UNPKG

@fairmint/canton-node-sdk

Version:
1,693 lines 185 kB
[ { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "ServiceAccount", "metadata": { "name": "canton-network-sa", "namespace": "operator" } }, "name": "canton-network-sa", "provider": "", "type": "kubernetes:core/v1:ServiceAccount" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "canton-network-sa", "namespace": "operator" } ] }, "name": "canton-network:cluster-admin", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:auth-delegator" }, "subjects": [ { "kind": "ServiceAccount", "name": "canton-network-sa", "namespace": "operator" } ] }, "name": "canton-network:system:auth-delegator", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "pulumi.com/v1", "kind": "Stack", "metadata": { "name": "canton-network", "namespace": "operator" }, "spec": { "backend": "gs://da-cn-pulumi-dev-stacks", "continueResyncOnCommitMatch": false, "destroyOnFinalize": false, "envRefs": { "AUTH0_CN_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "DEPLOYMENT_DIR": { "literal": { "value": "/share/source/cluster/deployment" }, "type": "Literal" }, "GCP_CLUSTER_BASENAME": { "literal": { "value": "mock" }, "type": "Literal" }, "PRIVATE_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs-private" }, "type": "Literal" }, "PUBLIC_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs" }, "type": "Literal" }, "PULUMI_VERSION": { "literal": { "value": "0.0.0" }, "type": "Literal" }, "SLACK_ACCESS_TOKEN": { "secret": { "key": "SLACK_ACCESS_TOKEN", "name": "deployment-env" }, "type": "Secret" }, "SPLICE_ROOT": { "literal": { "value": "/share/source/splice" }, "type": "Literal" } }, "fluxSource": { "dir": "splice/cluster/pulumi/canton-network", "sourceRef": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "name": "splice-node-active" } }, "retryOnUpdateConflict": true, "serviceAccountName": "canton-network-sa", "stack": "organization/canton-network/canton-network.mock", "updateTemplate": { "spec": { "parallel": 64 } }, "useLocalStackOnly": true, "workspaceTemplate": { "metadata": { "deletionGracePeriodSeconds": 1800, "name": "canton-network", "namespace": "operator" }, "spec": { "env": [ { "name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE", "value": "true" }, { "name": "SPLICE_OPERATOR_DEPLOYMENT", "value": "true" }, { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "password", "name": "github" } } }, { "name": "CLOUDSDK_CORE_PROJECT", "value": "da-cn-devnet" }, { "name": "CLOUDSDK_COMPUTE_REGION", "value": "europe-west6" }, { "name": "GOOGLE_APPLICATION_CREDENTIALS", "value": "/app/gcp-credentials.json" }, { "name": "GOOGLE_CREDENTIALS", "valueFrom": { "secretKeyRef": { "key": "googleCredentials", "name": "gke-credentials" } } } ], "image": "pulumi/pulumi:3.147.0-nonroot", "podTemplate": { "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "cn_infra", "operator": "Exists" } ] } ] } } }, "containers": [ { "name": "pulumi", "volumeMounts": [ { "mountPath": "/app/gcp-credentials.json", "name": "gcp-credentials", "subPath": "googleCredentials" } ] } ], "terminationGracePeriodSeconds": 1800, "tolerations": [ { "effect": "NoSchedule", "key": "cn_infra", "operator": "Exists" } ], "volumes": [ { "name": "gcp-credentials", "secret": { "optional": false, "secretName": "gke-credentials" } } ] } } } } } }, "name": "canton-network", "provider": "", "type": "kubernetes:pulumi.com/v1:Stack" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "Secret", "metadata": { "name": "deployment-env", "namespace": "operator" }, "stringData": { "4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270", "value": { "AUTH0_CN_MANAGEMENT_API_CLIENT_ID": "mgmt", "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t", "AUTH0_SV_MANAGEMENT_API_CLIENT_ID": "mgmt", "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t", "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": "mgmt", "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t", "SLACK_ACCESS_TOKEN": "s3cr3t" } }, "type": "Opaque" }, "name": "deployment-env", "provider": "", "type": "kubernetes:core/v1:Secret" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "Secret", "metadata": { "name": "gke-credentials", "namespace": "operator" }, "stringData": { "4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270", "value": { "googleCredentials": "s3cr3t" } }, "type": "Opaque" }, "name": "gke-credentials", "provider": "", "type": "kubernetes:core/v1:Secret" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "ServiceAccount", "metadata": { "name": "infra-sa", "namespace": "operator" } }, "name": "infra-sa", "provider": "", "type": "kubernetes:core/v1:ServiceAccount" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "infra-sa", "namespace": "operator" } ] }, "name": "infra:cluster-admin", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:auth-delegator" }, "subjects": [ { "kind": "ServiceAccount", "name": "infra-sa", "namespace": "operator" } ] }, "name": "infra:system:auth-delegator", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "pulumi.com/v1", "kind": "Stack", "metadata": { "name": "infra", "namespace": "operator" }, "spec": { "backend": "gs://da-cn-pulumi-dev-stacks", "continueResyncOnCommitMatch": false, "destroyOnFinalize": false, "envRefs": { "AUTH0_CN_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "DEPLOYMENT_DIR": { "literal": { "value": "/share/source/cluster/deployment" }, "type": "Literal" }, "GCP_CLUSTER_BASENAME": { "literal": { "value": "mock" }, "type": "Literal" }, "PRIVATE_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs-private" }, "type": "Literal" }, "PUBLIC_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs" }, "type": "Literal" }, "PULUMI_VERSION": { "literal": { "value": "0.0.0" }, "type": "Literal" }, "SLACK_ACCESS_TOKEN": { "secret": { "key": "SLACK_ACCESS_TOKEN", "name": "deployment-env" }, "type": "Secret" }, "SPLICE_ROOT": { "literal": { "value": "/share/source/splice" }, "type": "Literal" } }, "fluxSource": { "dir": "splice/cluster/pulumi/infra", "sourceRef": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "name": "splice-node-active" } }, "retryOnUpdateConflict": true, "serviceAccountName": "infra-sa", "stack": "organization/infra/infra.mock", "updateTemplate": { "spec": { "parallel": 64 } }, "useLocalStackOnly": true, "workspaceTemplate": { "metadata": { "deletionGracePeriodSeconds": 1800, "name": "infra", "namespace": "operator" }, "spec": { "env": [ { "name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE", "value": "true" }, { "name": "SPLICE_OPERATOR_DEPLOYMENT", "value": "true" }, { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "password", "name": "github" } } }, { "name": "CLOUDSDK_CORE_PROJECT", "value": "da-cn-devnet" }, { "name": "CLOUDSDK_COMPUTE_REGION", "value": "europe-west6" }, { "name": "GOOGLE_APPLICATION_CREDENTIALS", "value": "/app/gcp-credentials.json" }, { "name": "GOOGLE_CREDENTIALS", "valueFrom": { "secretKeyRef": { "key": "googleCredentials", "name": "gke-credentials" } } } ], "image": "pulumi/pulumi:3.147.0-nonroot", "podTemplate": { "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "cn_infra", "operator": "Exists" } ] } ] } } }, "containers": [ { "name": "pulumi", "volumeMounts": [ { "mountPath": "/app/gcp-credentials.json", "name": "gcp-credentials", "subPath": "googleCredentials" } ] } ], "terminationGracePeriodSeconds": 1800, "tolerations": [ { "effect": "NoSchedule", "key": "cn_infra", "operator": "Exists" } ], "volumes": [ { "name": "gcp-credentials", "secret": { "optional": false, "secretName": "gke-credentials" } } ] } } } } } }, "name": "infra", "provider": "", "type": "kubernetes:pulumi.com/v1:Stack" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "ServiceAccount", "metadata": { "name": "multi-validator-sa", "namespace": "operator" } }, "name": "multi-validator-sa", "provider": "", "type": "kubernetes:core/v1:ServiceAccount" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "multi-validator-sa", "namespace": "operator" } ] }, "name": "multi-validator:cluster-admin", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:auth-delegator" }, "subjects": [ { "kind": "ServiceAccount", "name": "multi-validator-sa", "namespace": "operator" } ] }, "name": "multi-validator:system:auth-delegator", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "pulumi.com/v1", "kind": "Stack", "metadata": { "name": "multi-validator", "namespace": "operator" }, "spec": { "backend": "gs://da-cn-pulumi-dev-stacks", "continueResyncOnCommitMatch": false, "destroyOnFinalize": false, "envRefs": { "AUTH0_CN_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "DEPLOYMENT_DIR": { "literal": { "value": "/share/source/cluster/deployment" }, "type": "Literal" }, "GCP_CLUSTER_BASENAME": { "literal": { "value": "mock" }, "type": "Literal" }, "PRIVATE_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs-private" }, "type": "Literal" }, "PUBLIC_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs" }, "type": "Literal" }, "PULUMI_VERSION": { "literal": { "value": "0.0.0" }, "type": "Literal" }, "SLACK_ACCESS_TOKEN": { "secret": { "key": "SLACK_ACCESS_TOKEN", "name": "deployment-env" }, "type": "Secret" }, "SPLICE_ROOT": { "literal": { "value": "/share/source/splice" }, "type": "Literal" } }, "fluxSource": { "dir": "splice/cluster/pulumi/multi-validator", "sourceRef": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "name": "splice-node-active" } }, "retryOnUpdateConflict": true, "serviceAccountName": "multi-validator-sa", "stack": "organization/multi-validator/multi-validator.mock", "updateTemplate": { "spec": { "parallel": 10 } }, "useLocalStackOnly": true, "workspaceTemplate": { "metadata": { "deletionGracePeriodSeconds": 1800, "name": "multi-validator", "namespace": "operator" }, "spec": { "env": [ { "name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE", "value": "true" }, { "name": "SPLICE_OPERATOR_DEPLOYMENT", "value": "true" }, { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "password", "name": "github" } } }, { "name": "CLOUDSDK_CORE_PROJECT", "value": "da-cn-devnet" }, { "name": "CLOUDSDK_COMPUTE_REGION", "value": "europe-west6" }, { "name": "GOOGLE_APPLICATION_CREDENTIALS", "value": "/app/gcp-credentials.json" }, { "name": "GOOGLE_CREDENTIALS", "valueFrom": { "secretKeyRef": { "key": "googleCredentials", "name": "gke-credentials" } } } ], "image": "pulumi/pulumi:3.147.0-nonroot", "podTemplate": { "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "cn_infra", "operator": "Exists" } ] } ] } } }, "containers": [ { "name": "pulumi", "volumeMounts": [ { "mountPath": "/app/gcp-credentials.json", "name": "gcp-credentials", "subPath": "googleCredentials" } ] } ], "terminationGracePeriodSeconds": 1800, "tolerations": [ { "effect": "NoSchedule", "key": "cn_infra", "operator": "Exists" } ], "volumes": [ { "name": "gcp-credentials", "secret": { "optional": false, "secretName": "gke-credentials" } } ] } } } } } }, "name": "multi-validator", "provider": "", "type": "kubernetes:pulumi.com/v1:Stack" }, { "custom": true, "id": "organization/infra/infra.mock", "inputs": { "name": "organization/infra/infra.mock" }, "name": "organization/infra/infra.mock", "provider": "", "type": "pulumi:pulumi:StackReference" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "false" }, "name": "splice-node-active-base", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.20" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-active-base", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "true" }, "name": "splice-node-active", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "include": [ { "fromPath": "cluster/stacks/prod/sv-runbook/Pulumi.sv-runbook.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/sv-runbook/Pulumi.sv-runbook.mock.yaml" }, { "fromPath": "cluster/stacks/prod/multi-validator/Pulumi.multi-validator.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/multi-validator/Pulumi.multi-validator.mock.yaml" }, { "fromPath": "cluster/stacks/prod/validator-runbook/Pulumi.validator-runbook.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/validator-runbook/Pulumi.validator-runbook.mock.yaml" }, { "fromPath": "cluster/stacks/prod/validator-runbook/Pulumi.validators.extra-validator.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/validator-runbook/Pulumi.validators.extra-validator.mock.yaml" }, { "fromPath": "cluster/stacks/prod/validator1/Pulumi.validator1.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/validator1/Pulumi.validator1.mock.yaml" }, { "fromPath": "cluster/stacks/prod/splitwell/Pulumi.splitwell.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/splitwell/Pulumi.splitwell.mock.yaml" }, { "fromPath": "cluster/stacks/prod/infra/Pulumi.infra.