8 secret: tsa-server-secret
15 # Credentials file read by kms/tink if set. Unset by default
16 GOOGLE_APPLICATION_CREDENTIALS: ""
19 repository: chainguard-private/timestamp-authority-server
20 pullPolicy: IfNotPresent
21 # crane digest ghcr.io/sigstore/timestamp-server:v2.1.0
22 version: 2.1.3-r11@sha256:f434895ea9572052baa2b77d7da6179e2fd78d929ec15cac85a4c20c7715783f
25 # Valid values: tink, kms, file
27 # PEM encoded cert chain here. Order from active intermedate first to root last
29 tink_enc_keyset: keyset
30 tink_key_resource: resource
31 tink_hcvault_token: token
32 kms_key_resource: resource
42 port: 80 # must match .Values.server.svcPort
56 host: "timestamp.localhost"
68# Force namespace of namespaced resources