fhevm/charts/kms-connector/templates/kms-connector-tx-sender-deployment.yaml at 7274eb5ec903f4a2a77015c533f298670f98e2ba · zama-ai/fhevm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
{{- if .Values.kmsConnectorTxSender.enabled -}}
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: kms-connector-tx-sender
    app.kubernetes.io/name: {{ include "kmsConnectorTxSenderName" . }}
  name: {{ include "kmsConnectorTxSenderName" . }}
spec:
  replicas: {{ .Values.kmsConnectorTxSender.replicas }}
  selector:
    matchLabels:
      app: kms-connector-tx-sender
  {{- if .Values.kmsConnectorTxSender.updateStrategy }}
  strategy:
    {{- toYaml .Values.kmsConnectorTxSender.updateStrategy | nindent 4 }}
  {{- end }}
  template:
    metadata:
      labels:
        app: kms-connector-tx-sender
        app.kubernetes.io/name: {{ include "kmsConnectorTxSenderName" . }}
        {{- with .Values.podLabels }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
      {{- with .Values.podAnnotations }}
      annotations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
    spec:
      imagePullSecrets:
        - name: registry-credentials
      restartPolicy: Always
      {{- with .Values.kmsConnectorTxSender.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.kmsConnectorTxSender.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.kmsConnectorTxSender.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- if .Values.kmsConnectorTxSender.serviceAccountName }}
      serviceAccountName: {{ .Values.kmsConnectorTxSender.serviceAccountName }}
      {{- end }}
      containers:
        - name: kms-connector-tx-sender
          image: {{ .Values.kmsConnectorTxSender.image.name }}:{{ .Values.kmsConnectorTxSender.image.tag }}
          env:
          {{- with .Values.commonConfig.env }}
            {{- toYaml . | nindent 12 }}
          {{- end }}
          {{- with .Values.kmsConnectorTxSender.env }}
            {{- toYaml . | nindent 12 }}
          {{- end }}
            - name: KMS_CONNECTOR_DATABASE_URL
              value: {{ .Values.commonConfig.databaseUrl | quote }}
            - name: KMS_CONNECTOR_GATEWAY_URL
              value: {{ default .Values.commonConfig.gatewayUrl (.Values.kmsConnectorTxSender.config).gatewayUrl | quote }}
            - name: KMS_CONNECTOR_GATEWAY_CHAIN_ID
              value: {{ .Values.commonConfig.gatewayChainId | quote }}
            - name: KMS_CONNECTOR_DECRYPTION_CONTRACT__ADDRESS
              value: {{ .Values.commonConfig.gatewayContractAddresses.decryption | quote }}
            - name: KMS_CONNECTOR_GATEWAY_CONFIG_CONTRACT__ADDRESS
              value: {{ .Values.commonConfig.gatewayContractAddresses.gatewayConfig | quote }}
            - name: KMS_CONNECTOR_KMS_GENERATION_CONTRACT__ADDRESS
              value: {{ .Values.commonConfig.gatewayContractAddresses.kmsGeneration | quote }}
            - name: KMS_CONNECTOR_ETHEREUM_URL
              value: {{ .Values.commonConfig.ethereumUrl | quote }}
            - name: KMS_CONNECTOR_ETHEREUM_CHAIN_ID
              value: {{ .Values.commonConfig.ethereumChainId | quote }}
            - name: KMS_CONNECTOR_KMS_VERIFIER_ADDRESS
              value: {{ .Values.commonConfig.ethereumContractAddresses.kmsVerifier | quote }}
            {{- if .Values.kmsConnectorTxSender.wallet.awsKms.enabled }}
            - name: KMS_CONNECTOR_AWS_KMS_CONFIG__KEY_ID
              valueFrom:
                configMapKeyRef:
                  name: {{ .Values.kmsConnectorTxSender.wallet.awsKms.configmap.name | quote }}
                  key: {{ .Values.kmsConnectorTxSender.wallet.awsKms.configmap.key | quote }}
            {{- else }}
            - name: KMS_CONNECTOR_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.kmsConnectorTxSender.wallet.secret.name | quote }}
                  key: {{ .Values.kmsConnectorTxSender.wallet.secret.key | quote }}
            {{- end }}
          {{- if default .Values.commonConfig.tracing.enabled .Values.kmsConnectorTxSender.tracing.enabled }}
            - name: OTEL_EXPORTER_OTLP_ENDPOINT
              value: {{ .Values.commonConfig.tracing.endpoint }}
            - name: KMS_CONNECTOR_SERVICE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
          {{- end }}
          ports:
            {{- range $portName, $portValue := .Values.kmsConnectorTxSender.ports }}
            - name: {{ $portName }}
              containerPort: {{ $portValue }}
              protocol: TCP
            {{- end }}
          resources:
            requests:
              cpu: {{ .Values.kmsConnectorTxSender.resources.requests.cpu }}
              memory: {{ .Values.kmsConnectorTxSender.resources.requests.memory }}
            limits:
              cpu: {{ .Values.kmsConnectorTxSender.resources.limits.cpu }}
              memory: {{ .Values.kmsConnectorTxSender.resources.limits.memory }}
          {{- if and .Values.kmsConnectorTxSender.probes .Values.kmsConnectorTxSender.probes.liveness.enabled }}
          livenessProbe:
            {{- toYaml (omit .Values.kmsConnectorTxSender.probes.liveness "enabled") | nindent 12 }}
          {{- end }}
          {{- if and .Values.kmsConnectorTxSender.probes .Values.kmsConnectorTxSender.probes.readiness.enabled }}
          readinessProbe:
            {{- toYaml (omit .Values.kmsConnectorTxSender.probes.readiness "enabled") | nindent 12 }}
          {{- end }}
{{- end -}}