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/infra/Pulumi.infra.mock.yaml" }, { "fromPath": "cluster/stacks/prod/canton-network/Pulumi.canton-network.mock.yaml", "repository": { "name": "splice-node-active-base" }, "toPath": "splice/cluster/pulumi/canton-network/Pulumi.canton-network.mock.yaml" } ], "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.20" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-active", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "false" }, "name": "splice-node-migration-1-base", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "interval": "5m", "recurseSubmodules": true, "ref": { "commit": "981227e62011e386cca3cdb5f00b472cf05a12c4" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-1-base", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "true" }, "name": "splice-node-migration-1", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "include": [ { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-1.mock.yaml", "repository": { "name": "splice-node-migration-1-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-1.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-1.mock.yaml", "repository": { "name": "splice-node-migration-1-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-1.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-1.mock.yaml", "repository": { "name": "splice-node-migration-1-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-1.mock.yaml" } ], "interval": "5m", "recurseSubmodules": true, "ref": { "commit": "981227e62011e386cca3cdb5f00b472cf05a12c4" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-1", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "false" }, "name": "splice-node-migration-2-base", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.19" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-2-base", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "true" }, "name": "splice-node-migration-2", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "include": [ { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-2.mock.yaml", "repository": { "name": "splice-node-migration-2-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-2.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-2.mock.yaml", "repository": { "name": "splice-node-migration-2-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-2.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-2.mock.yaml", "repository": { "name": "splice-node-migration-2-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-2.mock.yaml" } ], "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.19" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-2", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "false" }, "name": "splice-node-migration-3-base", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.20" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-3-base", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "true" }, "name": "splice-node-migration-3", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "include": [ { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-3.mock.yaml", "repository": { "name": "splice-node-migration-3-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-3.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-3.mock.yaml", "repository": { "name": "splice-node-migration-3-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-3.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-3.mock.yaml", "repository": { "name": "splice-node-migration-3-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-3.mock.yaml" } ], "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.20" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-3", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "false" }, "name": "splice-node-migration-4-base", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.21" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-4-base", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "metadata": { "labels": { "notifications": "true" }, "name": "splice-node-migration-4", "namespace": "operator" }, "spec": { "ignore": "**/daml/dars\n!**/daml/dars/splitwell*", "include": [ { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-4.mock.yaml", "repository": { "name": "splice-node-migration-4-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-4.