From 05652bdb41cf0dc573c224e065ef32b3b6e42b66 Mon Sep 17 00:00:00 2001 From: Stephan D Date: Tue, 11 Nov 2025 22:26:09 +0100 Subject: [PATCH] +bff --- .woodpecker/bff.yml | 74 ++++++++++++++ .woodpecker/chain_gateway.yml | 2 +- ci/prod/.env.runtime | 6 ++ ci/prod/compose/bff.dockerfile | 43 ++++++++ ci/prod/compose/bff.yml | 52 ++++++++++ ci/prod/scripts/deploy/bff.sh | 152 +++++++++++++++++++++++++++++ ci/scripts/bff/build-image.sh | 85 ++++++++++++++++ ci/scripts/bff/deploy.sh | 64 ++++++++++++ ci/scripts/chain_gateway/deploy.sh | 2 +- 9 files changed, 478 insertions(+), 2 deletions(-) create mode 100644 .woodpecker/bff.yml create mode 100644 ci/prod/compose/bff.dockerfile create mode 100644 ci/prod/compose/bff.yml create mode 100755 ci/prod/scripts/deploy/bff.sh create mode 100755 ci/scripts/bff/build-image.sh create mode 100755 ci/scripts/bff/deploy.sh diff --git a/.woodpecker/bff.yml b/.woodpecker/bff.yml new file mode 100644 index 0000000..19dbb7a --- /dev/null +++ b/.woodpecker/bff.yml @@ -0,0 +1,74 @@ +matrix: + include: + - BFF_IMAGE_PATH: bff/service + BFF_DOCKERFILE: ci/prod/compose/bff.dockerfile + BFF_MONGO_SECRET_PATH: sendico/db + BFF_API_SECRET_PATH: sendico/api/endpoint + BFF_ENV: prod + +when: + - event: push + branch: main + +steps: + - name: version + image: alpine:latest + commands: + - set -euo pipefail 2>/dev/null || set -eu + - apk add --no-cache git + - GIT_REV="$(git rev-parse --short HEAD)" + - BUILD_BRANCH="$(git rev-parse --abbrev-ref HEAD)" + - APP_V="$(cat version)" + - BUILD_DATE="$(date -u +%Y-%m-%dT%H:%M:%SZ)" + - BUILD_USER="${WOODPECKER_MACHINE:-woodpecker}" + - printf "GIT_REV=%s\nBUILD_BRANCH=%s\nAPP_V=%s\nBUILD_DATE=%s\nBUILD_USER=%s\n" \ + "$GIT_REV" "$BUILD_BRANCH" "$APP_V" "$BUILD_DATE" "$BUILD_USER" | tee .env.version + + - name: proto + image: golang:alpine + depends_on: [ version ] + commands: + - set -eu + - apk add --no-cache bash git build-base protoc protobuf-dev + - go install google.golang.org/protobuf/cmd/protoc-gen-go@latest + - go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest + - export PATH="$(go env GOPATH)/bin:$PATH" + - bash ci/scripts/proto/generate.sh + + - name: secrets + image: alpine:latest + depends_on: [ version ] + environment: + VAULT_ADDR: { from_secret: VAULT_ADDR } + VAULT_ROLE_ID: { from_secret: VAULT_APP_ROLE } + VAULT_SECRET_ID: { from_secret: VAULT_SECRET_ID } + commands: + - set -euo pipefail + - apk add --no-cache bash coreutils openssh-keygen curl sed python3 + - mkdir -p secrets + - ./ci/vlt kv_to_file kv ops/deploy/ssh_key private_b64 secrets/SSH_KEY.b64 600 + - base64 -d secrets/SSH_KEY.b64 > secrets/SSH_KEY + - chmod 600 secrets/SSH_KEY + - ssh-keygen -y -f secrets/SSH_KEY >/dev/null + - ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER + - ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD + + - name: build-image + image: