boot-node.yaml

{{- if .Values.bootNode.enabled }}
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: {{ include "aztec-network.fullname" . }}-boot-node
  labels:
    {{- include "aztec-network.labels" . | nindent 4 }}
spec:
  serviceName: {{ include "aztec-network.fullname" . }}-boot-node
  replicas: {{ .Values.bootNode.replicas }}
  selector:
    matchLabels:
      {{- include "aztec-network.selectorLabels" . | nindent 6 }}
      app: boot-node
  {{- if not .Values.storage.localSsd }}
  volumeClaimTemplates:
    - metadata:
        name: boot-node-data
      spec:
        accessModes: [ "ReadWriteOnce" ]
        resources:
          requests:
            storage: {{ .Values.bootNode.storageSize }}
  {{- end }}
  template:
    metadata:
      labels:
        {{- include "aztec-network.selectorLabels" . | nindent 8 }}
        app: boot-node
    spec:
      {{- if .Values.network.gke }}
      nodeSelector:
        local-ssd: "{{ .Values.storage.localSsd }}"
        node-type: network
      {{- end }}
      dnsPolicy: ClusterFirstWithHostNet
      {{- if .Values.network.public }}
      hostNetwork: true
      serviceAccountName: {{ include "aztec-network.fullname" . }}-node
      {{- include "aztec-network.publicAntiAffinity" . | nindent 6 }}
      {{- end }}
      terminationGracePeriodSeconds: 5  # default is 30 - speed up initcontainer termination
      initContainers:
        {{- include "aztec-network.combinedAllSetupContainer" . | nindent 8 }}

        # Generate the validator addresses; used in the deploy-l1-contracts step
        - name: generate-validator-addresses
          image: {{ .Values.images.foundry.image }}
          imagePullPolicy: {{ .Values.images.foundry.pullPolicy }}
          command:
            - /bin/sh
            - -c
            - |
              source /scripts/get-validator-addresses.sh
          volumeMounts:
            - name: scripts
              mountPath: /scripts
            - name: config
              mountPath: /shared/config
          env:
            - name: KEY_INDEX_START
              value: {{ .Values.aztec.validatorKeyIndexStart | quote }}
            - name: MNEMONIC
              value: {{ .Values.aztec.l1DeploymentMnemonic }}
            - name: NUMBER_OF_VALIDATORS
              value: {{ .Values.validator.replicas | quote }}

        - name: deploy-l1-contracts
          {{- include "aztec-network.image" . | nindent 10 }}
          command:
            - /bin/bash
            - -c
            - |
              source /shared/config/service-addresses
              source /shared/config/validator-addresses
              {{- include "aztec-network.waitForEthereum" . | nindent 14 }}


              /scripts/deploy-l1-contracts.sh "{{ .Values.aztec.l1Salt }}" "{{ .Values.ethereum.chainId }}" "$VALIDATOR_ADDRESSES"
          volumeMounts:
            - name: scripts-output
              mountPath: /shared/contracts
            - name: config
              mountPath: /shared/config
            - name: scripts
              mountPath: /scripts
          env:
            - name: ACCELERATED_TEST_DEPLOYMENTS
              value: "{{ .Values.ethereum.acceleratedTestDeployments }}"
            - name: TEST_ACCOUNTS
              value: "{{ .Values.aztec.testAccounts }}"
            - name: REGISTRY_CONTRACT_ADDRESS
              value: "{{ .Values.bootNode.contracts.registryAddress }}"
            - name: TELEMETRY
              value: "{{ .Values.telemetry.enabled }}"
            - name: INIT_VALIDATORS
              value: "true"
            - name: MNEMONIC
              value: "{{ .Values.aztec.l1DeploymentMnemonic }}"
            - name: L1_DEPLOYMENT_PRIVATE_KEY
              value: "{{ .Values.ethereum.deployL1ContractsPrivateKey }}"
            - name: ETHEREUM_SLOT_DURATION
              value: "{{ .Values.ethereum.blockTime }}"
            - name: AZTEC_SLOT_DURATION
              value: "{{ .Values.aztec.slotDuration }}"
