add scratchnet stack files

.github/workflows/cluster_tests.yml

@@ -9,6 +9,9 @@ on:
       sha:
         type: string
         required: true
+      splice_url:
+        type: string
+        required: true
 
     outputs:
       result:
@@ -39,5 +42,5 @@ jobs:
         run: |
           set -euo pipefail
           result=$(curl -sSfL -H "Authorization: Bearer ${{ steps.auth.outputs.id_token }}" \
-            "${{ secrets.CLUSTER_TEST_INVOKER_URL }}?workflow=${{ inputs.workflow }}&splice-git-ref=${{ inputs.sha }}")
+            "${{ secrets.CLUSTER_TEST_INVOKER_URL }}?workflow=${{ inputs.workflow }}&splice-git-ref=${{ inputs.sha }}&splice-url=${{ inputs.splice_url }}" \)
           echo "result=$result" >> "$GITHUB_OUTPUT"

.github/workflows/pr_cluster_test.yml

@@ -10,50 +10,56 @@ permissions:
 
 jobs:
 
-  get_sha:
+  get_head:
     runs-on: self-hosted-docker-tiny
     outputs:
-      sha: ${{ steps.comment-branch.outputs.head_sha }}
+      sha: ${{ steps.get_head.outputs.sha }}
+      repo: ${{ steps.get_head.outputs.repo }}
     steps:
-      - name: Get PR branch
-        uses: xt0rted/pull-request-comment-branch@e8b8daa837e8ea7331c0003c9c316a64c6d8b0b1 # v3.0.0
-        id: comment-branch
+      - name: Get head SHA & repo
+        id: get_head
+        run: |
+          query='query pullRequestDetails { repository(name: "${{ github.event.repository }}", owner: "${{ github.event.organization }}") { pullRequest(number: ${{ github.event.issue.number }}) { headRef { target { oid } } headRepository { sshUrl } } } }'
+          result=$(gh api graphql -F query="$query")
+          sha=$(echo "$result" | jq -r '.data.repository.pullRequest.headRef.target.oid')
+          repo=$(echo "$result" | jq -r '.data.repository.pullRequest.headRepository.sshUrl')
 
   trigger_cluster_test_basic:
     if: github.event.issue.pull_request && contains(github.event.comment.body, '/cluster_test')
-    needs: get_sha
+    needs: get_head
     uses: ./.github/workflows/cluster_tests.yml
     secrets: inherit
     with:
       workflow: cluster_test
-      sha: ${{ needs.get_sha.outputs.sha }}
+      sha: ${{ needs.get_head.outputs.sha }}
+      splice_url: ${{ needs.get_head.outputs.repo }}
 
   result:
     runs-on: self-hosted-docker-tiny
     needs:
       - trigger_cluster_test_basic
-      - get_sha
+      - get_head
     steps:
       - run: |
           number=$(echo '${{ needs.trigger_cluster_test_basic.outputs.result }}' | jq -r '.number')
-          echo "Deploy scratchnet pipeline triggered for [PR as of ${{ needs.get_sha.outputs.sha }}](https://github.com/${{ github.repository }}/pull/${{ github.event.issue.number }}/files/${{ needs.get_sha.outputs.sha }}), please approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/${number}"
+          echo "Deploy scratchnet pipeline triggered for [commit ${{ needs.get_head.outputs.sha }} in ${{ needs.get_head.outputs.repo }}](https://github.com/${{ github.repository }}/pull/${{ github.event.issue.number }}/files/${{ needs.get_head.outputs.sha }}), please approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/${number}"
 
 
   trigger_cluster_test_hdm:
     if: github.event.issue.pull_request && contains(github.event.comment.body, '/hdm_test')
-    needs: get_sha
+    needs: get_head
     uses: ./.github/workflows/cluster_tests.yml
     secrets: inherit
     with:
       workflow: hdm_test
-      sha: ${{ needs.get_sha.outputs.sha }}
+      sha: ${{ needs.get_head.outputs.sha }}
 
