helm-charts

helm-charts copied to clipboard

TSA secret always required for TUF deployment

1

**Description** Currently, the TSA secret is consistently mandated for [TUF deployment](https://github.com/sigstore/helm-charts/blob/main/charts/tuf/templates/deployment.yaml#L66-L70), despite its optional nature. Could consideration be given to implementing a flag that allows for the exclusion of this...

xoanmi

Encountering a problem when attempting to operate TUF in high-availability mode.

2

I've installed the scaffold helm chart version 0.6.34 on the private EKS cluster and enabled high availability (e.g., 2 replicas) for all Sigstore components. TUF Version: v0.6.9 However, when attempting...

VikramPunnam

Would like to request allowing tolerations, nodeSelector and affinity to be configured. Currently only trillian (logserver, logsigner, mysql) and rekor (redis, server) can be configured to add tolerations. The following...

Jaryllan

**Question** Hi, I have two clusterimagepolicies --- apiVersion: policy.sigstore.dev/v1alpha1 kind: ClusterImagePolicy metadata: name: image-policy-objectmeta spec: mode: warn match: - resource: deployments version: v1 group: apps selector: matchLabels: group: back images:...

Minivolk02

Path in deployed CTFE public key file for ephemeral TUF creation should include "ctfe" to correctly hint as to its use in TUF creation

3

https://github.com/sigstore/helm-charts/blob/b3876089c778987b29a89cee6ec14c6fd3679336/charts/scaffold/values.yaml#L82C16-L82C16 needs to be called CTFE instead of ctlog. As per here: https://github.com/sigstore/scaffolding/blob/2be6921bb64c02ec00e65c69b3dc41191df5f5cd/pkg/repo/repo.go#L137C11-L137C11 Slack Thread + GitHub issue likely related: https://github.com/sigstore/cosign/issues/3386 https://sigstore.slack.com/archives/C01PZKDL4DP/p1700838479395349?thread_ts=1694462110.654769&cid=C01PZKDL4DP

LewisThomas

Support adding custom labels to the deployment policy controller

3

**Description** Support added custom labels to the webhook deployment for hte policy controller In our project we use NetworkPolicies to limit what applications are allowed to access. For the network...

CodeGlitcher

`ctlog` is missing a dependency on `trillian`

2

**Description** I noticed that the Rekor chart spins up Trillian, but the `ctlog` chart does not. Rekor has the following: https://github.com/sigstore/helm-charts/blob/33a3eb210f47a6a2007981e59851fb555b53e308/charts/rekor/Chart.yaml#L20-L24 However, I don't see the same in the ctlog...

mattmoor

Make cleanup-leases security context configurable

1

## Description of the change The SecurityContext field for this job is currently static, however when deploying policy-controller into a namespace that uses Pod Security Admission controllers this job will...

sirisaacnuketon

trillian chart does not deploy on Apple Silicon macs, but it could

2

The latest trillian chart does not deploy on apple silicon. As is, this is not exactly a bug but a conscious decision introduced in https://github.com/sigstore/helm-charts/pull/424 to address https://github.com/sigstore/helm-charts/issues/376. But docker...

federico-falconieri-form3

WIP: Changes to ctlog to update to latest and incorporation of common chart

1

## Description of the change First integration of the v2 rework to refactor charts to using the [common](https://github.com/sigstore/helm-charts/tree/main/charts/common) Helm Charts. ## Existing or Associated Issue(s) #536 ## Additional Information ##...

sabre1041