            - name: AZTEC_EPOCH_DURATION
              value: "{{ .Values.aztec.epochDuration }}"
            - name: AZTEC_PROOF_SUBMISSION_WINDOW
              value: "{{ .Values.aztec.proofSubmissionWindow }}"
            - name: L1_GAS_PRICE_MAX
              value: "{{ .Values.ethereum.l1GasPriceMax }}"
            - name: L1_FIXED_PRIORITY_FEE_PER_GAS
              value: "{{ .Values.ethereum.l1FixedPriorityFeePerGas }}"
            - name: K8S_POD_UID
              valueFrom:
                fieldRef:
                  fieldPath: metadata.uid
            - name: K8S_POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: K8S_NAMESPACE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: USE_GCLOUD_LOGGING
              value: "{{ .Values.telemetry.useGcloudLogging }}"
      containers:
        - name: boot-node
          {{- include "aztec-network.image" . | nindent 10 }}
          command:
            - /bin/bash
            - -c
            - |
              source /shared/contracts/contracts.env && \
              source /shared/config/p2p-addresses && \
              source /shared/config/service-addresses && \
              source /shared/config/otel-resource && \
              env && \
              node --no-warnings /usr/src/yarn-project/aztec/dest/bin/index.js start --node --archiver --sequencer --pxe
          startupProbe:
            httpGet:
              path: /status
              port: {{ .Values.bootNode.service.nodePort }}
            periodSeconds: {{ .Values.bootNode.startupProbe.periodSeconds }}
            failureThreshold: {{ .Values.bootNode.startupProbe.failureThreshold }}
          livenessProbe:
            httpGet:
              path: /status
              port: {{ .Values.bootNode.service.nodePort }}
            initialDelaySeconds: 30
            periodSeconds: 5
            timeoutSeconds: 30
            failureThreshold: 3
          volumeMounts:
            - name: config
              mountPath: /shared/config
            - name: boot-node-data
              mountPath: {{ .Values.bootNode.dataDir }}
            - name: scripts-output
              mountPath: /shared/contracts
          env:
            - name: POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: K8S_POD_UID
              valueFrom:
                fieldRef:
                  fieldPath: metadata.uid
            - name: K8S_POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: K8S_NAMESPACE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: NODE_OPTIONS
              value: "--max-old-space-size={{ .Values.bootNode.maxOldSpaceSize}}"
            - name: AZTEC_PORT
              value: "{{ .Values.bootNode.service.nodePort }}"
            - name: LOG_LEVEL
              value: "{{ .Values.bootNode.logLevel }}"
            - name: LOG_JSON
              value: "1"
            - name: P2P_ENABLED
              value: "{{ .Values.bootNode.p2p.enabled }}"
            - name: P2P_GOSSIPSUB_FLOOD_PUBLISH
              value: "{{ .Values.bootNode.p2p.floodPublish }}"
            - name: COINBASE
              value: "{{ .Values.bootNode.coinbaseAddress }}"
            - name: VALIDATOR_DISABLED
              value: "true"
            - name: L1_CHAIN_ID
              value: "{{ .Values.ethereum.chainId }}"
            - name: PROVER_REAL_PROOFS
              value: "{{ .Values.aztec.realProofs }}"
            - name: PXE_PROVER_ENABLED
              value: "{{ .Values.aztec.realProofs }}"
            - name: ETHEREUM_SLOT_DURATION
              value: "{{ .Values.ethereum.blockTime }}"
            - name: AZTEC_SLOT_DURATION
              value: "{{ .Values.aztec.slotDuration }}"
            - name: AZTEC_EPOCH_DURATION
              value: "{{ .Values.aztec.epochDuration }}"
            - name: AZTEC_PROOF_SUBMISSION_WINDOW
              value: "{{ .Values.aztec.proofSubmissionWindow }}"
            - name: ARCHIVER_POLLING_INTERVAL_MS
              value: {{ .Values.bootNode.archiverPollingInterval | quote }}
