fix(kms-connector): move connector workflow (#57)

* fix(kms-connector): move connector workflow

* fix(kms-connector): kms-connector workflow

* fix(kms-connector): kms-connector workflow

* fix(kms-connector): fix workflow concurrency

* fix(kms-connector): fix for launching test and build

* fix(kms-connector): fix path filter

* fix(kms-connector): fix path filter

* fix(kms-connector): fix checkout

* fix(kms-connector): fix submodule path

* fix(kms-connector): fix submodule path

* fix(kms-connector): fix submodule path

* fix(kms-connector): fix submodule path

* fix(kms-connector): fix submodule path

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add submodule checkout independent

* fix(kms-connector): add REPO_CHECKOUT_TOKEN

* fix(kms-connector): add BLOCKCHAIN_ACTIONS_TOKEN

* fix(kms-connector): fix gitlfs setup

* fix(kms-connector): fix Dockerfile

* fix(kms-connector): fix host-contracts folder

* fix(kms-connector): fix host-contracts folder

* fix(kms-connector): fix dockerfile

* fix(kms-connector): remove helm wf

* fix(kms-connector): change docker context

* fix(kms-connector): change dockerfile

* fix(kms-connector): change dockerfile

* fix(kms-connector): change dockerfile

* fix(kms-connector): change dockerfile

Author: fegmorte

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    # Look for `Cargo.toml` and `Cargo.lock` in the root directory
+    directory: "/"
+    # Check for updates every Monday
+    schedule:
+      interval: "weekly"
+    # Set to 0 to prevent version updates (i.e. require only security updates)
+    open-pull-requests-limit: 0
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    # Check for updates every Monday
+    schedule:
+      interval: "weekly"
+    # Set to 0 to prevent version updates (i.e. require only security updates)
+    open-pull-requests-limit: 0

kms-connector/.github/hooks/commit-msg .github/hooks/commit-msgkms-connector/.github/hooks/commit-msg renamed to .github/hooks/commit-msg

@@ -149,9 +149,9 @@ jobs:
         with:
           node-version: 20.x
 
-      - run: cp ./contracts/.env.example ./contracts/.env
-      - run: npm --prefix ./contracts ci --include=optional
-      - run: "cd contracts && npm install && npx hardhat compile"
+      - run: cp ./host-contracts/.env.example ./host-contracts/.env
+      - run: npm --prefix ./host-contracts ci --include=optional
+      - run: "cd host-contracts && npm install && npx hardhat compile"
 
       - name: Run tests on GPU
         run: |

kms-connector/.github/hooks/install.sh .github/hooks/install.shkms-connector/.github/hooks/install.sh renamed to .github/hooks/install.sh

@@ -1,4 +1,4 @@
-name: Run Docker On Big Instance
+name: KMS Connector Run Docker On Big Instance
 on:
   workflow_call:
     inputs:
@@ -71,7 +71,7 @@ jobs:
 
   run-docker:
     needs: [start-amd64-runner]
-    uses: ./.github/workflows/common-docker.yml
+    uses: zama-ai/ci-templates/.github/workflows/common-docker.yml@4597dee06cf8e3e977f66aa8b1824ef4e1d84a22
     secrets:
       BLOCKCHAIN_ACTIONS_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}
       AWS_ACCESS_KEY_S3_USER: ${{ secrets.AWS_ACCESS_KEY_S3_USER }}

kms-connector/.github/hooks/pre-push .github/hooks/pre-pushkms-connector/.github/hooks/pre-push renamed to .github/hooks/pre-push

@@ -1,4 +1,4 @@
-name: Run Testing On Big Instance
+name: KMS Connector Common Testing Big Instance
 on:
   workflow_call:
     inputs:
@@ -90,7 +90,7 @@ jobs:
 
   run-build:
     needs: start-runner
-    uses: ./.github/workflows/common-testing.yml
+    uses: ./.github/workflows/kms-connector-common-testing.yml
     secrets:
       BLOCKCHAIN_ACTIONS_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/coprocessor-gpu-tests.yml

@@ -1,5 +1,5 @@
 # Main build workflow that handles both x86 and ARM builds
-name: Compile Rust Project and Run Tests
+name: KMS Connector Common Testing
 
 on:
   workflow_call:
@@ -92,17 +92,23 @@ jobs:
           submodules: true
           token: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}
 