   result_hdm:
     runs-on: self-hosted-docker-tiny
     needs:
       - trigger_cluster_test_hdm
-      - get_sha
+      - get_head
     steps:
       - run: |
           number=$(echo '${{ needs.trigger_cluster_test_hdm.outputs.result }}' | jq -r '.number')
-          echo "Deploy scratchnet HDM pipeline triggered for [PR as of ${{ needs.get_sha.outputs.sha }}](https://github.com/${{ github.repository }}/pull/${{ github.event.issue.number }}/files/${{ needs.get_sha.outputs.sha }}), please approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/${number}"
+          echo "Deploy scratchnet HDM pipeline triggered for [commit ${{ needs.get_head.outputs.sha }} in ${{ needs.get_head.outputs.repo }}](https://github.com/${{ github.repository }}/pull/${{ github.event.issue.number }}/files/${{ needs.get_head.outputs.sha }}), please approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/${number}"

.github/workflows/test.yml

@@ -0,0 +1,32 @@
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+  pull_request_target:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  get_head:
+    runs-on: self-hosted-docker-tiny
+    outputs:
+      sha: ${{ steps.get_head.outputs.sha }}
+      repo: ${{ steps.get_head.outputs.repo }}
+    steps:
+      - name: Get head SHA & repo
+        id: get_head
+        run: |
+          set -euo pipefail
+          query='query pullRequestDetails { repository(name: \"${{ github.event.repository.name }}\", owner: \"${{ github.repository_owner }}\") { pullRequest(number: 416) { headRef { target { oid } } headRepository { sshUrl } } } }'
+          result=$(curl -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -X POST -d " { \"query\": \"$query\" } " https://api.github.com/graphql)
+          echo "result: $result"
+          sha=$(echo "$result" | jq -r '.data.repository.pullRequest.headRef.target.oid')
+          repo=$(echo "$result" | jq -r '.data.repository.pullRequest.headRepository.sshUrl')
+          echo "sha=$sha" >> $GITHUB_OUTPUT
+          echo "repo=$repo" >> $GITHUB_OUTPUT
+
+  test:
+    runs-on: self-hosted-docker-tiny
+    needs: get_head
+    steps:
+      - name: Run tests
+        run: |
+          echo "Running tests for commit ${{ needs.get_head.outputs.sha }} in ${{ needs.get_head.outputs.repo }}"

cluster/stacks/scratchnets/canton-network/Pulumi.canton-network.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxZPemGceAkOgzXfn1wid4kvUWQ2vrAz9E1wNhuN6cC4SSQD+EWqwx0XCu2NbYDtgPZoiaG5kOSPsGEdUXFF9Ba++vuTNI64Hltx6y4kQOYdIXPSgmV2hxTvJZHJGF2p/DTlP0R3rE2Bj7MA=

cluster/stacks/scratchnets/canton-network/Pulumi.canton-network.scratchb.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: >-
+  CiQAqRIZ7I8zj1q3uXTSCc9K25UdE+1vYd/vQ5N/kZT/4rhUP/kSSQDw67rm9bRuvqBj8ygpASBAq8qMQ/ZeCGEoq3gEbnDNn0aHMlAOGogVN/XpMN5V1QmAxeKuOTYEycNi4MAHo4JNpy+G9waLxM0=

cluster/stacks/scratchnets/canton-network/Pulumi.canton-network.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvof2PQeGhSWsm1sckh23AVAuXFCXfxETRROhP/PbfBAaUSSQDtn4lynQThpHzCNOQq61ShlO2uUwS0FhQpCIFi7KUxL3ZwORA70IryG5B4Z4Yvw/tUPzIhxyWuxv6/cvWa/9mHScPmC/K2AJA=

