fhevm/charts/coprocessor/templates/coprocessor-tx-sender-deployment.yaml at 954165ac246260e87ddb952cbd875814d2b63a81 · zama-ai/fhevm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
{{- if .Values.txSender.enabled -}}
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: coprocessor-tx-sender
    app.kubernetes.io/name: {{ include "txSenderName" . }}
  name: {{ include "txSenderName" . }}
spec:
  replicas: {{ .Values.txSender.replicas }}
  selector:
    matchLabels:
      app: coprocessor-tx-sender
  {{- if .Values.txSender.updateStrategy }}
  strategy:
    {{- toYaml .Values.txSender.updateStrategy | nindent 4 }}
  {{- end }}
  template:
    metadata:
      labels:
        app: coprocessor-tx-sender
        app.kubernetes.io/name: {{ include "txSenderName" . }}
        {{- with .Values.podLabels }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
      {{- with .Values.podAnnotations }}
      annotations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
    spec:
      imagePullSecrets:
        - name: registry-credentials
      restartPolicy: Always
      {{- with .Values.txSender.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.txSender.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.txSender.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- if .Values.txSender.serviceAccountName }}
      serviceAccountName: {{ .Values.txSender.serviceAccountName }}
      {{- end }}
      containers:
        - name: coprocessor-tx-sender
          image: {{ .Values.txSender.image.name }}:{{ .Values.txSender.image.tag }}
          command: ["transaction_sender"]
          args:
            - --database-url=$(DATABASE_URL)
            - --gateway-url=$(GATEWAY_URL)
            - --input-verification-address=$(INPUT_VERIFICATION_ADDRESS)
            - --ciphertext-commits-address=$(CIPHERTEXT_COMMITS_ADDRESS)
            - --multichain-acl-address=$(MULTICHAIN_ACL_ADDRESS)
            {{- if .Values.txSender.wallet.awsKms.enabled }}
            - --signer-type=aws-kms
            - --aws-kms-key-id=$(TX_SENDER_AWS_KMS_KEY_ID)
            {{- else }}
            - --signer-type=private-key
            - --private-key=$(TX_SENDER_PRIVATE_KEY)
            {{- end }}
            - --health-check-port={{ .Values.txSender.ports.healthcheck }}
            - --metrics-addr=0.0.0.0:{{ .Values.txSender.ports.metrics }}
            - --log-level={{ .Values.txSender.args.logLevel }}
            - --service-name={{ .Values.txSender.args.serviceName }}
            - --database-pool-size={{ .Values.txSender.args.databasePoolSize }}
            - --database-polling-interval-secs={{ .Values.txSender.args.databasePollingIntervalSecs }}
            - --verify-proof-resp-database-channel={{ .Values.txSender.args.verifyProofRespDatabaseChannel }}
            - --add-ciphertexts-database-channel={{ .Values.txSender.args.addCiphertextsDatabaseChannel }}
            - --allow-handle-database-channel={{ .Values.txSender.args.allowHandleDatabaseChannel }}
            - --verify-proof-resp-batch-limit={{ .Values.txSender.args.verifyProofRespBatchLimit }}
            - --verify-proof-resp-max-retries={{ .Values.txSender.args.verifyProofRespMaxRetries }}
            {{- if .Values.txSender.args.verifyProofRemoveAfterMaxRetries }}
            - --verify-proof-remove-after-max-retries
            {{- end }}
            - --add-ciphertexts-batch-limit={{ .Values.txSender.args.addCiphertextsBatchLimit }}
            - --allow-handle-batch-limit={{ .Values.txSender.args.allowHandleBatchLimit }}
            - --allow-handle-max-retries={{ .Values.txSender.args.allowHandleMaxRetries }}
            - --add-ciphertexts-max-retries={{ .Values.txSender.args.addCiphertextsMaxRetries }}
            - --error-sleep-initial-secs={{ .Values.txSender.args.errorSleepInitialSecs }}
            - --error-sleep-max-secs={{ .Values.txSender.args.errorSleepMaxSecs }}
            - --txn-receipt-timeout-secs={{ .Values.txSender.args.txnReceiptTimeoutSecs }}
            - --review-after-unlimited-retries={{ .Values.txSender.args.reviewAfterUnlimitedRetries }}