+      - name: Setup Home
+        if: "${{ !contains(inputs.runs-on, 'ubuntu') }}"
+        run: echo "HOME=/home/ubuntu" >> "${GITHUB_ENV}"
+
       # LFS files are needed for backward compatibility tests
       # Install git LFS before checkout does not seem possible on our self-hosted runners, so we
       # need to do it right after and then manually pull LFS files
-      - name: Install git-lfs
+      - name: setup gitlfs from binary
+        env:
+          GIT_LFS_VERSION: "3.6.1"
         run: |
-          sudo apt-get update && sudo apt-get -y install git-lfs
+          wget https://github.com/git-lfs/git-lfs/releases/download/v${{ env.GIT_LFS_VERSION }}/git-lfs-linux-amd64-v${{ env.GIT_LFS_VERSION }}.tar.gz
+          tar -xzf git-lfs-linux-amd64-v${{ env.GIT_LFS_VERSION }}.tar.gz
+          ./git-lfs-${{ env.GIT_LFS_VERSION }}/install.sh
           git lfs pull
 
-      - name: Setup Home
-        if: "${{ !contains(inputs.runs-on, 'ubuntu') }}"
-        run: echo "HOME=/home/ubuntu" >> "${GITHUB_ENV}"
+
 
       # Needed to be able to pull some docker images for the simulator test
       - name: Login to GitHub Container Registry

…workflows/common-docker-big-instance.yml …connector-common-docker-big-instance.ymlkms-connector/.github/workflows/common-docker-big-instance.yml renamed to .github/workflows/kms-connector-common-docker-big-instance.yml kms-connector/.github/workflows/common-docker-big-instance.yml renamed to .github/workflows/kms-connector-common-docker-big-instance.yml

@@ -0,0 +1,35 @@
+name: "Release KMS Connector Create Docker Images"
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      ref:
+        type: string
+        description: 'Branch, tag or SHA to generate the Docker images from. (Default main)'
+        required: false
+        default: 'main'
+
+jobs:
+  docker-connector:
+    uses: ./.github/workflows/kms-connector-common-docker-big-instance.yml
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+      packages: 'write'
+    with:
+      working-directory: "./kms-connector"
+      push_image: true
+      image-name: 'kms-connector'
+      ref: ${{ inputs.ref || '' }}
+      app-cache-dir: 'kms-connector'
+      docker-file: "./kms-connector/docker/Dockerfile"
+      docker-context: "./kms-connector"
+    secrets:
+      BLOCKCHAIN_ACTIONS_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}
+      SLAB_ACTION_TOKEN: ${{ secrets.SLAB_ACTION_TOKEN }}
+      SLAB_BASE_URL: ${{ secrets.SLAB_BASE_URL }}
+      JOB_SECRET: ${{ secrets.JOB_SECRET }}
+      AWS_ACCESS_KEY_S3_USER: ${{ secrets.AWS_ACCESS_KEY_S3_USER }}
+      AWS_SECRET_KEY_S3_USER: ${{ secrets.AWS_SECRET_KEY_S3_USER }}

…orkflows/common-testing-big-instance.yml …onnector-common-testing-big-instance.ymlkms-connector/.github/workflows/common-testing-big-instance.yml renamed to .github/workflows/kms-connector-common-testing-big-instance.yml kms-connector/.github/workflows/common-testing-big-instance.yml renamed to .github/workflows/kms-connector-common-testing-big-instance.yml

@@ -1,14 +1,11 @@
 # Main workflow for KMS Core that handles testing and build
 # Triggers:
-# 1. Scheduled: Every weekday at 00:00 UTC (01:00 CET) for nightly tests and build
-# 2. Pull requests: For validation before merging
-# 3. Pushes: On main and release/* branches for building images
+# 1. Pull requests: For validation before merging
+# 2. Pushes: On main and release/* branches for building images
 # IMPORTANT NOTES: The tests are only executed for components that have been changed
-name: "[Global Common Workflow] Pipeline Run"
+name: "KMS Connector Test Docker Build"
 
 on:
-  schedule:
-    - cron: '0 0 * * 1-5' # Runs at midnight UTC (1 AM CET) Monday-Friday
   pull_request:
   push:
     branches: ['main', 'release/*']
@@ -17,7 +14,7 @@ on:
 # - Groups runs by git ref
 # - Cancels in-progress runs for non-main/release branches
 concurrency:
-  group: global-common-workflow-${{ github.ref }}
+  group: kms-connector-test-docker-build-${{ github.ref }}
   cancel-in-progress: ${{ !contains(fromJSON('["release/", "main"]'),github.ref) }}
 
