values-openshift.tmpl

---
global:
  appsSubdomain: {{ .OpenShiftAppsSubdomain }}
configs:
  segment_backup_job:
    enabled: false
    namespace_create: false
  cosign_deploy:
    enabled: true
  fulcio:
    namespace_create: false
  rekor:
    namespace_create: false

# github.com/sigstore/helm-charts/charts
scaffold:
  fulcio:
    server:
      ingress:
        http:
          hosts:
            - host: fulcio.{{ .OpenShiftAppsSubdomain }}
              path: /
    config:
      contents:
        OIDCIssuers:
          {{- if .OIDCconfig.IssuerURL }}
          {{ .OIDCconfig.IssuerURL }}:
            IssuerURL: "{{ .OIDCconfig.IssuerURL }}"
            ClientID: "{{ if .OIDCconfig.ClientID }}{{ .OIDCconfig.ClientID }}{{ else }}sigstore{{ end }}"
            Type: "{{ if .OIDCconfig.Type }}{{ .OIDCconfig.Type }}{{ else }}email{{ end }}"
          {{- else }}
          "https://oauth2.sigstore.dev/auth":
            IssuerURL: "https://oauth2.sigstore.dev/auth"
            ClientID: "sigstore"
            Type: "email"
          {{- end }}
  rekor:
    server:
      ingress:
        hosts:
          - host: rekor.{{ .OpenShiftAppsSubdomain }}
            path: /
  tuf:
    ingress:
      http:
        hosts:
          - host: tuf.{{ .OpenShiftAppsSubdomain }}
            path: /