8 secret: tsa-server-secret
15 # Credentials file read by kms/tink if set. Unset by default
16 GOOGLE_APPLICATION_CREDENTIALS: ""
18 registry: chainreg.biz
19 repository: chainguard-private/timestamp-authority-server
20 pullPolicy: IfNotPresent
21 # crane digest ghcr.io/sigstore/timestamp-server:v2.1.4
22 version: 2.1.4-r0@sha256:9bb0c1aa591fe8d1785b8976cab07619c72b3846735e586dd9f4b858582dd889
25 # Valid values: tink, kms, file
27 # PEM encoded cert chain here. Order from active intermedate first to root last
29 tink_enc_keyset: keyset
30 tink_key_resource: resource
31 tink_hcvault_token: token
32 kms_key_resource: resource
42 port: 80 # must match .Values.server.svcPort
56 host: "timestamp.localhost"
68# Force namespace of namespaced resources