cluster/stacks/scratchnets/canton-network/Pulumi.canton-network.scratchd.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: >-
+  CiQAzqJiPqj0dNwYZVSEBpLBeuzWNBDYWF5/ZRGFSl0Jd9RDTJASSQBxu7B5lj+6NckaLTmQx3DUABxlhdGTZWqVFyCdA+Mi07aVJH/RKsYrbwmDgQjYS3vdAdSGwfO9XU6Y9mbVdoP5LFxzZwbrM7E=

cluster/stacks/scratchnets/canton-network/Pulumi.canton-network.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HMFCVqioNenvEZIPaqAJdWwsELdOnVGDn04vEhsAU00SSQDaXOIdaHO6XEdEewD5QyRLhV7nP0Rju8R2RvbJuMkCWTMPsQ/sfg+ZCWI3Y/8W3a51/lxXmCTS/cnPX2MtYbZt/LNzkO/6Z8U=

cluster/stacks/scratchnets/canton-network/Pulumi.yaml

@@ -0,0 +1,5 @@
+---
+name: canton-network
+description: "Deploy Canton Network to Kubernetes"
+runtime: nodejs
+main: "../../../pulumi/canton-network/src/index.ts"

cluster/stacks/scratchnets/cluster/Pulumi.cluster.scratcha.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: CiQA1n+IxZUeuzhU+0K+WX328gLWDNYay0QgSoe38j2wiJVq2tkSSQD+EWqwUC/egFoQg1ZJeGuIkDtcpibGwtsOgBz7b0Pd17ui3/j1QRkHVoMwCKTiJ/frsj6f4lCsnS3xi47Kpxkz5ocCpj4gpj0=

cluster/stacks/scratchnets/cluster/Pulumi.cluster.scratchb.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: CiQAqRIZ7BtTAwybpYQDlarCee7lJjh7eE8q5wMesW27/Lh+SaQSSQDw67rmrOUCfeMtGBZA6VBf56WgbyeweTogK4y0rmylxWXozYgNbo2sBtK3wcX1Qt41JxKlUIxJzDB3z/ob+tANvBkzHptHXlQ=

cluster/stacks/scratchnets/cluster/Pulumi.cluster.scratchc.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: CiQAnkvofyqVSDPA9t6NwgINABC3Me3dzr5VAd90Trss6iEk1qgSSQDtn4lyr5iQfjB2IBOjVHQZjIJxGQfoe9RqG/MdwGm4kSP2xZL6kZnNLY7wAkO5JX4qpTaEyISo3sNK6BxbNNClgh0xQlnhYMU=

cluster/stacks/scratchnets/cluster/Pulumi.cluster.scratchd.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: CiQAzqJiPr9KGvyDTZPqAs+dvYVrwp97VSJ+TPGZujIJbt9jl3USSQBxu7B5N5IAFkv8s64zqHTBxO/kYTFkz+d+kXs53Y4KiwKhJMqS7ZDMp9ucRyDScpHp6m6j5dceKH7rcVAVEeruLIM/pgWlLyI=

cluster/stacks/scratchnets/cluster/Pulumi.cluster.scratche.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: CiQAwwY8HPpJgGmjAkUQe7ewI3AalesQRc2tAswYwr07zsf8VcISSADaXOIdhPzUr/Yf0HnoJcMVEyAmNoFhy6Zlyf6SrY/OZwo01djhiI48Y+0fAiiEj9dKys2jaSQAGOxRZKQaUZH8tduFwmbQIA==

cluster/stacks/scratchnets/cluster/Pulumi.yaml

@@ -0,0 +1,5 @@
+---
+name: cluster
+description: "GKE Cluster for Canton Network"
+runtime: nodejs
+main: "../../../pulumi/cluster/src/index.ts"

cluster/stacks/scratchnets/deployment/Pulumi.deployment.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxRfqk3iL+iDOy03jhfwzIp4eqWfDiJS7cQecB2S068ASSQD+EWqwty1Us8v7Au7HoYvuXmoCISQsbR1DSubGWFMvv3XT6akb5UpiH4xO+P+UW6bvPZINMp+gRYv51/Y5/LiaCF/ycKALAls=