            - --provider-max-retries={{ .Values.txSender.args.providerMaxRetries }}
            - --provider-retry-interval={{ .Values.txSender.args.providerRetryInterval }}
            - --health-check-timeout={{ .Values.txSender.args.healthCheckTimeout }}
            - --gas-limit-overprovision-percent={{ .Values.txSender.args.gasLimitOverprovisionPercent }}
            - --graceful-shutdown-timeout={{ .Values.txSender.args.gracefulShutdownTimeout }}
            - --metric-host-txn-latency={{ .Values.txSender.args.metricHostTxnLatency }}
            - --metric-zkproof-txn-latency={{ .Values.txSender.args.metricZkproofTxnLatency }}
            - --gauge-update-interval-secs={{ .Values.txSender.args.gaugeUpdateIntervalSecs }}
            - --delegation-block-delay={{ .Values.txSender.args.delegationBlockDelay }}
            {{- with .Values.txSender.extraArgs }}
            {{- toYaml . | nindent 12 }}
            {{- end }}
          env:
{{- include "coprocessorDatabaseEnv" . | nindent 12 }}
            - name: GATEWAY_URL
              value: {{ .Values.commonConfig.gatewayUrl | quote }}
            - name: INPUT_VERIFICATION_ADDRESS
              value: {{ required "commonConfig.gatewayContractAddresses.inputVerification is required" .Values.commonConfig.gatewayContractAddresses.inputVerification | quote }}
            - name: CIPHERTEXT_COMMITS_ADDRESS
              value: {{ required "commonConfig.gatewayContractAddresses.ciphertextCommits is required" .Values.commonConfig.gatewayContractAddresses.ciphertextCommits | quote }}
            - name: MULTICHAIN_ACL_ADDRESS
              value: {{ required "commonConfig.gatewayContractAddresses.multichainAcl is required" .Values.commonConfig.gatewayContractAddresses.multichainAcl | quote }}
            {{- if .Values.txSender.wallet.awsKms.enabled }}
            - name: TX_SENDER_AWS_KMS_KEY_ID
              valueFrom:
                configMapKeyRef:
                  name: {{ .Values.txSender.wallet.awsKms.configmap.name | quote }}
                  key: {{ .Values.txSender.wallet.awsKms.configmap.key | quote }}
            {{- else if .Values.txSender.wallet.secret.value }}
            - name: TX_SENDER_PRIVATE_KEY
              value: {{ .Values.txSender.wallet.secret.value | quote }}
            {{- else }}
            - name: TX_SENDER_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.txSender.wallet.secret.name | quote }}
                  key: {{ .Values.txSender.wallet.secret.key | quote }}
            {{- end }}
          {{- if default .Values.commonConfig.tracing.enabled .Values.txSender.tracing.enabled }}
            - name: OTEL_EXPORTER_OTLP_ENDPOINT
              value: {{ .Values.commonConfig.tracing.endpoint | quote }}
            - name: OTEL_SERVICE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
          {{- end }}
          {{- with .Values.commonConfig.env }}
            {{- toYaml . | nindent 12 }}
          {{- end }}
          {{- with .Values.txSender.env }}
            {{- toYaml . | nindent 12 }}
          {{- end }}
          ports:
            {{- range $portName, $portValue := .Values.txSender.ports }}
            - name: {{ $portName }}
              containerPort: {{ $portValue }}
              protocol: TCP
            {{- end }}
          resources:
            requests:
              cpu: {{ .Values.txSender.resources.requests.cpu | default "100m" }}
              memory: {{ .Values.txSender.resources.requests.memory | default "256Mi" }}
            limits:
              cpu: {{ .Values.txSender.resources.limits.cpu | default "500m" }}
              memory: {{ .Values.txSender.resources.limits.memory | default "512Mi" }}
          {{- if and .Values.txSender.probes .Values.txSender.probes.liveness.enabled }}
          livenessProbe:
            {{- toYaml (omit .Values.txSender.probes.liveness "enabled") | nindent 12 }}
          {{- end }}
          {{- if and .Values.txSender.probes .Values.txSender.probes.readiness.enabled }}
          readinessProbe:
            {{- toYaml (omit .Values.txSender.probes.readiness "enabled") | nindent 12 }}
          {{- end }}
{{- end -}}