DirectorySecurity AdvisoriesPricing
Sign in
Directory
sigstore-ctlog logoHELM

sigstore-ctlog

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart versions
Default values
Chart metadata
Images

Tag:

1
namespace:
2
create: false
3
name: ctlog-system
4
imagePullSecrets: []
5
server:
6
replicaCount: 1
7
config:
8
key: treeID
9
treeID: ""
10
image:
11
registry: cgr.dev
12
repository: chainguard-private/ctlog-trillian-ctserver
13
pullPolicy: IfNotPresent
14
version: latest@sha256:1166e14be4807cbb5cbdae54d80cddfe17a1bd85785aede9e43c9209135af3a6
15
livenessProbe:
16
httpGet:
17
path: /healthz
18
port: 6962
19
initialDelaySeconds: 10
20
readinessProbe:
21
httpGet:
22
path: /healthz
23
port: 6962
24
initialDelaySeconds: 10
25
serviceAccount:
26
create: true
27
name: ""
28
annotations: {}
29
mountToken: false
30
podAnnotations:
31
prometheus.io/scrape: "true"
32
prometheus.io/path: /metrics
33
prometheus.io/port: "6963"
34
podLabels: {}
35
portHTTP: 6962
36
portHTTPMetrics: 6963
37
service:
38
# backendConfig:
39
# name: ctlog-backend-config
40
# spec: # https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-configuration#configuring_ingress_features_through_backendconfig_parameters
41
# securityPolicy:
42
# name: ctlog-security-policy
43
# logging:
44
# enable: true
45
# healthCheck:
46
# port: 6962
47
# requestPath: "/healthz"
48
# type: HTTP
49
type: ClusterIP
50
ports:
51
- name: 6962-tcp
52
port: 80
53
protocol: TCP
54
targetPort: 6962
55
- name: 6963-tcp
56
port: 6963
57
protocol: TCP
58
targetPort: 6963
59
ingress:
60
enabled: false
61
className: nginx
62
hosts:
63
- path: /
64
annotations: {}
65
tls: []
66
ingresses:
67
- enabled: false
68
name: "gce-ingress"
69
className: "gce"
70
hosts:
71
- host: fulcio.localhost
72
paths:
73
- path: /test
74
pathType: Prefix
75
- path: /other-shard
76
serviceName: other-shard
77
annotations: {}
78
tls: []
79
staticGlobalIP: lb-ext-ip
80
frontendConfigSpec: # https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-configuration#configuring_ingress_features_through_frontendconfig_parameters
81
sslPolicy: ctlog-ssl-policy
82
redirectToHttps:
83
enabled: true
84
extraArgs: []
85
securityContext:
86
runAsNonRoot: true
87
runAsUser: 65533
88
tolerations: []
89
nodeSelector: {}
90
affinity: {}
91
createtree:
92
enabled: true
93
name: createtree
94
# This must be < 20 characters
95
displayName: ctlog-tree
96
image:
97
registry: cgr.dev
98
repository: chainguard-private/sigstore-scaffolding-trillian-createtree
99
pullPolicy: IfNotPresent
100
version: latest@sha256:c61a3dce0d542a231253a0a4e0bf879343dc86fe270d543bd96b1e98939212a7
101
ttlSecondsAfterFinished: 3600
102
serviceAccount:
103
create: true
104
name: ""
105
annotations: {}
106
mountToken: true
107
securityContext:
108
runAsNonRoot: true
109
runAsUser: 65533
110
annotations: {}
111
podAnnotations: {}
112
podLabels: {}
113
tolerations: []
114
nodeSelector: {}
115
affinity: {}
116
createctconfig:
117
enabled: true
118
replicaCount: 1
119
backoffLimit: 6
120
name: createctconfig
121
initContainerImage:
122
curl:
123
registry: cgr.dev
124
repository: chainguard-private/curl
125
version: latest-dev@sha256:52258a3c473e3b8a87f9aeafbc6fc9beaa1e261f84cb969da93897b723bd9615
126
imagePullPolicy: IfNotPresent
127
image:
128
registry: cgr.dev
129
repository: chainguard-private/sigstore-scaffolding-ctlog-createctconfig
130
pullPolicy: IfNotPresent
131
version: latest@sha256:79e3e2f98b5abe412a0aa6705ae89b5abc91111939dc373930c8809d2b9a4a29
132
fulcioURL: "http://fulcio-server.fulcio-system.svc"
133
logPrefix: sigstorescaffolding
134
privateKeyPasswordSecretName: ""
135
ttlSecondsAfterFinished: 3600
136
pubkeysecret: "ctlog-public-key"
137
# If there's an existing private key that should be used for ctlog, specify
138
# here. This is important if a key has been created and imported into TUF.
139
privateSecret: ""
140
serviceAccount:
141
create: true
142
name: ""
143
annotations: {}
144
mountToken: true
145
securityContext:
146
runAsNonRoot: true
147
runAsUser: 65533
148
annotations: {}
149
podAnnotations: {}
150
podLabels: {}
151
tolerations: []
152
nodeSelector: {}
153
affinity: {}
154
trillian:
155
namespace: trillian-system
156
logServer:
157
name: trillian-logserver
158
portRPC: 8091
159
# Force namespace of namespaced resources
160
forceNamespace: ""
161

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.