cluster/stacks/scratchnets/deployment/Pulumi.deployment.scratchb.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: >-
+  CiQAqRIZ7CDXj+COetjwAgCOhijPwrc3epPpVlETj/5Q7NDZx38SSQDw67rm1G9OxYQ9jvokcB6cV4bP33H5JQsSrpNfY7zAg0P5ugS0HPRkvRv+8QHmbNb5jR6K2KvMP1yFvMMzQ1dflGPx23m5NIw=

cluster/stacks/scratchnets/deployment/Pulumi.deployment.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvofwKPcV2WW3nqrD2OomSfjutfw/r0jL15BGMyauM4IP8SSQDtn4lyl3yAS/u4xbvjk9Y9KwMv3wiIvwQheLOD+benBzYegZcfSYMXXtKzD74xm3e2a7eAOML7SOHi9rG/97iKofkLAlHEEas=

cluster/stacks/scratchnets/deployment/Pulumi.deployment.scratchd.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: >-
+  CiQAzqJiPnxZC1EfGKIOVVe6lNMmETz+OU109Bgko+vyzzJoQk8SSQBxu7B5W4fkrpwpOi2oXwb8etYFYaru/2gEotyhtXXy+aQbrHBYsprn59kv1Np9PKQR81RnXVDuOyH/LHWTSToOCTtYl7GBHGs=

cluster/stacks/scratchnets/deployment/Pulumi.deployment.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HBJf3JM6bvbDtF67QdUFmIf+FLwCbeRpLpy6a8/cdtwSSQDaXOIdSiPu+IzgE7DSqhUb6TNekl0sAps4PjtCJKCp/g/LTOos0Ye17wwalA27XHQNNB3uE/tenXaXJx0YL88mJY6gO2bd4O8=

cluster/stacks/scratchnets/deployment/Pulumi.yaml

@@ -0,0 +1,5 @@
+name: deployment
+runtime:
+  name: nodejs
+description: Pulumi k8s operator
+main: "../../../pulumi/deployment/src/index.ts"

cluster/stacks/scratchnets/gcp-project/Pulumi.da-cn-scratchnet.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: CiQA1n+IxeC/jutl5XZZW8CGBhtuEr97F8+CRVGsHmAqsJBCTKASSQD+EWqwv8k0XIt616i4h5JMJvLdyhEzG06WwRk9cuSrEwqjs9Bkfhv11BtKVSeYu/k0z4PslOOJFacXjIMf7d7vyEyw1/ZA6Ck=

cluster/stacks/scratchnets/gcp-project/Pulumi.yaml

@@ -0,0 +1,5 @@
+---
+name: gcp-project
+description: 'Provision a Google Cloud Platform project (new version of the old `gcp` project)'
+runtime: nodejs
+main: "../../../pulumi/gcp-project/src/index.ts"

cluster/stacks/scratchnets/infra/Pulumi.infra.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxbDtJjbZJ3JqKoqOg8x2MJvX51B1xPff8VkWcowLFIESSQD+EWqwBRyzqrDQInv38Popz/iKYUGLnESGdshtFXqt2RHxkjcpmLbL4Q+M7P10y8yEz9yLiZI0rSJJ0isyyrihSLsqOcAYo3c=

cluster/stacks/scratchnets/infra/Pulumi.infra.scratchb.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: >-
+  CiQAqRIZ7O9XSZPgn7p6lxoVmNKScFcOmdF7grrt9gQYnGCQYc8SSQDw67rmmiC/q3tkk48xtBXxIJLAjRaGwDaf1p9HjrM/WG1WaF41AopW0ZppkGJGwAL2GsXWs1OSWNCQYGlng5rk+MrxmgHSguk=

