Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow specifying resources in fulcio createcerts job #899

Open
wants to merge 8 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 11 additions & 5 deletions charts/fulcio/README.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,13 @@
# fulcio


<!-- This README.md is generated. Please edit README.md.gotmpl -->

![Version: 2.6.5](https://img.shields.io/badge/Version-2.6.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.6.6](https://img.shields.io/badge/AppVersion-1.6.6-informational?style=flat-square)

Fulcio is a free code signing Certificate Authority, built to make short-lived certificates available to anyone.


**Homepage:** <https://sigstore.dev/>

The following components are also included as either direct components or through chart dependencies:
Expand Down Expand Up @@ -45,7 +47,7 @@ The following components are also included as either direct components or throug

## Quick Installation

To install the helm chart with default values run following command.
To install the helm chart with default values run following command.
The [Values](#Values) section describes the configuration options for this chart.

```shell
Expand All @@ -67,6 +69,8 @@ helm uninstall [RELEASE_NAME]
| ---- | ------ | --- |
| The Sigstore Authors | | |



## Requirements

| Repository | Name | Version |
Expand All @@ -89,6 +93,7 @@ helm uninstall [RELEASE_NAME]
| createcerts.name | string | `"createcerts"` | |
| createcerts.nodeSelector | object | `{}` | |
| createcerts.replicaCount | int | `1` | |
| createcerts.resources | object | `{}` | |
| createcerts.securityContext.runAsNonRoot | bool | `true` | |
| createcerts.securityContext.runAsUser | int | `65533` | |
| createcerts.serviceAccount.annotations | object | `{}` | |
Expand Down Expand Up @@ -163,6 +168,7 @@ helm uninstall [RELEASE_NAME]
| server.name | string | `"server"` | |
| server.nodeSelector | object | `{}` | |
| server.replicaCount | int | `1` | |
| server.resources | object | `{}` | |
| server.secret | string | `"fulcio-server-secret"` | |
| server.securityContext.runAsNonRoot | bool | `true` | |
| server.securityContext.runAsUser | int | `65533` | |
Expand Down Expand Up @@ -195,10 +201,10 @@ To enabled access from external resources, an Ingress resource is created. The c
> **Warning**: versions prior to `0.3.0` of this chart use different ingresses.
>
> In version `0.3.0` a second ingress is introduced. This ingress exposes the gRPC endpoint as introduced in v0.4.0 of Fulcio.
>
>
> The change in particular is the structure of the ingress values.
> Prior to `0.3.0`:
>
>
> ```shell
> server:
> ingress:
Expand All @@ -207,9 +213,9 @@ To enabled access from external resources, an Ingress resource is created. The c
> - host: fulcio.localhost
> path: /
> ```
>
>
> Since `0.3.0`:
>
>
> ```shell
> server:
> ingress:
Expand Down
2 changes: 2 additions & 0 deletions charts/fulcio/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,7 @@ server:
port: 5555
requestPath: "/healthz"
type: HTTP
resources: {}
securityContext:
runAsNonRoot: true
runAsUser: 65533
Expand All @@ -131,6 +132,7 @@ createcerts:
name: ""
annotations: {}
mountToken: true
resources: {}
securityContext:
runAsNonRoot: true
runAsUser: 65533
Expand Down