first to root last
29 tink_enc_keyset: keyset
30 tink_key_resource: resource
31 tink_hcvault_token: token
32 kms_key_resource: resource
42 port: 80 # must match .Values.server.svcPort
56 host: "timestamp.localhost"
68# Force namespace of namespaced resources