@fairmint/canton-node-sdk
Version:
Canton Node SDK
1,693 lines • 185 kB
JSON
[
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "canton-network-sa",
"namespace": "operator"
}
},
"name": "canton-network-sa",
"provider": "",
"type": "kubernetes:core/v1:ServiceAccount"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "cluster-admin"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "canton-network-sa",
"namespace": "operator"
}
]
},
"name": "canton-network:cluster-admin",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "system:auth-delegator"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "canton-network-sa",
"namespace": "operator"
}
]
},
"name": "canton-network:system:auth-delegator",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "pulumi.com/v1",
"kind": "Stack",
"metadata": {
"name": "canton-network",
"namespace": "operator"
},
"spec": {
"backend": "gs://da-cn-pulumi-dev-stacks",
"continueResyncOnCommitMatch": false,
"destroyOnFinalize": false,
"envRefs": {
"AUTH0_CN_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"DEPLOYMENT_DIR": {
"literal": {
"value": "/share/source/cluster/deployment"
},
"type": "Literal"
},
"GCP_CLUSTER_BASENAME": {
"literal": {
"value": "mock"
},
"type": "Literal"
},
"PRIVATE_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs-private"
},
"type": "Literal"
},
"PUBLIC_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs"
},
"type": "Literal"
},
"PULUMI_VERSION": {
"literal": {
"value": "0.0.0"
},
"type": "Literal"
},
"SLACK_ACCESS_TOKEN": {
"secret": {
"key": "SLACK_ACCESS_TOKEN",
"name": "deployment-env"
},
"type": "Secret"
},
"SPLICE_ROOT": {
"literal": {
"value": "/share/source/splice"
},
"type": "Literal"
}
},
"fluxSource": {
"dir": "splice/cluster/pulumi/canton-network",
"sourceRef": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"name": "splice-node-active"
}
},
"retryOnUpdateConflict": true,
"serviceAccountName": "canton-network-sa",
"stack": "organization/canton-network/canton-network.mock",
"updateTemplate": {
"spec": {
"parallel": 64
}
},
"useLocalStackOnly": true,
"workspaceTemplate": {
"metadata": {
"deletionGracePeriodSeconds": 1800,
"name": "canton-network",
"namespace": "operator"
},
"spec": {
"env": [
{
"name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE",
"value": "true"
},
{
"name": "SPLICE_OPERATOR_DEPLOYMENT",
"value": "true"
},
{
"name": "GITHUB_TOKEN",
"valueFrom": {
"secretKeyRef": {
"key": "password",
"name": "github"
}
}
},
{
"name": "CLOUDSDK_CORE_PROJECT",
"value": "da-cn-devnet"
},
{
"name": "CLOUDSDK_COMPUTE_REGION",
"value": "europe-west6"
},
{
"name": "GOOGLE_APPLICATION_CREDENTIALS",
"value": "/app/gcp-credentials.json"
},
{
"name": "GOOGLE_CREDENTIALS",
"valueFrom": {
"secretKeyRef": {
"key": "googleCredentials",
"name": "gke-credentials"
}
}
}
],
"image": "pulumi/pulumi:3.147.0-nonroot",
"podTemplate": {
"spec": {
"affinity": {
"nodeAffinity": {
"requiredDuringSchedulingIgnoredDuringExecution": {
"nodeSelectorTerms": [
{
"matchExpressions": [
{
"key": "cn_infra",
"operator": "Exists"
}
]
}
]
}
}
},
"containers": [
{
"name": "pulumi",
"volumeMounts": [
{
"mountPath": "/app/gcp-credentials.json",
"name": "gcp-credentials",
"subPath": "googleCredentials"
}
]
}
],
"terminationGracePeriodSeconds": 1800,
"tolerations": [
{
"effect": "NoSchedule",
"key": "cn_infra",
"operator": "Exists"
}
],
"volumes": [
{
"name": "gcp-credentials",
"secret": {
"optional": false,
"secretName": "gke-credentials"
}
}
]
}
}
}
}
}
},
"name": "canton-network",
"provider": "",
"type": "kubernetes:pulumi.com/v1:Stack"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "Secret",
"metadata": {
"name": "deployment-env",
"namespace": "operator"
},
"stringData": {
"4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270",
"value": {
"AUTH0_CN_MANAGEMENT_API_CLIENT_ID": "mgmt",
"AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t",
"AUTH0_SV_MANAGEMENT_API_CLIENT_ID": "mgmt",
"AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t",
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": "mgmt",
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": "s3cr3t",
"SLACK_ACCESS_TOKEN": "s3cr3t"
}
},
"type": "Opaque"
},
"name": "deployment-env",
"provider": "",
"type": "kubernetes:core/v1:Secret"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "Secret",
"metadata": {
"name": "gke-credentials",
"namespace": "operator"
},
"stringData": {
"4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270",
"value": {
"googleCredentials": "s3cr3t"
}
},
"type": "Opaque"
},
"name": "gke-credentials",
