tuf

A framework for securing software update systems - the scaffolding implementation

Maintainers

Name	Email	Url
The Sigstore Authors		https://sigstore.dev/

Key	Type	Default
deployment.imagePullPolicy	string	`"IfNotPresent"`
deployment.name	string	`"tuf"`
deployment.port	int	`8080`
deployment.registry	string	`"ghcr.io"`
deployment.replicas	int	`1`
deployment.repository	string	`"sigstore/scaffolding/server"`
deployment.version	string	`"sha256:496b443c82be2c4a14a6e3dfbfa9ccae5b6eaedd7a3aca58b84ddae9492d9906"`
enabled	bool	`true`
forceNamespace	string	`""`
fullnameOverride	string	`"tuf"`
imagePullSecrets	list	`[]`
ingress.annotations	object	`{}`
ingress.className	string	`"nginx"`
ingress.create	bool	`true`
ingress.http.hosts[0].host	string	`"tuf.localhost"`
ingress.http.hosts[0].path	string	`"/"`
ingress.name	string	`"tuf-server"`
namespace.create	bool	`false`
namespace.name	string	`"fulcio-system"`
roleBindingName	string	`"tuf"`
roleName	string	`"tuf"`
secrets.ctlog.create	bool	`false`
secrets.ctlog.key	string	`"public"`
secrets.ctlog.name	string	`"ctlog-public-key"`
secrets.ctlog.path	string	`"ctfe.pub"`
secrets.fulcio.create	bool	`false`
secrets.fulcio.key	string	`"cert"`
secrets.fulcio.name	string	`"fulcio-server-secret"`
secrets.fulcio.path	string	`"fulcio_v1.crt.pem"`
secrets.rekor.create	bool	`false`
secrets.rekor.key	string	`"key"`
secrets.rekor.name	string	`"rekor-public-key"`
secrets.rekor.path	string	`"rekor.pub"`
secrets.tsa.create	bool	`false`
secrets.tsa.key	string	`"cert-chain"`
secrets.tsa.name	string	`"tsa-cert-chain"`
secrets.tsa.path	string	`"tsa.certchain.pem"`
service.name	string	`"tuf-server"`
service.port	int	`80`
serviceAccountName	string	`"tuf"`