cluster/stacks/scratchnets/infra/Pulumi.infra.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvofwKup1mDfcFWag/H6IBbKe9jXbWZMZYo/t0pZYrttkISSQDtn4lyVfiFeOV19MyfLCZrom6+DjupShtrroPow/PSQdUARWc4slwHjb8v3EcXr/rQ9PSmDMFFZSBlPt0QvCnubJyZoWRbhbw=

cluster/stacks/scratchnets/infra/Pulumi.infra.scratchd.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: >-
+  CiQAzqJiPiE1W+ywFZyfuGAIWRiKC5K0f5tRJGuHQHr6ufcUNPASSQBxu7B555PCjwWtpKwmJaq2wq033Y22FIaEzPc7jwZSa1Qpw2VcdSXQpir/QS1RQh7n1h4nNQH3wBdQjvjoiBNp6LFaut1+f0I=

cluster/stacks/scratchnets/infra/Pulumi.infra.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HJzpEEt57GGJPZlp3nfNar6HJIIkOOzNqvfffMLZxP0SSQDaXOId/QCcyfrmwZ6JiZiA/B1j8SsHsPiCpTYDXdeD3O0QRfuh4xM4o7NqFF+hU0vz38EIPKxeBq89cDpotw11R0/A/9ifrRs=

cluster/stacks/scratchnets/infra/Pulumi.yaml

@@ -0,0 +1,4 @@
+name: infra
+runtime: nodejs
+description: Infrastructure on GCP
+main: "../../../pulumi/infra/src/index.ts"

cluster/stacks/scratchnets/multi-validator/Pulumi.multi-validator.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxVdS6Kw4TitQWPqUfvO2InVq+Mo9tKxf78lDPRmlYpkSSQD+EWqw2uefT53U5WRhp8oP185Sdy+aD+KVg1gfGb1m68V0k42JctXoJaS8JEeticj9DNfVX7cfpIawNXeAcju/d38mZUM0iw0=

cluster/stacks/scratchnets/multi-validator/Pulumi.multi-validator.scratchb.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: >-
+  CiQAqRIZ7FlTYSGG7h9zsJ4eQjEzKFwtuHNg8yTMWwdLe9wCAFESSQDw67rmA1C5Xa1c9DSph7h0svPBM4D5U4IeIxzmu6OqZv8WFYBchLRsP/fEM7TstHONky9wri1nzxJU6X0vk9zDy6ouzM9I2jE=

cluster/stacks/scratchnets/multi-validator/Pulumi.multi-validator.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvof+xg5Lh5SqXAu/5969YuagLsZx8wD5Cvl4BKR+bajowSSQDtn4lyeJc+WEcG7kuYkLi4je2oXLDwCr+v2tnkJqbfALrhDUm+/95VGKoyXsYVQPtMIIJUk76GVYUEX9sXILGGw8LciOuBJ4Q=

cluster/stacks/scratchnets/multi-validator/Pulumi.multi-validator.scratchd.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: >-
+  CiQAzqJiPgAJWkVYmQDILOPLu9Y5DZP9vkRaYFP1T413Z+PhfrYSSQBxu7B5+nLSZzml//0/GQwDvaxIBGUwls1/ofh0pJz/Kl+Fyhf+MMzn9ALiB2GIpq5tNAO251q21mhKPsAfqYMo/kSNX2/he6k=

cluster/stacks/scratchnets/multi-validator/Pulumi.multi-validator.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HFdefFjacYTBuK7vdx1n0SvCeFkb3vk5PifjpEbi7HESSADaXOIdeRfBCU6s2lKnyvKXYEuaH8kRR2G9n0+C15F9+hhgvVN3zSBWba5a5keSqHMh37J0XAlyy1+/rOo9yfl38aELNMK8JA==

cluster/stacks/scratchnets/multi-validator/Pulumi.yaml

@@ -0,0 +1,4 @@
+name: multi-validator
+runtime: nodejs
+description: Deploy a set of barebones multiple validators (no UIs)
+main: "../../../pulumi/multi-validator/src/index.ts"