 # Required permissions for workflow execution
@@ -37,15 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       # Each output indicates if files in a specific component were modified
-      changes-backup: ${{ steps.filter.outputs.backup }}
-      changes-ci: ${{ steps.filter.outputs.ci }}
       changes-connector: ${{ steps.filter.outputs.connector }}
-      changes-core-client: ${{ steps.filter.outputs.core-client }}
-      changes-core-grpc: ${{ steps.filter.outputs.core-grpc }}
-      changes-core-service: ${{ steps.filter.outputs.core-service }}
-      changes-core-threshold: ${{ steps.filter.outputs.core-threshold }}
-      changes-docs: ${{ steps.filter.outputs.docs }}
-      changes-helm-chart: ${{ steps.filter.outputs.helm-chart }}
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
@@ -54,54 +43,12 @@ jobs:
         # Define paths that trigger specific component workflows
         # Changes to conf-trace affect multiple components
         filters: |
-          ci:
-            - '.github/workflows/global-common-workflow.yml'
           connector:
-            - './**'
-          docs:
-            - 'docs/**'
-          helm-chart:
-            - 'charts/**'
-            - '.github/workflows/helm-test.yml'
-            - '.github/workflows/helm-lint.yml'
-
-  ############################################################################
-  # Helm chart pipeline
-  # Triggered by:
-  # - Changes to charts/**'
-  ############################################################################
-  test-helm-chart:
-    needs: check-changes
-    if: needs.check-changes.outputs.changes-helm-chart == 'true'
-    uses: ./.github/workflows/helm-test.yml
-
-  lint-helm-chart:
-    needs: check-changes
-    if: needs.check-changes.outputs.changes-helm-chart == 'true'
-    uses: ./.github/workflows/helm-lint.yml
-
-  release-helm-chart:
-    needs: check-changes
-    if: github.ref == 'refs/heads/main' && needs.check-changes.outputs.changes-helm-chart == 'true'
-    uses: ./.github/workflows/helm-release.yml
-
-  ############################################################################
-  # KMS Local Docs Link Check
-  # Triggered by:
-  # - Changes to docs/**
-  # - Changes to workflow file itself
-  ############################################################################
-  check-docs:
-    needs: check-changes
-    if: needs.check-changes.outputs.changes-docs == 'true'
-    runs-on: ubuntu-latest
-    container:
-      image: python:3.10
-    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - run: python3 -m pip install linkcheckmd
-    - name: Check dead-link
-      run: python3 ci/script/local_docs_link_check.py
+            - '.github/workflows/kms-connector-*'
+            - 'kms-connector/config/**'
+            - 'kms-connector/docker/**'
+            - 'kms-connector/src/**'
+            - 'kms-connector/Cargo.toml'
 
 
   ############################################################################
@@ -114,10 +61,10 @@ jobs:
   ############################################################################
   test-connector:
     needs: check-changes
-    if: needs.check-changes.outputs.changes-connector == 'true' || needs.check-changes.outputs.changes-ci == 'true'
-    uses: ./.github/workflows/common-testing-big-instance.yml
+    if: needs.check-changes.outputs.changes-connector == 'true'
+    uses: ./.github/workflows/kms-connector-common-testing-big-instance.yml
     with:
-      working-directory: './'
+      working-directory: './kms-connector'
       package-name: 'kms-connector'
       app-cache-dir: 'kms-connector'
     secrets:
@@ -137,11 +84,11 @@ jobs:
     if: >-
       (startsWith(github.ref, 'refs/heads/release/') || github.ref == 'refs/heads/main') ||
       (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'docker'))
-    uses: ./.github/workflows/common-docker-big-instance.yml
+    uses: ./.github/workflows/kms-connector-common-docker-big-instance.yml
     with:
-      working-directory: "./kms-connector"
+      working-directory: './kms-connector'
       push_image: true
-      image-name: 'kms-connector'
+      image-name: 'fhevm/kms-connector'
       app-cache-dir: 'kms-connector'
     secrets:
       BLOCKCHAIN_ACTIONS_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}