rekor

rekor

Part of the sigstore project, Rekor is a timestamping server and transparency log for storing signatures, as well as an API based server for validation

Homepage: https://sigstore.dev/

Maintainers

Name	Email	Url
The Sigstore Authors

Source Code

• https://github.com/sigstore/rekor

Requirements

Repository	Name	Version
https://sigstore.github.io/helm-charts	trillian	0.2.19

Values

Key	Type	Default	Description
backfillredis.enabled	bool	false
backfillredis.endIndex	int	-1
backfillredis.image.pullPolicy	string	"IfNotPresent"
backfillredis.image.registry	string	"ghcr.io"
backfillredis.image.repository	string	"sigstore/rekor/backfill-redis"
backfillredis.image.version	string	"sha256:21a9b240cb5e30f04b701b72e67554d0d1904f96a42ef361f1bde3e57274d05e"
backfillredis.name	string	"backfillredis"
backfillredis.rekorAddress	string	"rekor.rekor-system.svc"
backfillredis.resources	object	{}
backfillredis.securityContext.runAsNonRoot	bool	true
backfillredis.securityContext.runAsUser	int	65533
backfillredis.startIndex	int	-1
backfillredis.ttlSecondsAfterFinished	int	3600
createtree.annotations	object	{}
createtree.force	bool	false
createtree.image.pullPolicy	string	"IfNotPresent"
createtree.image.registry	string	"ghcr.io"
createtree.image.repository	string	"sigstore/scaffolding/createtree"
createtree.image.version	string	"sha256:fe4f41981fce2d6497b9f6a8e9dbdf3b0f3a5396feda6341090f363020ffb8bb"
createtree.name	string	"createtree"
createtree.resources	object	{}
createtree.securityContext.runAsNonRoot	bool	true
createtree.securityContext.runAsUser	int	65533
createtree.serviceAccount.annotations	object	{}
createtree.serviceAccount.create	bool	true
createtree.serviceAccount.name	string	""
createtree.ttlSecondsAfterFinished	int	3600
forceNamespace	string	""
imagePullSecrets	list	[]
initContainerImage.curl.imagePullPolicy	string	"IfNotPresent"
initContainerImage.curl.registry	string	"docker.io"
initContainerImage.curl.repository	string	"curlimages/curl"
initContainerImage.curl.version	string	"sha256:4bfa3e2c0164fb103fb9bfd4dc956facce32b6c5d47cc09fcec883ce9535d5ac"	8.5.0
namespace.create	bool	false
namespace.name	string	"rekor-system"
redis.args[0]	string	"--bind"
redis.args[1]	string	"0.0.0.0"
redis.args[2]	string	"--appendonly"
redis.args[3]	string	"yes"
redis.enabled	bool	true
redis.hostname	string	""
redis.image.pullPolicy	string	"IfNotPresent"
redis.image.registry	string	"docker.io"
redis.image.repository	string	"redis"
redis.image.version	string	"sha256:c5a607fb6e1bb15d32bbcf14db22787d19e428d59e31a5da67511b49bb0f1ccc"	6.2.14-alpine3.19
redis.name	string	"redis"
redis.port	int	6379
redis.readinessProbe.exec.command[0]	string	"/bin/sh"
redis.readinessProbe.exec.command[1]	string	"-i"
redis.readinessProbe.exec.command[2]	string	"-c"
redis.readinessProbe.exec.command[3]	string	"test \"$(redis-cli -h 127.0.0.1 ping)\" = \"PONG\""
redis.readinessProbe.failureThreshold	int	3
redis.readinessProbe.initialDelaySeconds	int	5
redis.readinessProbe.periodSeconds	int	10
redis.readinessProbe.successThreshold	int	1
redis.readinessProbe.timeoutSeconds	int	1
redis.replicaCount	int	1
redis.resources	object	{}
redis.service.ports[0].name	string	"6379-tcp"
redis.service.ports[0].port	int	6379
redis.service.ports[0].protocol	string	"TCP"
redis.service.ports[0].targetPort	int	6379
redis.service.type	string	"ClusterIP"
redis.serviceAccount.annotations	object	{}
redis.serviceAccount.create	bool	true
redis.serviceAccount.name	string	""
server.attestation_storage.bucket	string	"file:///var/run/attestations"
server.attestation_storage.enabled	bool	true
server.attestation_storage.persistence.accessModes[0]	string	"ReadWriteOnce"
server.attestation_storage.persistence.annotations	object	{}
server.attestation_storage.persistence.enabled	bool	true
server.attestation_storage.persistence.existingClaim	string	""
