8 secret: tsa-server-secret
15 # Credentials file read by kms/tink if set. Unset by default
16 GOOGLE_APPLICATION_CREDENTIALS: ""
19 repository: chainguard-private/timestamp-authority-server
20 pullPolicy: IfNotPresent
21 # crane digest ghcr.io/sigstore/timestamp-server:v2.1.4
22 version: 2.2.0-r0@sha256:d943464bd9e9df421d282e80d93967eb933a67d52cc16b66d2e9c86566100b6b
25 # Valid values: tink, kms, file
27 # PEM encoded cert chain here. Order from active intermedate first to root last
29 tink_enc_keyset: keyset
30 tink_key_resource: resource
31 tink_hcvault_token: token
32 kms_key_resource: resource
42 port: 80 # must match .Values.server.svcPort
56 host: "timestamp.localhost"
68# Force namespace of namespaced resources