            - name: ARCHIVER_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.bootNode.archiverViemPollingInterval | quote }}
            - name: L1_READER_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.bootNode.archiverViemPollingInterval | quote }}
            - name: SEQ_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.bootNode.viemPollingInterval | quote }}
            - name: PEER_ID_PRIVATE_KEY
              value: "{{ .Values.bootNode.peerIdPrivateKey }}"
            - name: DATA_DIRECTORY
              value: "{{ .Values.bootNode.dataDir }}"
            - name: DATA_STORE_MAP_SIZE_KB
              value: "{{ .Values.storage.dataStoreMapSize }}"
            - name: WS_DB_MAP_SIZE_KB
              value: "{{ .Values.storage.worldStateMapSize }}"
            - name: USE_GCLOUD_LOGGING
              value: "{{ .Values.telemetry.useGcloudLogging }}"
            - name: OTEL_EXCLUDE_METRICS
              value: "{{ .Values.telemetry.excludeMetrics }}"
            - name: TEST_ACCOUNTS
              value: "{{ .Values.aztec.testAccounts }}"
            {{- if .Values.blobSink.enabled }}
            - name: BLOB_SINK_URL
              value: {{ include "aztec-network.blobSinkUrl" . }}
            {{- end }}
          ports:
            - containerPort: {{ .Values.bootNode.service.nodePort }}
            - containerPort: {{ .Values.bootNode.service.p2pTcpPort }}
            - containerPort: {{ .Values.bootNode.service.p2pUdpPort }}
              protocol: UDP
          resources:
            {{- toYaml .Values.bootNode.resources | nindent 12 }}
      volumes:
        - name: config
          emptyDir: {}
      {{- if .Values.storage.localSsd }}
        - name: boot-node-data
          emptyDir: {}
      {{ else }}
        - name: boot-node-data
          persistentVolumeClaim:
            claimName: boot-node-data
      {{- end }}
        - name: scripts
          configMap:
            name: {{ include "aztec-network.fullname" . }}-scripts
            defaultMode: 0755
        - name: scripts-output
          emptyDir: {}
---
# Headless service for StatefulSet DNS entries
apiVersion: v1
kind: Service
metadata:
  name: {{ include "aztec-network.fullname" . }}-boot-node
  labels:
    {{- include "aztec-network.labels" . | nindent 4 }}
    app: boot-node
spec:
  # If this is a public network, we want to expose the boot node as a LoadBalancer
  {{- if .Values.network.public }}
  type: LoadBalancer
  {{- if hasKey .Values.bootNode "fixedExternalIP" }}
  loadBalancerIP: {{ .Values.bootNode.fixedExternalIP }}
  {{- end}}
  {{- else }}
  type: ClusterIP
  clusterIP: None
  {{- end }}
  selector:
    {{- include "aztec-network.selectorLabels" . | nindent 4 }}
    app: boot-node
  ports:
    # External load balancers cannot handle mixed TCP/UDP ports, so we only expose the node port
    {{- if not .Values.network.public }}
    - port: {{ .Values.bootNode.service.p2pTcpPort }}
      name: p2p-tcp
    - port: {{ .Values.bootNode.service.p2pUdpPort }}
      name: p2p-udp
      protocol: UDP
    {{- end }}
    - port: {{ .Values.bootNode.service.nodePort }}
      name: node
---
{{- if hasKey .Values.bootNode "fixedExternalIP" }}
apiVersion: networking.gke.io/v1beta2
kind: ManagedCertificate
metadata:
  name: {{ include "aztec-network.fullname" . }}-boot-node-cert
spec:
  domains:
  - aztecprotocol.com
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ include "aztec-network.fullname" . }}-boot-node-ingress
  annotations:
    kubernetes.io/ingress.class: "gce"
    networking.gke.io/managed-certificates: {{ include "aztec-network.fullname" . }}-boot-node-cert
spec:
  rules:
  - host: aztecprotocol.com
    http:
      paths:
      - path: /*
        pathType: ImplementationSpecific
        backend:
          service:
            name: {{ include "aztec-network.fullname" . }}-boot-node
            port:
              number: {{ .Values.bootNode.service.nodePort }}
{{- end }}
{{- end }}