values.yaml

# =============================================================================
# KMS Connector Configuration
# =============================================================================
# This chart deploys the KMS (Key Management Service) connector components
# that bridge between the gateway chain and KMS cores, including:
# - Database migration
# - Gateway listener (processes gateway events)
# - KMS worker (communicates with KMS cores)
# - Transaction sender (submits transactions to gateway)
# =============================================================================

# -----------------------------------------------------------------------------
# Common Configuration
# -----------------------------------------------------------------------------
# Shared configuration across all KMS connector components
commonConfig:
  # Database connection string
  databaseUrl: "postgresql://$(DATABASE_ENDPOINT)/connector"

  # Gateway chain RPC node endpoint (HTTP)
  gatewayUrl: "http://gateway-node:8546"

  # Gateway chain identifier
  gatewayChainId: "54321"

  # Gateway smart contract addresses
  gatewayContractAddresses:
    decryption: "0xc9bAE822fE6793e3B456144AdB776D5A318CB71e"
    gatewayConfig: "0xeAC2EfFA07844aB326D92d1De29E136a6793DFFA"
    kmsGeneration: "0xF0bFB159C7381F7CB332586004d8247252C5b816"

  # Ethereum chain RPC node endpoint (HTTP)
  ethereumUrl: "http://ethereum-node:8545"

  # Ethereum chain identifier
  ethereumChainId: "11155111"

  # Ethereum smart contract addresses
  ethereumContractAddresses:
    kmsVerifier: "0x0000000000000000000000000000000000000000"

  # Distributed tracing configuration
  tracing:
    enabled: false
    endpoint: "http://otel-deployment-opentelemetry-collector.observability.svc.cluster.local:4317"

  # Environment variables (can be overridden per component)
  env:
    # Example: Database configuration from secrets
    # - name: DATABASE_ENDPOINT
    #   valueFrom:
    #     secretKeyRef:
    #       name: connector-database
    #       key: endpoint
    # - name: PGUSER
    #   valueFrom:
    #     secretKeyRef:
    #       name: connector-database
    #       key: username
    # - name: PGPASSWORD
    #   valueFrom:
    #     secretKeyRef:
    #       name: connector-database
    #       key: password

# -----------------------------------------------------------------------------
# Database Migration
# -----------------------------------------------------------------------------
# Sets up the database schema for KMS connector
kmsConnectorDbMigration:
  enabled: true
  annotations:

  image:
    name: ghcr.io/zama-ai/fhevm/kms-connector/db-migration
    tag: v0.10.0

  # Command to run database migrations
  command:
    - "sqlx"
    - "migrate"
    - "run"
    - "--source"
    - "/migrations"

  # Environment variables for database migration
  env:
    - name: DATABASE_ENDPOINT
      value: "postgresql://db:5432/kms-connector"
    - name: PGUSER
      value: "postgres"
    - name: PGPASSWORD
      value: "postgres"

  serviceAccountName:

  # Size of the non-persistent volume for migration
  storage:
    size: 2Gi

  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 500m
      memory: 512Mi

  nodeSelector:
  affinity:
  tolerations:

# -----------------------------------------------------------------------------
# Gateway Listener
# -----------------------------------------------------------------------------
# Listens to gateway events and processes them
kmsConnectorGwListener:
  enabled: true
  nameOverride:

  image:
    name: ghcr.io/zama-ai/fhevm/kms-connector/gw-listener
    tag: v0.10.0

  replicas: 1

  # Component-specific configuration
  config:
    # Override commonConfig.gatewayUrl if needed
    # gatewayUrl:

  # Additional environment variables
  env:

  # Distributed tracing (inherits from commonConfig but can be overridden)
  tracing:
    enabled: false

  # Service ports
  ports:
    monitoring: 9100

  # Prometheus ServiceMonitor for metrics collection
  serviceMonitor:
    enabled: false

  serviceAccountName:

  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 500m
      memory: 512Mi

  # Health check probes
  probes:
    liveness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 10
      periodSeconds: 10
    readiness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 5
      periodSeconds: 10

  nodeSelector:
  affinity:
  tolerations:

  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0

# -----------------------------------------------------------------------------
# KMS Worker
# -----------------------------------------------------------------------------
# Communicates with KMS cores to perform cryptographic operations
kmsConnectorKmsWorker:
  enabled: true
  nameOverride:

  image:
    name: ghcr.io/zama-ai/fhevm/kms-connector/kms-worker
    tag: v0.10.0

  replicas: 1

  # Component-specific configuration
  config:
    # KMS core endpoints for communication
    kmsCoreEndpoints: "http://kms-core:50051"

    # List of host chain RPC node endpoints, chain ids, and ACL contract addresses
    hostChains:
      - url: "http://host-node:8545"
        chainId: 12345
        aclAddress: "0x05fD9B5EFE0a996095f42Ed7e77c390810CF660c"

    # Override commonConfig.gatewayUrl if needed
    # gatewayUrl:

  # Additional environment variables
  env:

  # Distributed tracing (inherits from commonConfig but can be overridden)
  tracing:
    enabled: false

  # Service ports
  ports:
    monitoring: 9100

  # Prometheus ServiceMonitor for metrics collection
  serviceMonitor:
    enabled: false

  serviceAccountName:

  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 500m
      memory: 512Mi

  # Health check probes
  probes:
    liveness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 10
      periodSeconds: 10
    readiness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 5
      periodSeconds: 10

  nodeSelector:
  affinity:
  tolerations:

  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0

# -----------------------------------------------------------------------------
# Transaction Sender
# -----------------------------------------------------------------------------
# Submits transactions to the gateway chain
kmsConnectorTxSender:
  enabled: true
  nameOverride:

  image:
    name: ghcr.io/zama-ai/fhevm/kms-connector/tx-sender
    tag: v0.10.0

  replicas: 1

  # Component-specific configuration
  config:
    # Override commonConfig.gatewayUrl if needed
    # gatewayUrl:

  # Additional environment variables
  env:

  # Wallet configuration for transaction signing
  wallet:
    awsKms:
      # If set to true, will use the AWS KMS key specified in the configmap instead of the private key specified in the secret
      enabled: false
      configmap:
        name: mpc-party
        key: KMS_CONNECTOR__TX_SENDER_AWS_KMS_KEY_ID
    secret:
      name: kms-connector-tx-sender
      key: kms-wallet

  # Distributed tracing (inherits from commonConfig but can be overridden)
  tracing:
    enabled: true

  # Service ports
  ports:
    monitoring: 9100

  # Prometheus ServiceMonitor for metrics collection
  serviceMonitor:
    enabled: false

  serviceAccountName:

  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 500m
      memory: 512Mi

  # Health check probes
  probes:
    liveness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 10
      periodSeconds: 10
    readiness:
      enabled: true
      httpGet:
        path: /healthz
        port: monitoring
      initialDelaySeconds: 5
      periodSeconds: 10

  nodeSelector:
  affinity:
  tolerations:

  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0

# -----------------------------------------------------------------------------
# Global Pod Configuration
# -----------------------------------------------------------------------------
# Pod annotations for additional metadata
# See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
podAnnotations: {}

# Pod labels for selection and organization
# See: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}