sigstore-ctlog
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
namespace:
2
create: false
3
name: ctlog-system
4
imagePullSecrets: []
5
server:
6
replicaCount: 1
7
config:
8
key: treeID
9
treeID: ""
10
image:
11
registry: cgr.dev
12
repository: chainguard-private/ctlog-trillian-ctserver
13
pullPolicy: IfNotPresent
14
version: latest@sha256:129810395aa8f38c0950aaa10987a6c9b9135c013df2cafbba69dc713b387238
15
livenessProbe:
16
httpGet:
17
path: /healthz
18
port: 6962
19
initialDelaySeconds: 10
20
readinessProbe:
21
httpGet:
22
path: /healthz
23
port: 6962
24
initialDelaySeconds: 10
25
serviceAccount:
26
create: true
27
name: ""
28
annotations: {}
29
mountToken: false
30
podAnnotations:
31
prometheus.io/scrape: "true"
32
prometheus.io/path: /metrics
33
prometheus.io/port: "6963"
34
portHTTP: 6962
35
portHTTPMetrics: 6963
36
service:
37
# backendConfig:
38
# name: ctlog-backend-config
39
# spec: # https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-configuration#configuring_ingress_features_through_backendconfig_parameters
40
# securityPolicy:
41
# name: ctlog-security-policy
42
# logging:
43
# enable: true
44
# healthCheck:
45
# port: 6962
46
# requestPath: "/healthz"
47
# type: HTTP
48
type: ClusterIP
49
ports:
50
- name: 6962-tcp
51
port: 80
52
protocol: TCP
53
targetPort: 6962
54
- name: 6963-tcp
55
port: 6963
56
protocol: TCP
57
targetPort: 6963
58
ingress:
59
enabled: false
60
className: nginx
61
hosts:
62
- path: /
63
annotations: {}
64
tls: []
65
ingresses:
66
- enabled: false
67
name: "gce-ingress"
68
className: "gce"
69
hosts:
70
- host: fulcio.localhost
71
paths:
72
- path: /test
73
pathType: Prefix
74
- path: /other-shard
75
serviceName: other-shard
76
annotations: {}
77
tls: []
78
staticGlobalIP: lb-ext-ip
79
frontendConfigSpec: # https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-configuration#configuring_ingress_features_through_frontendconfig_parameters
80
sslPolicy: ctlog-ssl-policy
81
redirectToHttps:
82
enabled: true
83
extraArgs: []
84
securityContext:
85
runAsNonRoot: true
86
runAsUser: 65533
87
tolerations: []
88
nodeSelector: {}
89
affinity: {}
90
createtree:
91
enabled: true
92
name: createtree
93
# This must be < 20 characters
94
displayName: ctlog-tree
95
image:
96
registry: cgr.dev
97
repository: chainguard-private/sigstore-scaffolding-trillian-createtree
98
pullPolicy: IfNotPresent
99
version: latest@sha256:833764227b2582b49f3fe771f2353e80600fc242c599ef98fef58e745dfc9221
100
ttlSecondsAfterFinished: 3600
101
serviceAccount:
102
create: true
103
name: ""
104
annotations: {}
105
mountToken: true
106
securityContext:
107
runAsNonRoot: true
108
runAsUser: 65533
109
annotations: {}
110
tolerations: []
111
nodeSelector: {}
112
affinity: {}
113
createctconfig:
114
enabled: true
115
replicaCount: 1
116
backoffLimit: 6
117
name: createctconfig
118
initContainerImage:
119
curl:
120
registry: cgr.dev
121
repository: chainguard-private/curl
122
version: latest-dev@sha256:096d8d5a69a38d0cf89c6826a3f31f30cb598cd770a58e12651963d83ced810c
123
imagePullPolicy: IfNotPresent
124
image:
125
registry: cgr.dev
126
repository: chainguard-private/sigstore-scaffolding-ctlog-createctconfig
127
pullPolicy: IfNotPresent
128
version: latest@sha256:350e1bec5101eec62a10fcb4390904b40591ab60f513aeb6d346b2982b6462bc
129
fulcioURL: "http://fulcio-server.fulcio-system.svc"
130
logPrefix: sigstorescaffolding
131
privateKeyPasswordSecretName: ""
132
ttlSecondsAfterFinished: 3600
133
pubkeysecret: "ctlog-public-key"
134
# If there's an existing private key that should be used for ctlog, specify
135
# here. This is important if a key has been created and imported into TUF.
136
privateSecret: ""
137
serviceAccount:
138
create: true
139
name: ""
140
annotations: {}
141
mountToken: true
142
securityContext:
143
runAsNonRoot: true
144
runAsUser: 65533
145
annotations: {}
146
tolerations: []
147
nodeSelector: {}
148
affinity: {}
149
trillian:
150
namespace: trillian-system
151
logServer:
152
name: trillian-logserver
153
portRPC: 8091
154
# Force namespace of namespaced resources
155
forceNamespace: ""
156
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.