step-issuer
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Default values for step-issuer.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
replicaCount: 1
6
image:
7
repository: cgr.dev/scratch-images/test-tmp/step-issuer
8
pullPolicy: IfNotPresent
9
# Overrides the image tag whose default is the chart appVersion.
10
tag: 0.12.0-r11@sha256:c015b5c14aa1f1fea8b4b02162c543d6bf70e60d391a366ed5bf086fa70661ae
11
# List of secret keys used to pull images from private registries.
12
imagePullSecrets: []
13
nameOverride: ""
14
fullnameOverride: ""
15
deployment:
16
# Configure arguments to pass to the step issuer
17
args:
18
metricsBindAddress: :8080
19
enableLeaderElection: true
20
disableApprovalCheck: false
21
terminationGracePeriodSeconds: 10
22
# Strategy used for the deployment
23
strategy: {}
24
priorityClassName: ""
25
resources:
26
limits:
27
cpu: 100m
28
memory: 128Mi
29
requests:
30
cpu: 100m
31
memory: 50Mi
32
service:
33
type: ClusterIP
34
port: 8443
35
targetPorts: https
36
controlPlane: controller-manager
37
scrape: true
38
scrapePort: 8080
39
# Security Context for the pod
40
podSecurityContext: {}
41
# fsGroup: 2000
42
43
# security context for container
44
securityContext:
45
runAsUser: 1000
46
runAsGroup: 1000
47
# seccompProfile:
48
# type: RuntimeDefault
49
serviceAccount:
50
# Specifies whether a service account should be created
51
create: false
52
# Annotations to add to the service account
53
annotations: {}
54
# The name of the service account to use.
55
# If not set and create is true, a name is generated using the fullname template
56
name: ""
57
# mandatory values to generate stepIssuer resource
58
# please follow the https://github.com/smallstep/step-issuer#getting-started to setup step-ca and get step-issuer values
59
stepIssuer:
60
create: false
61
caUrl: ""
62
caBundle: ""
63
provisioner:
64
name: ""
65
kid: ""
66
passwordRef:
67
name: ""
68
key: ""
69
# mandatory values to generate stepClusterIssuer resource
70
# please follow the https://github.com/smallstep/step-issuer#getting-started to setup step-ca and get step-issuer values
71
stepClusterIssuer:
72
create: false
73
caUrl: ""
74
caBundle: ""
75
provisioner:
76
name: ""
77
kid: ""
78
passwordRef:
79
name: ""
80
namespace: ""
81
key: ""
82
# For the cert-manager approver
83
certManager:
84
serviceAccount:
85
name: cert-manager
86
namespace: cert-manager
87
# Experimental support for the TLS-over-TLS tunnel in the step-ca client.
88
# Do not enable this unless you know what to use.
89
tunnel:
90
enabled: false
91
crt: "/opt/tunnel/tls.crt"
92
key: "/opt/tunnel/tls.key"
93
host: "" # host:port
94
root: "/opt/tunnel/ca.crt"
95
tlsCertsRef:
96
secret:
97
secretName: ""
98
# Configure extra init containers, sidecar containers, volumes, and volume
99
# mounts as YAML expressions. Useful for injecting secret-agent sidecars
100
# (e.g. Vault Agent) that render passwords for passwordFile/passwordEnv.
101
extraInitContainers: []
102
extraContainers: []
103
volumes: false
104
volumeMounts: false
105
# nodeSelector contains the node labels for pod assignment.
106
nodeSelector: {}
107
# tolerations contains the toleration labels for pod assignment.
108
tolerations: []
109
# affinity contains the affinity settings for pod assignment.
110
affinity: {}
111
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.