Define deployment of bootstrap MTCA

Author: cjpatton

crates/ct_worker/README.md

@@ -132,6 +132,8 @@ Run the following for each of the `dev2025h1a` and `dev2025h2a` log shards to co
         openssl genpkey -algorithm ed25519 | npx wrangler -e=${ENV} secret put WITNESS_KEY_${LOG_NAME}
         openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 | npx wrangler -e=${ENV} secret put SIGNING_KEY_${LOG_NAME}
 
+    (Note: For mtc_worker we use ed25519 for both the witness key and the signing key.)
+
 1.  Deploy the worker. The worker will be available at `https://static-ct-${ENV}.<your-team>.workers.dev/logs/${LOG_NAME}`.
 
         npx wrangler -e=${ENV} deploy

crates/mtc_worker/.dev.vars

@@ -1,4 +1,6 @@
 SIGNING_KEY_dev1="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEIBCLa48rfJHyYIhRoP83GJzwEtEJfdVKeI6YvrZLhiUG\n-----END PRIVATE KEY-----\n"
 WITNESS_KEY_dev1="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEIHwiErJNKCNGZL+Osj+O8MqSMiwPP4kdcC4iTpojV9Od\n-----END PRIVATE KEY-----\n"
 SIGNING_KEY_dev2="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEINaOgrQNAgPl9+sEQqCxEnvlblHlC3JbrM04/uryf3we\n-----END PRIVATE KEY-----\n"
-WITNESS_KEY_dev2="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEINKYH1WadDgPJEXYzLx0OWzNoi4hRcpUnYpoWrTc7BDO\n-----END PRIVATE KEY-----\n"
+WITNESS_KEY_dev2="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEINKYH1WadDgPJEXYzLx0OWzNoi4hRcpUnYpoWrTc7BDO\n-----END PRIVATE KEY-----\n"
+SIGNING_KEY_shard1="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEINaOgrQNAgPl9+sEQqCxEnvlblHlC3JbrM04/uryf3we\n-----END PRIVATE KEY-----\n"
+WITNESS_KEY_shard1="-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEINKYH1WadDgPJEXYzLx0OWzNoi4hRcpUnYpoWrTc7BDO\n-----END PRIVATE KEY-----\n"

crates/mtc_worker/config.bootstrap-mtca.json

@@ -0,0 +1,12 @@
+{
+    "logging_level": "info",
+    "logs": {
+        "shard1": {
+            "description": "Cloudflare bootstrap MTCA shard 1",
+            "log_id": "13335.1",
+            "submission_url": "https://bootstrap-mtca.cloudflareresearch.com/logs/shard1/",
+            "monitoring_url": "https://bootstrap-mtca-shard1.cloudflareresearch.com",
+            "enable_dedup": false
+        }
+    }
+}

crates/mtc_worker/wrangler.jsonc

@@ -56,6 +56,50 @@
                     ]
                 }
             ]
+        },
+        "bootstrap-mtca": {
+            "build": {
+                // Change '--release' to '--dev' to compile with debug symbols.
+                // DEPLOY_ENV is used in build.rs to select per-environment config and roots.
+                "command": "cargo install -q worker-build && DEPLOY_ENV=bootstrap-mtca worker-build --release"
+            },
+            "route": {
+                "pattern": "bootstrap-mtca.cloudflareresearch.com",
+                "custom_domain": true
+            },
+            "r2_buckets": [
+                {
+                    "bucket_name": "bootstrap-mtca-shard1",
+                    "binding": "public_shard1"
+                }
+            ],
+            "durable_objects": {
+                "bindings": [
+                    {
+                        "name": "BATCHER",
+                        "class_name": "Batcher"
+                    },
+                    {
+                        "name": "CLEANER",
+                        "class_name": "Cleaner"
+                    },
+                    {
+                        "name": "SEQUENCER",
+                        "class_name": "Sequencer"
+                    }
+                ]
+            },
+            "migrations": [
+                {
+                    // tag should be unique for each entry
+                    "tag": "v1",
+                    "new_sqlite_classes": [
+                        "Batcher",
+                        "Cleaner",
+                        "Sequencer"
+                    ]
+                }
+            ]
         }
     }
-}
+}