8 secret: tsa-server-secret
15 # Credentials file read by kms/tink if set. Unset by default
16 GOOGLE_APPLICATION_CREDENTIALS: ""
19 repository: chainguard-private/timestamp-authority-server
20 pullPolicy: IfNotPresent
21 # crane digest ghcr.io/sigstore/timestamp-server:v2.1.0
22 version: 2.1.3@sha256:76103d61a3df95f389e932c0f5c9110befbaf6f0958442db06bad9be827842d0
25 # Valid values: tink, kms, file
27 # PEM encoded cert chain here. Order from active intermedate first to root last
29 tink_enc_keyset: keyset
30 tink_key_resource: resource
31 tink_hcvault_token: token
32 kms_key_resource: resource
42 port: 80 # must match .Values.server.svcPort
56 host: "timestamp.localhost"
68# Force namespace of namespaced resources