server.attestation_storage.persistence.mountPath	string	"/var/lib/mysql"
server.attestation_storage.persistence.size	string	"5Gi"
server.attestation_storage.persistence.storageClass	string	""
server.attestation_storage.persistence.subPath	string	""
server.config.key	string	"treeID"
server.config.treeID	string	""
server.enabled	bool	true
server.extraArgs	list	[]
server.image.pullPolicy	string	"IfNotPresent"
server.image.registry	string	"gcr.io"
server.image.repository	string	"projectsigstore/rekor-server"
server.image.version	string	"sha256:bafe388dd66097f06516bc67cf9c0fc5da629798f60a2326e8c4b4584c82ed4f"
server.ingress.annotations	object	{}
server.ingress.className	string	"nginx"
server.ingress.enabled	bool	true
server.ingress.hosts[0].host	string	"root"
server.ingress.hosts[0].path	string	"/"
server.ingress.tls	list	[]
server.ingresses[0].annotations	object	{}
server.ingresses[0].backendConfigSpec.logging.enable	bool	true
server.ingresses[0].backendConfigSpec.securityPolicy.name	string	"rekor-security-policy"
server.ingresses[0].className	string	"gce"
server.ingresses[0].enabled	bool	false
server.ingresses[0].frontendConfigSpec.redirectToHttps.enabled	bool	true
server.ingresses[0].frontendConfigSpec.sslPolicy	string	"rekor-ssl-policy"
server.ingresses[0].hosts[0].host	string	"root"
server.ingresses[0].hosts[0].path	string	"/"
server.ingresses[0].name	string	"gce-ingress"
server.ingresses[0].staticGlobalIP	string	"lb-ext-ip"
server.ingresses[0].tls	list	[]
server.livenessProbe.failureThreshold	int	3
server.livenessProbe.httpGet.path	string	"/ping"
server.livenessProbe.httpGet.port	int	3000
server.livenessProbe.initialDelaySeconds	int	30
server.livenessProbe.periodSeconds	int	10
server.livenessProbe.successThreshold	int	1
server.livenessProbe.timeoutSeconds	int	1
server.logging.production	bool	false
server.name	string	"server"
server.podAnnotations."prometheus.io/path"	string	"/metrics"
server.podAnnotations."prometheus.io/port"	string	"2112"
server.podAnnotations."prometheus.io/scrape"	string	"true"
server.port	int	3000
server.readinessProbe.failureThreshold	int	3
server.readinessProbe.httpGet.path	string	"/ping"
server.readinessProbe.httpGet.port	int	3000
server.readinessProbe.initialDelaySeconds	int	10
server.readinessProbe.periodSeconds	int	10
server.readinessProbe.successThreshold	int	1
server.readinessProbe.timeoutSeconds	int	1
server.replicaCount	int	1
server.resources	object	{}
server.retrieve_api.enabled	bool	true
server.securityContext.runAsNonRoot	bool	true
server.securityContext.runAsUser	int	65533
server.service.ports[0].name	string	"3000-tcp"
server.service.ports[0].port	int	80
server.service.ports[0].protocol	string	"TCP"
server.service.ports[0].targetPort	int	3000
server.service.ports[1].name	string	"2112-tcp"
server.service.ports[1].port	int	2112
server.service.ports[1].protocol	string	"TCP"
server.service.ports[1].targetPort	int	2112
server.service.type	string	"ClusterIP"
server.serviceAccount.annotations	object	{}
server.serviceAccount.create	bool	true
server.serviceAccount.name	string	""
server.sharding.contents	string	""
server.sharding.filename	string	"sharding-config.yaml"
server.sharding.mountPath	string	"/sharding"
server.signer	string	"memory"
trillian.adminServer	string	""
trillian.enabled	bool	true
trillian.forceNamespace	string	"trillian-system"
trillian.fullnameOverride	string	"trillian"
trillian.logServer.fullnameOverride	string	"trillian-logserver"
trillian.logServer.name	string	"trillian-logserver"
trillian.logServer.portHTTP	int	8090
trillian.logServer.portRPC	int	8091
trillian.logSigner.fullnameOverride	string	"trillian-logsigner"
trillian.logSigner.name	string	"trillian-logsigner"
trillian.mysql.fullnameOverride	string	"trillian-mysql"
trillian.namespace.create	bool	true
trillian.namespace.name	string	"trillian-system"