"provider": "",
"type": "kubernetes:core/v1:Secret"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "infra-sa",
"namespace": "operator"
}
},
"name": "infra-sa",
"provider": "",
"type": "kubernetes:core/v1:ServiceAccount"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "cluster-admin"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "infra-sa",
"namespace": "operator"
}
]
},
"name": "infra:cluster-admin",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "system:auth-delegator"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "infra-sa",
"namespace": "operator"
}
]
},
"name": "infra:system:auth-delegator",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "pulumi.com/v1",
"kind": "Stack",
"metadata": {
"name": "infra",
"namespace": "operator"
},
"spec": {
"backend": "gs://da-cn-pulumi-dev-stacks",
"continueResyncOnCommitMatch": false,
"destroyOnFinalize": false,
"envRefs": {
"AUTH0_CN_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"DEPLOYMENT_DIR": {
"literal": {
"value": "/share/source/cluster/deployment"
},
"type": "Literal"
},
"GCP_CLUSTER_BASENAME": {
"literal": {
"value": "mock"
},
"type": "Literal"
},
"PRIVATE_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs-private"
},
"type": "Literal"
},
"PUBLIC_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs"
},
"type": "Literal"
},
"PULUMI_VERSION": {
"literal": {
"value": "0.0.0"
},
"type": "Literal"
},
"SLACK_ACCESS_TOKEN": {
"secret": {
"key": "SLACK_ACCESS_TOKEN",
"name": "deployment-env"
},
"type": "Secret"
},
"SPLICE_ROOT": {
"literal": {
"value": "/share/source/splice"
},
"type": "Literal"
}
},
"fluxSource": {
"dir": "splice/cluster/pulumi/infra",
"sourceRef": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"name": "splice-node-active"
}
},
"retryOnUpdateConflict": true,
"serviceAccountName": "infra-sa",
"stack": "organization/infra/infra.mock",
"updateTemplate": {
"spec": {
"parallel": 64
}
},
"useLocalStackOnly": true,
"workspaceTemplate": {
"metadata": {
"deletionGracePeriodSeconds": 1800,
"name": "infra",
"namespace": "operator"
},
"spec": {
"env": [
{
"name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE",
"value": "true"
},
{
"name": "SPLICE_OPERATOR_DEPLOYMENT",
"value": "true"
},
{
"name": "GITHUB_TOKEN",
"valueFrom": {
"secretKeyRef": {
"key": "password",
"name": "github"
}
}
},
{
"name": "CLOUDSDK_CORE_PROJECT",
"value": "da-cn-devnet"
},
{
"name": "CLOUDSDK_COMPUTE_REGION",
"value": "europe-west6"
},
{
"name": "GOOGLE_APPLICATION_CREDENTIALS",
"value": "/app/gcp-credentials.json"
},
{
"name": "GOOGLE_CREDENTIALS",
"valueFrom": {
"secretKeyRef": {
"key": "googleCredentials",
"name": "gke-credentials"
}
}
}
],
"image": "pulumi/pulumi:3.147.0-nonroot",
"podTemplate": {
"spec": {
"affinity": {
"nodeAffinity": {
"requiredDuringSchedulingIgnoredDuringExecution": {
"nodeSelectorTerms": [
{
"matchExpressions": [
{
"key": "cn_infra",
"operator": "Exists"
}
]
}
]
}
}
},
"containers": [
{
"name": "pulumi",
"volumeMounts": [
{
"mountPath": "/app/gcp-credentials.json",
"name": "gcp-credentials",
"subPath": "googleCredentials"
}
]
}
],
"terminationGracePeriodSeconds": 1800,
"tolerations": [
{
"effect": "NoSchedule",
"key": "cn_infra",
"operator": "Exists"
}
],
"volumes": [
{
"name": "gcp-credentials",
"secret": {
"optional": false,
"secretName": "gke-credentials"
}
}
]
}
}
}
}
}
},
"name": "infra",
"provider": "",
"type": "kubernetes:pulumi.com/v1:Stack"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "multi-validator-sa",
"namespace": "operator"
}
},
"name": "multi-validator-sa",
"provider": "",
"type": "kubernetes:core/v1:ServiceAccount"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "cluster-admin"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "multi-validator-sa",
"namespace": "operator"
}
]
},
"name": "multi-validator:cluster-admin",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "system:auth-delegator"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "multi-validator-sa",
"namespace": "operator"
}
]
},
"name": "multi-validator:system:auth-delegator",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "pulumi.com/v1",
"kind": "Stack",
"metadata": {
"name": "multi-validator",
"namespace": "operator"
},
"spec": {
"backend": "gs://da-cn-pulumi-dev-stacks",
"continueResyncOnCommitMatch": false,
"destroyOnFinalize": false,
"envRefs": {
"AUTH0_CN_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"DEPLOYMENT_DIR": {
"literal": {
"value": "/share/source/cluster/deployment"
},
"type": "Literal"
},
"GCP_CLUSTER_BASENAME": {
"literal": {
"value": "mock"
},