cluster/stacks/scratchnets/operator/Pulumi.operator.scratcha.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: CiQA1n+IxTb9ruTrhZv46YygnThRxo7ALEl2w/d6/IvyQDfblTkSSQD+EWqwTkUUHw7K+cDYeeFyR49dlVS1+JNzP19EfKkwxHYN//RchSKftq6ghLXjLuy+kGZDSIokmlwe5smOQuqbfATvXbvSchI=

cluster/stacks/scratchnets/operator/Pulumi.operator.scratchb.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: CiQAqRIZ7A5oMXt8zCgd981gOyRqx79H6iqNRQAbo9Np9WJhxYASSQDw67rmjqk8+xuR+ZU2lhPeoeNLfJpFaFay7uTzAi9pyrgbxhPWNQg6/yGFHbJLethc9mfMnJ6ZsQU7uUDh2DF4iTk+IhWxnpw=

cluster/stacks/scratchnets/operator/Pulumi.operator.scratchc.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: CiQAnkvof6/kkhErWTAL3iDhYLXrYdlm4F8CEOYfWmql4UtGCMkSSQDtn4lysa56cXV2UCUMNE0udbYvTUAe4vAybIh7+yk820xsg5s16RQZ+vImfdw4XcAOWTsFVltJEd3tPFl+ZxkHiZTD/3x2tA8=

cluster/stacks/scratchnets/operator/Pulumi.operator.scratchd.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: CiQAzqJiPu4B6/ZKIJtd7EPSaGfr68y4jn/BtBV8Wh3vtK+LzuoSSQCTtku3yxJkPfDdEzbqr7QzSeWwrdLfX/ynCEm8CqgSOTVQMt1uYuDRRQZujY2DSHYxtOVOjHVlvfBBWeKITG3V3uba3UU23hc=

cluster/stacks/scratchnets/operator/Pulumi.operator.scratche.yaml

@@ -0,0 +1,2 @@
+secretsprovider: gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: CiQAwwY8HE6uoqFDRGxqbsWTW7a70VHuCqWoIvz2vWUPnsdOPPwSSQCisJc9DwNfVWxeB7XXcMreRVOxSBdyAin7fNZMU2S2+SymyxXnMGJSEAGlOBUkS08xj4GFnq+2uy5eLt8SZ/aaRWwntzF0Ri4=

cluster/stacks/scratchnets/operator/Pulumi.yaml

@@ -0,0 +1,5 @@
+name: operator
+runtime:
+  name: nodejs
+description: Pulumi k8s operator
+main: "../../../pulumi/operator/src/index.ts"

cluster/stacks/scratchnets/splitwell/Pulumi.splitwell.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxYVQNB6n7l5tIW511ptXTpCBv5lfGUPyQcsk0MsIiy8SSQD+EWqw9ppbVfvRL+pyUHV3DW4h1QdSkwJSxhHodTigVqnJUk4VzbOkhmSpsnBvEp2SbKJ97UgZIY8x2HK1WxY73hwTqwFvhlw=

cluster/stacks/scratchnets/splitwell/Pulumi.splitwell.scratchb.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: >-
+  CiQAqRIZ7O1+HmCftWKIkj93YpNC8mfHGWVPJQg9kgiLuljpd/QSSQDw67rmXbpd5O6bJurNv8k4hpWc3n9I98PrBd6b0TX+t4frY5LJ9LVMHI/IQ/Tba5petzA0LQJmJguXArk3mAySKvwnlhm0toQ=

cluster/stacks/scratchnets/splitwell/Pulumi.splitwell.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvof04M5i12crYTV1xAqrarDmu8bo8EmOGUJCMVf4CxSnMSSQDtn4ly1GguDtL/FiBsCfzjyvgqQumCAv7fOF8rBVJqikN3LMrQZ+HSy+PJl0OkKfH+eU2r0gio4rgtMnTebEzqSziBg66Sx84=

