helm-charts
helm-charts copied to clipboard
sigstore
Helm charts for sigstore project
## Description of the change ## Existing or Associated Issue(s) ## Additional Information ## Checklist - [ ] Chart version bumped in `Chart.yaml` according to [semver](http://semver.org/). Where applicable, update and...
## Description of the change ## Existing or Associated Issue(s) ## Additional Information ## Checklist - [ ] Chart version bumped in `Chart.yaml` according to [semver](http://semver.org/). Where applicable, update and...
## Description of the change ## Existing or Associated Issue(s) ## Additional Information ## Checklist - [ ] Chart version bumped in `Chart.yaml` according to [semver](http://semver.org/). Where applicable, update and...
## Description of the change ## Existing or Associated Issue(s) ## Additional Information ## Checklist - [ ] Chart version bumped in `Chart.yaml` according to [semver](http://semver.org/). Where applicable, update and...
needs trillian chart to be bumped before this can merge
## Description of the change This PR fixes the issue where only the key is output when the value is not provided for some fields such as `.Values.annotations` and `.Values.webhook.podDisruptionBudget.maxUnavailable`....
**Description** Fulcio ingress TLS option has the wrong indentation in the values. As per [http ingress template](https://github.com/sigstore/helm-charts/blob/main/charts/fulcio/templates/fulcio-http-ingress.yaml#L26), the TLS option is enabled via `.Values.server.ingress.tls`. However, the [default values](https://github.com/sigstore/helm-charts/blob/main/charts/fulcio/values.yaml#L67) makes use...
## Description of the change securityContxect to cleanup-leases job * In a cluster with https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ or other similar best practice policies, the lease job does not clean up, as it...
**Description** We've had several users be surprised by the behavior of both rekor & fulcio (as deployed by the helm charts) where the default signer is the `memory` option -...