"type": "Literal"
},
"PRIVATE_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs-private"
},
"type": "Literal"
},
"PUBLIC_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs"
},
"type": "Literal"
},
"PULUMI_VERSION": {
"literal": {
"value": "0.0.0"
},
"type": "Literal"
},
"SLACK_ACCESS_TOKEN": {
"secret": {
"key": "SLACK_ACCESS_TOKEN",
"name": "deployment-env"
},
"type": "Secret"
},
"SPLICE_ROOT": {
"literal": {
"value": "/share/source/splice"
},
"type": "Literal"
}
},
"fluxSource": {
"dir": "splice/cluster/pulumi/multi-validator",
"sourceRef": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"name": "splice-node-active"
}
},
"retryOnUpdateConflict": true,
"serviceAccountName": "multi-validator-sa",
"stack": "organization/multi-validator/multi-validator.mock",
"updateTemplate": {
"spec": {
"parallel": 10
}
},
"useLocalStackOnly": true,
"workspaceTemplate": {
"metadata": {
"deletionGracePeriodSeconds": 1800,
"name": "multi-validator",
"namespace": "operator"
},
"spec": {
"env": [
{
"name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE",
"value": "true"
},
{
"name": "SPLICE_OPERATOR_DEPLOYMENT",
"value": "true"
},
{
"name": "GITHUB_TOKEN",
"valueFrom": {
"secretKeyRef": {
"key": "password",
"name": "github"
}
}
},
{
"name": "CLOUDSDK_CORE_PROJECT",
"value": "da-cn-devnet"
},
{
"name": "CLOUDSDK_COMPUTE_REGION",
"value": "europe-west6"
},
{
"name": "GOOGLE_APPLICATION_CREDENTIALS",
"value": "/app/gcp-credentials.json"
},
{
"name": "GOOGLE_CREDENTIALS",
"valueFrom": {
"secretKeyRef": {
"key": "googleCredentials",
"name": "gke-credentials"
}
}
}
],
"image": "pulumi/pulumi:3.147.0-nonroot",
"podTemplate": {
"spec": {
"affinity": {
"nodeAffinity": {
"requiredDuringSchedulingIgnoredDuringExecution": {
"nodeSelectorTerms": [
{
"matchExpressions": [
{
"key": "cn_infra",
"operator": "Exists"
}
]
}
]
}
}
},
"containers": [
{
"name": "pulumi",
"volumeMounts": [
{
"mountPath": "/app/gcp-credentials.json",
"name": "gcp-credentials",
"subPath": "googleCredentials"
}
]
}
],
"terminationGracePeriodSeconds": 1800,
"tolerations": [
{
"effect": "NoSchedule",
"key": "cn_infra",
"operator": "Exists"
}
],
"volumes": [
{
"name": "gcp-credentials",
"secret": {
"optional": false,
"secretName": "gke-credentials"
}
}
]
}
}
}
}
}
},
"name": "multi-validator",
"provider": "",
"type": "kubernetes:pulumi.com/v1:Stack"
},
{
"custom": true,
"id": "organization/infra/infra.mock",
"inputs": {
"name": "organization/infra/infra.mock"
},
"name": "organization/infra/infra.mock",
"provider": "",
"type": "pulumi:pulumi:StackReference"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "false"
},
"name": "splice-node-active-base",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.20"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-active-base",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "true"
},
"name": "splice-node-active",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"include": [
{
"fromPath": "cluster/stacks/prod/sv-runbook/Pulumi.sv-runbook.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/sv-runbook/Pulumi.sv-runbook.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/multi-validator/Pulumi.multi-validator.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/multi-validator/Pulumi.multi-validator.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/validator-runbook/Pulumi.validator-runbook.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/validator-runbook/Pulumi.validator-runbook.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/validator-runbook/Pulumi.validators.extra-validator.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/validator-runbook/Pulumi.validators.extra-validator.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/validator1/Pulumi.validator1.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/validator1/Pulumi.validator1.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/splitwell/Pulumi.splitwell.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/splitwell/Pulumi.splitwell.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/infra/Pulumi.infra.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/infra/Pulumi.infra.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/canton-network/Pulumi.canton-network.mock.yaml",
"repository": {
"name": "splice-node-active-base"
},
"toPath": "splice/cluster/pulumi/canton-network/Pulumi.canton-network.mock.yaml"
}
],
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.20"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-active",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "false"