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-4.mock.yaml", "repository": { "name": "splice-node-migration-4-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-4.mock.yaml" }, { "fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-4.mock.yaml", "repository": { "name": "splice-node-migration-4-base" }, "toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-4.mock.yaml" } ], "interval": "5m", "recurseSubmodules": true, "ref": { "name": "refs/heads/release-line-0.3.21" }, "secretRef": { "name": "github" }, "url": "https://github.com/hyperledger-labs/splice" } }, "name": "splice-node-migration-4", "provider": "", "type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "ServiceAccount", "metadata": { "name": "splitwell-sa", "namespace": "operator" } }, "name": "splitwell-sa", "provider": "", "type": "kubernetes:core/v1:ServiceAccount" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "splitwell-sa", "namespace": "operator" } ] }, "name": "splitwell:cluster-admin", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:auth-delegator" }, "subjects": [ { "kind": "ServiceAccount", "name": "splitwell-sa", "namespace": "operator" } ] }, "name": "splitwell:system:auth-delegator", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "pulumi.com/v1", "kind": "Stack", "metadata": { "name": "splitwell", "namespace": "operator" }, "spec": { "backend": "gs://da-cn-pulumi-dev-stacks", "continueResyncOnCommitMatch": false, "destroyOnFinalize": false, "envRefs": { "AUTH0_CN_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID", "name": "deployment-env" }, "type": "Secret" }, "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": { "secret": { "key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET", "name": "deployment-env" }, "type": "Secret" }, "DEPLOYMENT_DIR": { "literal": { "value": "/share/source/cluster/deployment" }, "type": "Literal" }, "GCP_CLUSTER_BASENAME": { "literal": { "value": "mock" }, "type": "Literal" }, "PRIVATE_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs-private" }, "type": "Literal" }, "PUBLIC_CONFIGS_PATH": { "literal": { "value": "/share/source/cluster/configs/configs" }, "type": "Literal" }, "PULUMI_VERSION": { "literal": { "value": "0.0.0" }, "type": "Literal" }, "SLACK_ACCESS_TOKEN": { "secret": { "key": "SLACK_ACCESS_TOKEN", "name": "deployment-env" }, "type": "Secret" }, "SPLICE_ROOT": { "literal": { "value": "/share/source/splice" }, "type": "Literal" } }, "fluxSource": { "dir": "splice/cluster/pulumi/splitwell", "sourceRef": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "GitRepository", "name": "splice-node-active" } }, "retryOnUpdateConflict": true, "serviceAccountName": "splitwell-sa", "stack": "organization/splitwell/splitwell.mock", "updateTemplate": { "spec": { "parallel": 64 } }, "useLocalStackOnly": true, "workspaceTemplate": { "metadata": { "deletionGracePeriodSeconds": 1800, "name": "splitwell", "namespace": "operator" }, "spec": { "env": [ { "name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE", "value": "true" }, { "name": "SPLICE_OPERATOR_DEPLOYMENT", "value": "true" }, { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "password", "name": "github" } } }, { "name": "CLOUDSDK_CORE_PROJECT", "value": "da-cn-devnet" }, { "name": "CLOUDSDK_COMPUTE_REGION", "value": "europe-west6" }, { "name": "GOOGLE_APPLICATION_CREDENTIALS", "value": "/app/gcp-credentials.json" }, { "name": "GOOGLE_CREDENTIALS", "valueFrom": { "secretKeyRef": { "key": "googleCredentials", "name": "gke-credentials" } } } ], "image": "pulumi/pulumi:3.147.0-nonroot", "podTemplate": { "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "cn_infra", "operator": "Exists" } ] } ] } } }, "containers": [ { "name": "pulumi", "volumeMounts": [ { "mountPath": "/app/gcp-credentials.json", "name": "gcp-credentials", "subPath": "googleCredentials" } ] } ], "terminationGracePeriodSeconds": 1800, "tolerations": [ { "effect": "NoSchedule", "key": "cn_infra", "operator": "Exists" } ], "volumes": [ { "name": "gcp-credentials", "secret": { "optional": false, "secretName": "gke-credentials" } } ] } } } } } }, "name": "splitwell", "provider": "", "type": "kubernetes:pulumi.com/v1:Stack" }, { "custom": true, "id": "", "inputs": { "apiVersion": "v1", "kind": "ServiceAccount", "metadata": { "name": "sv-canton.sv-1-migration-1-sa", "namespace": "operator" } }, "name": "sv-canton.sv-1-migration-1-sa", "provider": "", "type": "kubernetes:core/v1:ServiceAccount" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "sv-canton.sv-1-migration-1-sa", "namespace": "operator" } ] }, "name": "sv-canton.sv-1-migration-1:cluster-admin", "provider": "", "type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding" }, { "custom": true, "id": "", "inputs": { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "ClusterRoleBinding", "roleRef": { "apiGroup": "rbac.auth