cluster/stacks/scratchnets/splitwell/Pulumi.splitwell.scratchd.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: >-
+  CiQAzqJiPoFwA+TFuZhqfTGm6LdYLNh/ZwyW9srk3V0j3sEa0LgSSQBxu7B5sQDeWTHtdi3T/HrrYAxXCxTWcjtHFCui1J/Nx3vvUAZ9jXl5EwJSG1VqlbFWiC4dLbreZ0ei5pbbs3VbrPyvnJ9e3gk=

cluster/stacks/scratchnets/splitwell/Pulumi.splitwell.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HKUmMHXTbx6NH0Rg7EHco39XOEdCv14nexC/zDCbYv0SSQDaXOIdlGLd2T7Vm8eqhHASsQwfOcjgga4PJpY+fUQhd9q0AASRN0Z5UFH0cNym+kSL4HCJLKkScCJOnruOl37O86tEyyzrhzM=

cluster/stacks/scratchnets/splitwell/Pulumi.yaml

@@ -0,0 +1,4 @@
+name: splitwell
+runtime: nodejs
+description: Deploy the splitwell service
+main: "../../../pulumi/splitwell/src/index.ts"

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-0.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxRLWkmO+KZ8x25VXey92/9mZY0dqMB0m6OoGf+AqLrkSSQD+EWqwpO4Gn2tNH84+BKN8yTv4XDVUqcGfSPXb/pDyT6TFGLBWGrqVu6aR3DFrJipO/haIUHejMzh9mQHzjDRYZ1dgVKhvAQc=

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-0.scratchb.yaml

@@ -0,0 +1,3 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchb
+encryptedkey: CiQAqRIZ7A7w6ktakexdojlXB5/Nw8cXFT3wSjuPGsiLllYRy0cSSQDw67rmAwMWSfT1paFPeYeMeu/tuofdv4LG3mB4tFcCKAOrv/2w59WhvHY1F8SgzUYI2NIEahxdwxJLT2Ie6a/yw89i1iOAkks=

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-0.scratchc.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchc
+encryptedkey: >-
+  CiQAnkvof12cISaNL36rhz3Ly7OqlmJ7a0p6gq7TJdEkhGm4mOoSSQDtn4ly5b9Um1GsoZrOoa6Ue1SNdtjZf/Jnnuasy+NQjk7ikWya+yLQKIzSLmrm0dpfaJDNntRh30bKUySd6h5SwK38EHfyu48=

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-0.scratchd.yaml

@@ -0,0 +1,3 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratchd
+encryptedkey: CiQAzqJiPmDcadqCEiqcVXL2PP2Ha7+++hVwBUcMyUNf+9lodDESSQCTtku3vZRqsPJWQ0PpusLudNbSM7qGMjMtnEbdIwAEcmUhrZO86N7c6wySNaeiH1Cvdk8xV0DPrER1OHvvoCUKKGMh4Ry4Mpg=

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-0.scratche.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratche
+encryptedkey: >-
+  CiQAwwY8HDJnXj5oDFDkgWlc2wzkWbn7F5FM5H52rzifWOqVEHASSQCisJc9lB+T9y8kTx8O39LE3ZJzYVRMEXvB27qGNta+GO/PdC7gtTyyp1tv0w98hrHmxY9EHuHMfMnlkt73f8RIr62bRs/ihQw=

cluster/stacks/scratchnets/sv-canton/Pulumi.sv-canton.sv-1-migration-1.scratcha.yaml

@@ -0,0 +1,4 @@
+secretsprovider: >-
+  gcpkms://projects/da-cn-scratchnet/locations/us-central1/keyRings/pulumi/cryptoKeys/scratcha
+encryptedkey: >-
+  CiQA1n+IxXUagic3yDZ84MYmsvWkirYFa7gPaOks/le9g1at3S0SSQD+EWqwE+GRYLKJK8+9OB1IKmtG4M240pH3oOGx6LNhvQ73M0MJbj76lYUHgWRWvi3LAk6sTuNBAcjQ6wNHLa0JhcFIBJXNrr8=