},
"name": "splice-node-migration-1-base",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"commit": "981227e62011e386cca3cdb5f00b472cf05a12c4"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-1-base",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "true"
},
"name": "splice-node-migration-1",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"include": [
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-1.mock.yaml",
"repository": {
"name": "splice-node-migration-1-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-1.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-1.mock.yaml",
"repository": {
"name": "splice-node-migration-1-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-1.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-1.mock.yaml",
"repository": {
"name": "splice-node-migration-1-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-1.mock.yaml"
}
],
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"commit": "981227e62011e386cca3cdb5f00b472cf05a12c4"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-1",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "false"
},
"name": "splice-node-migration-2-base",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.19"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-2-base",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "true"
},
"name": "splice-node-migration-2",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"include": [
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-2.mock.yaml",
"repository": {
"name": "splice-node-migration-2-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-2.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-2.mock.yaml",
"repository": {
"name": "splice-node-migration-2-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-2.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-2.mock.yaml",
"repository": {
"name": "splice-node-migration-2-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-2.mock.yaml"
}
],
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.19"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-2",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "false"
},
"name": "splice-node-migration-3-base",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.20"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-3-base",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "true"
},
"name": "splice-node-migration-3",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"include": [
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-3.mock.yaml",
"repository": {
"name": "splice-node-migration-3-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-3.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-3.mock.yaml",
"repository": {
"name": "splice-node-migration-3-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-3.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-3.mock.yaml",
"repository": {
"name": "splice-node-migration-3-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-3.mock.yaml"
}
],
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.20"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-3",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "false"
},
"name": "splice-node-migration-4-base",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.21"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-4-base",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"metadata": {
"labels": {
"notifications": "true"
},
"name": "splice-node-migration-4",
"namespace": "operator"
},
"spec": {
"ignore": "**/daml/dars\n!**/daml/dars/splitwell*",
"include": [
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-1-migration-4.mock.yaml",
"repository": {
"name": "splice-node-migration-4-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-1-migration-4.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-da-1-migration-4.mock.yaml",
"repository": {
"name": "splice-node-migration-4-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-da-1-migration-4.mock.yaml"
},
{
"fromPath": "cluster/stacks/prod/sv-canton/Pulumi.sv-canton.sv-migration-4.mock.yaml",
"repository": {
"name": "splice-node-migration-4-base"
},
"toPath": "splice/cluster/pulumi/sv-canton/Pulumi.sv-canton.sv-migration-4.mock.yaml"
}
],
"interval": "5m",
"recurseSubmodules": true,
"ref": {
"name": "refs/heads/release-line-0.3.21"
},
"secretRef": {
"name": "github"
},
"url": "https://github.com/hyperledger-labs/splice"
}
},
"name": "splice-node-migration-4",
"provider": "",
"type": "kubernetes:source.toolkit.fluxcd.io/v1:GitRepository"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "splitwell-sa",
"namespace": "operator"
}
},
"name": "splitwell-sa",
"provider": "",
"type": "kubernetes:core/v1:ServiceAccount"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "cluster-admin"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "splitwell-sa",
"namespace": "operator"
}
]
},
"name": "splitwell:cluster-admin",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "system:auth-delegator"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "splitwell-sa",
"namespace": "operator"
}
]
},
"name": "splitwell:system:auth-delegator",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "pulumi.com/v1",
"kind": "Stack",
"metadata": {
"name": "splitwell",
"namespace": "operator"
},
"spec": {
"backend": "gs://da-cn-pulumi-dev-stacks",
"continueResyncOnCommitMatch": false,
"destroyOnFinalize": false,
"envRefs": {
"AUTH0_CN_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_CN_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_SV_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_ID",
"name": "deployment-env"
},
"type": "Secret"
},
"AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET": {
"secret": {
"key": "AUTH0_VALIDATOR_MANAGEMENT_API_CLIENT_SECRET",
"name": "deployment-env"
},
"type": "Secret"
},
"DEPLOYMENT_DIR": {
"literal": {
"value": "/share/source/cluster/deployment"
},
"type": "Literal"
},
"GCP_CLUSTER_BASENAME": {
"literal": {
"value": "mock"
},
"type": "Literal"
},
"PRIVATE_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs-private"
},
"type": "Literal"
},
"PUBLIC_CONFIGS_PATH": {
"literal": {
"value": "/share/source/cluster/configs/configs"
},
"type": "Literal"
},
"PULUMI_VERSION": {
"literal": {
"value": "0.0.0"
},
"type": "Literal"
},
"SLACK_ACCESS_TOKEN": {
"secret": {
"key": "SLACK_ACCESS_TOKEN",
"name": "deployment-env"
},
"type": "Secret"
},
"SPLICE_ROOT": {
"literal": {
"value": "/share/source/splice"
},
"type": "Literal"
}
},
"fluxSource": {
"dir": "splice/cluster/pulumi/splitwell",
"sourceRef": {
"apiVersion": "source.toolkit.fluxcd.io/v1",
"kind": "GitRepository",
"name": "splice-node-active"
}
},
"retryOnUpdateConflict": true,
"serviceAccountName": "splitwell-sa",
"stack": "organization/splitwell/splitwell.mock",
"updateTemplate": {
"spec": {
"parallel": 64
}
},
"useLocalStackOnly": true,
"workspaceTemplate": {
"metadata": {
"deletionGracePeriodSeconds": 1800,
"name": "splitwell",
"namespace": "operator"
},
"spec": {
"env": [
{
"name": "CN_PULUMI_LOAD_ENV_CONFIG_FILE",
"value": "true"
},
{
"name": "SPLICE_OPERATOR_DEPLOYMENT",
"value": "true"
},
{
"name": "GITHUB_TOKEN",
"valueFrom": {
"secretKeyRef": {
"key": "password",
"name": "github"
}
}
},
{
"name": "CLOUDSDK_CORE_PROJECT",
"value": "da-cn-devnet"
},
{
"name": "CLOUDSDK_COMPUTE_REGION",
"value": "europe-west6"
},
{
"name": "GOOGLE_APPLICATION_CREDENTIALS",
"value": "/app/gcp-credentials.json"
},
{
"name": "GOOGLE_CREDENTIALS",
"valueFrom": {
"secretKeyRef": {
"key": "googleCredentials",
"name": "gke-credentials"
}
}
}
],
"image": "pulumi/pulumi:3.147.0-nonroot",
"podTemplate": {
"spec": {
"affinity": {
"nodeAffinity": {
"requiredDuringSchedulingIgnoredDuringExecution": {
"nodeSelectorTerms": [
{
"matchExpressions": [
{
"key": "cn_infra",
"operator": "Exists"
}
]
}
]
}
}
},
"containers": [
{
"name": "pulumi",
"volumeMounts": [
{
"mountPath": "/app/gcp-credentials.json",
"name": "gcp-credentials",
"subPath": "googleCredentials"
}
]
}
],
"terminationGracePeriodSeconds": 1800,
"tolerations": [
{
"effect": "NoSchedule",
"key": "cn_infra",
"operator": "Exists"
}
],
"volumes": [
{
"name": "gcp-credentials",
"secret": {
"optional": false,
"secretName": "gke-credentials"
}
}
]
}
}
}
}
}
},
"name": "splitwell",
"provider": "",
"type": "kubernetes:pulumi.com/v1:Stack"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "sv-canton.sv-1-migration-1-sa",
"namespace": "operator"
}
},
"name": "sv-canton.sv-1-migration-1-sa",
"provider": "",
"type": "kubernetes:core/v1:ServiceAccount"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.authorization.k8s.io",
"kind": "ClusterRole",
"name": "cluster-admin"
},
"subjects": [
{
"kind": "ServiceAccount",
"name": "sv-canton.sv-1-migration-1-sa",
"namespace": "operator"
}
]
},
"name": "sv-canton.sv-1-migration-1:cluster-admin",
"provider": "",
"type": "kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding"
},
{
"custom": true,
"id": "",
"inputs": {
"apiVersion": "rbac.authorization.k8s.io/v1",
"kind": "ClusterRoleBinding",
"roleRef": {
"apiGroup": "rbac.auth