gcr.io/kaniko-project/executor:debug + depends_on: [ proto, secrets ] + commands: + - sh ci/scripts/bff/build-image.sh + + - name: deploy + image: alpine:latest + depends_on: [ secrets, build-image ] + environment: + VAULT_ADDR: { from_secret: VAULT_ADDR } + VAULT_ROLE_ID: { from_secret: VAULT_APP_ROLE } + VAULT_SECRET_ID: { from_secret: VAULT_SECRET_ID } + commands: + - set -euo pipefail + - apk add --no-cache bash openssh-client rsync coreutils curl sed python3 + - mkdir -p /root/.ssh + - install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa + - sh ci/scripts/bff/deploy.sh diff --git a/.woodpecker/chain_gateway.yml b/.woodpecker/chain_gateway.yml index 16d9877..447c455 100644 --- a/.woodpecker/chain_gateway.yml +++ b/.woodpecker/chain_gateway.yml @@ -3,7 +3,7 @@ matrix: - CHAIN_GATEWAY_IMAGE_PATH: chain/gateway CHAIN_GATEWAY_DOCKERFILE: ci/prod/compose/chain_gateway.dockerfile CHAIN_GATEWAY_MONGO_SECRET_PATH: sendico/db - CHAIN_GATEWAY_RPC_SECRET_PATH: sendico/chain/gateway/rpc + CHAIN_GATEWAY_RPC_SECRET_PATH: sendico/chain/gateway CHAIN_GATEWAY_WALLET_SECRET_PATH: sendico/chain/gateway/wallet CHAIN_GATEWAY_VAULT_SECRET_PATH: sendico/chain/gateway/vault CHAIN_GATEWAY_ENV: prod diff --git a/ci/prod/.env.runtime b/ci/prod/.env.runtime index 2c435d7..6b5d0c4 100644 --- a/ci/prod/.env.runtime +++ b/ci/prod/.env.runtime @@ -105,6 +105,12 @@ NOTIFICATION_COMPOSE_PROJECT=sendico-notification NOTIFICATION_SERVICE_NAME=sendico_notification NOTIFICATION_HTTP_PORT=8081 +# BFF service +BFF_DIR=bff +BFF_COMPOSE_PROJECT=sendico-bff +BFF_SERVICE_NAME=sendico_bff +BFF_HTTP_PORT=8080 + # Chain gateway stack CHAIN_GATEWAY_DIR=chain_gateway CHAIN_GATEWAY_COMPOSE_PROJECT=sendico-chain-gateway diff --git a/ci/prod/compose/bff.dockerfile b/ci/prod/compose/bff.dockerfile new file mode 100644 index 0000000..e2343d5 --- /dev/null +++ b/ci/prod/compose/bff.dockerfile @@ -0,0 +1,43 @@ +# syntax=docker/dockerfile:1.7 + +ARG TARGETOS=linux +ARG TARGETARCH=amd64 + +FROM golang:alpine AS build +ARG APP_VERSION=dev +ARG GIT_REV=unknown +ARG BUILD_BRANCH=unknown +ARG BUILD_DATE=unknown +ARG BUILD_USER=ci +ENV GO111MODULE=on +ENV PATH="/go/bin:${PATH}" +WORKDIR /src +COPY . . +RUN apk add --no-cache bash git build-base protoc protobuf-dev \ + && go install google.golang.org/protobuf/cmd/protoc-gen-go@latest \ + && go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest \ + && bash ci/scripts/proto/generate.sh +WORKDIR /src/api/server +RUN --mount=type=cache,target=/root/.cache/go-build \ + --mount=type=cache,target=/go/pkg/mod \ + CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \ + go build -trimpath -ldflags "\ + -s -w \ + -X github.com/tech/sendico/server/internal/appversion.Version=${APP_VERSION} \ + -X github.com/tech/sendico/server/internal/appversion.Revision=${GIT_REV} \ + -X github.com/tech/sendico/server/internal/appversion.Branch=${BUILD_BRANCH} \ + -X github.com/tech/sendico/server/internal/appversion.BuildUser=${BUILD_USER} \ + -X github.com/tech/sendico/server/internal/appversion.BuildDate=${BUILD_DATE}" \ + -o /out/bff . + +FROM alpine:latest AS runtime +RUN apk add --no-cache ca-certificates tzdata wget +WORKDIR /app +COPY api/server/config.yml /app/config.yml +COPY api/server/assets /app/assets +COPY api/server/env /app/env +COPY api/pkg/auth/internal/casbin/models/auth.conf /app/env/permissions_model.conf +COPY --from=build /out/bff /app/bff +EXPOSE 8082 +ENTRYPOINT ["/app/bff"] +CMD ["--config.file", "/app/config.yml"] diff --git a/ci/prod/compose/bff.yml b/ci/prod/compose/bff.yml new file mode 100644 index 0000000..a50ad11 --- /dev/null +++ b/ci/prod/compose/bff.yml @@ -0,0 +1,52 @@ +# Compose v2 - BFF (api/server) + +x-common-env: &common-env + env_file: + - ../env/.env.runtime + - ../env/.env.version + +networks: + sendico-net: + external: true + name: sendico-net + +services: + sendico_bff: + <<: *common-env + container_name: sendico-bff + restart: unless-stopped + image: ${REGISTRY_URL}/bff/service:${APP_V} + pull_policy: always + environment: + AMPLI_ENVIRONMENT: ${AMPLI_ENVIRONMENT} + API_PROTOCOL: ${API_PROTOCOL} + SERVICE_HOST: ${SERVICE_HOST} + API_ENDPOINT: ${API_ENDPOINT} + API_ENDPOINT_SECRET: ${API_ENDPOINT_SECRET} + WS_ENDPOINT: ${WS_ENDPOINT} + NATS_URL: ${NATS_URL} + NATS_HOST: ${NATS_HOST} + NATS_PORT: ${NATS_PORT} + NATS_USER: ${NATS_USER} + NATS_PASSWORD: ${NATS_PASSWORD} + MONGO_HOST: ${MONGO_HOST} + MONGO_PORT: ${MONGO_PORT} + MONGO_DATABASE: ${MONGO_DATABASE} + MONGO_USER: ${MONGO_USER} + MONGO_PASSWORD: ${MONGO_PASSWORD} + MONGO_AUTH_SOURCE: ${MONGO_AUTH_SOURCE} + MONGO_REPLICA_SET: ${MONGO_REPLICA_SET} + PERMISSION_MODEL: ${PERMISSION_MODEL} + PERMISSION_COLLECTION: ${PERMISSION_COLLECTION} + PERMISSION_TIMEOUT: ${PERMISSION_TIMEOUT} + PERMISSION_IS_FILTERED: ${PERMISSION_IS_FILTERED} + ports: + - "0.0.0.0:${BFF_HTTP_PORT}:8081" + healthcheck: + test: ["CMD-SHELL","wget -qO- http://localhost:8081/health | grep -q '\"status\":\"ok\"'"] + interval: 30s + timeout: 10s + retries: 3 + start_period: 60s + networks: + - sendico-net diff --git a/ci/prod/scripts/deploy/bff.sh b/ci/prod/scripts/deploy/bff.sh new file mode 100755 index 0000000..8d1ac70 --- /dev/null +++ b/ci/prod/scripts/deploy/bff.sh @@ -0,0 +1,152 @@ +#!/usr/bin/env bash +set -euo pipefail +[[ "${DEBUG_DEPLOY:-0}" = "1" ]] && set -x +trap 'echo "[deploy-bff] error at line $LINENO" >&2' ERR + +: "${REMOTE_BASE:?missing REMOTE_BASE}" +: "${SSH_USER:?missing SSH_USER}" +: "${SSH_HOST:?missing SSH_HOST}" +: "${BFF_DIR:?missing BFF_DIR}" +: "${BFF_COMPOSE_PROJECT:?missing BFF_COMPOSE_PROJECT}" +: "${BFF_SERVICE_NAME:?missing BFF_SERVICE_NAME}" + +REMOTE_DIR="${REMOTE_BASE%/}/${BFF_DIR}" +REMOTE_TARGET="${SSH_USER}@${SSH_HOST}" +COMPOSE_FILE="bff.yml" +SERVICE_NAMES="${BFF_SERVICE_NAME}" + +REQUIRED_SECRETS=( + MONGO_USER + MONGO_PASSWORD + API_ENDPOINT_SECRET + NATS_USER + NATS_PASSWORD + NATS_URL +) + +for var in "${REQUIRED_SECRETS[@]}"; do + if [[ -z "${!var:-}" ]]; then + echo "missing required secret env: ${var}" >&2 + exit 65 + fi +done + +if [[ ! -s .env.version ]]; then + echo ".env.version is missing; run version step first" >&2 + exit 66 +fi + +b64enc() { + printf '%s' "$1" | base64 | tr -d '\n' +} + +MONGO_USER_B64="$(b64enc "${MONGO_USER}")" +MONGO_PASSWORD_B64="$(b64enc "${MONGO_PASSWORD}")" +API_ENDPOINT_SECRET_B64="$(b64enc "${API_ENDPOINT_SECRET}")" +NATS_USER_B64="$(b64enc "${NATS_USER}")" +NATS_PASSWORD_B64="$(b64enc "${NATS_PASSWORD}")" +NATS_URL_B64="$(b64enc "${NATS_URL}")" + +SSH_OPTS=( + -i /root/.ssh/id_rsa + -o StrictHostKeyChecking=no + -o UserKnownHostsFile=/dev/null + -o LogLevel=ERROR + -q +) +if [[ "${DEBUG_DEPLOY:-0}" = "1" ]]; then + SSH_OPTS=("${SSH_OPTS[@]/-q/}" -vv) +fi + +RSYNC_FLAGS=(-az --delete) +[[ "${DEBUG_DEPLOY:-0}" = "1" ]] && RSYNC_FLAGS=(-avz --delete) + +ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}" + +rsync "${RSYNC_FLAGS[@]}" -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/" +rsync "${RSYNC_FLAGS[@]}" -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime" +rsync "${RSYNC_FLAGS[@]}" -e "ssh ${SSH_OPTS[*]}" .env.version "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.version" + +SERVICES_LINE="${SERVICE_NAMES}" + +ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" \ + REMOTE_DIR="$REMOTE_DIR" \ + COMPOSE_FILE="$COMPOSE_FILE" \ + COMPOSE_PROJECT="$BFF_COMPOSE_PROJECT" \ + SERVICES_LINE="$SERVICES_LINE" \ + MONGO_USER_B64="$MONGO_USER_B64" \ + MONGO_PASSWORD_B64="$MONGO_PASSWORD_B64" \ + API_ENDPOINT_SECRET_B64="$API_ENDPOINT_SECRET_B64" \ + NATS_USER_B64="$NATS_USER_B64" \ + NATS_PASSWORD_B64="$NATS_PASSWORD_B64" \ + NATS_URL_B64="$NATS_URL_B64" \ + bash -s <<'EOSSH' +set -euo pipefail +cd "${REMOTE_DIR}/compose" +set -a +. ../env/.env.runtime +load_kv_file() { + local file="$1" + while IFS= read -r line || [ -n "$line" ]; do + case "$line" in + ''|\#*) continue ;; + esac + if printf '%s' "$line" | grep -Eq '^[[:alpha:]_][[:alnum:]_]*='; then + local key="${line%%=*}" + local value="${line#*=}" + key="$(printf '%s' "$key" | tr -d '[:space:]')" + value="${value#"${value%%[![:space:]]*}"}" + value="${value%"${value##*[![:space:]]}"}" + if [[ -n "$key" ]]; then + export "$key=$value" + fi + fi + done <"$file" +} +load_kv_file ../env/.env.version +set +a + +if base64 -d >/dev/null 2>&1 <<<'AA=='; then + BASE64_DECODE_FLAG='-d' +else + BASE64_DECODE_FLAG='--decode' +fi + +decode_b64() { + val="$1" + if [[ -z "$val" ]]; then + printf '' + return + fi + printf '%s' "$val" | base64 "${BASE64_DECODE_FLAG}" +} + +MONGO_USER="$(decode_b64 "$MONGO_USER_B64")" +MONGO_PASSWORD="$(decode_b64 "$MONGO_PASSWORD_B64")" +API_ENDPOINT_SECRET="$(decode_b64 "$API_ENDPOINT_SECRET_B64")" +NATS_USER="$(decode_b64 "$NATS_USER_B64")" +NATS_PASSWORD="$(decode_b64 "$NATS_PASSWORD_B64")" +NATS_URL="$(decode_b64 "$NATS_URL_B64")" + +export MONGO_USER MONGO_PASSWORD API_ENDPOINT_SECRET +export NATS_USER NATS_PASSWORD NATS_URL +COMPOSE_PROJECT_NAME="$COMPOSE_PROJECT" +export COMPOSE_PROJECT_NAME +read -r -a SERVICES <<<"${SERVICES_LINE}" + +pull_cmd=(docker compose -f "$COMPOSE_FILE" pull) +up_cmd=(docker compose -f "$COMPOSE_FILE" up -d --remove-orphans) +ps_cmd=(docker compose -f "$COMPOSE_FILE" ps) +if [[ "${#SERVICES[@]}" -gt 0 ]]; then + pull_cmd+=("${SERVICES[@]}") + up_cmd+=("${SERVICES[@]}") + ps_cmd+=("${SERVICES[@]}") +fi + +"${pull_cmd[@]}" +"${up_cmd[@]}" +"${ps_cmd[@]}" + +date -Is > .last_deploy +logger -t "deploy-${COMPOSE_PROJECT_NAME}" "${COMPOSE_PROJECT_NAME} deployed at $(date -Is) in ${REMOTE_DIR}" +EOSSH diff --git a/ci/scripts/bff/build-image.sh b/ci/scripts/bff/build-image.sh new file mode 100755 index 0000000..7b9e074 --- /dev/null +++ b/ci/scripts/bff/build-image.sh @@ -0,0 +1,85 @@ +#!/bin/sh +set -eu + +if ! set -o pipefail 2>/dev/null; then + : +fi + +REPO_ROOT="$(cd "$(dirname "$0")/../../.." && pwd)" +cd "${REPO_ROOT}" + +sh ci/scripts/common/ensure_env_version.sh + +normalize_env_file() { + file="$1" + tmp="${file}.tmp.$$" + tr -d '\r' <"$file" >"$tmp" + mv "$tmp" "$file" +} + +load_env_file() { + file="$1" + while IFS= read -r line || [ -n "$line" ]; do + case "$line" in + ''|\#*) continue ;; + esac + key="${line%%=*}" + value="${line#*=}" + key="$(printf '%s' "$key" | tr -d '[:space:]')" + value="${value#"${value%%[![:space:]]*}"}" + value="${value%"${value##*[![:space:]]}"}" + export "$key=$value" + done <"$file" +} + +BFF_ENV_NAME="${BFF_ENV:-prod}" +RUNTIME_ENV_FILE="./ci/${BFF_ENV_NAME}/.env.runtime" + +if [ ! -f "${RUNTIME_ENV_FILE}" ]; then + echo "[bff-build] runtime env file not found: ${RUNTIME_ENV_FILE}" >&2 + exit 1 +fi + +normalize_env_file "${RUNTIME_ENV_FILE}" +normalize_env_file ./.env.version + +load_env_file "${RUNTIME_ENV_FILE}" +load_env_file ./.env.version + +REGISTRY_URL="${REGISTRY_URL:?missing REGISTRY_URL}" +APP_V="${APP_V:?missing APP_V}" +BFF_DOCKERFILE="${BFF_DOCKERFILE:?missing BFF_DOCKERFILE}" +BFF_IMAGE_PATH="${BFF_IMAGE_PATH:?missing BFF_IMAGE_PATH}" + +REGISTRY_HOST="${REGISTRY_URL#http://}" +REGISTRY_HOST="${REGISTRY_HOST#https://}" +REGISTRY_USER="$(cat secrets/REGISTRY_USER)" +REGISTRY_PASSWORD="$(cat secrets/REGISTRY_PASSWORD)" +: "${REGISTRY_USER:?missing registry user}" +: "${REGISTRY_PASSWORD:?missing registry password}" + +mkdir -p /kaniko/.docker +AUTH_B64="$(printf '%s:%s' "$REGISTRY_USER" "$REGISTRY_PASSWORD" | base64 | tr -d '\n')" +cat </kaniko/.docker/config.json +{ + "auths": { + "https://${REGISTRY_HOST}": { "auth": "${AUTH_B64}" } + } +} +EOF + +BUILD_CONTEXT="${BFF_BUILD_CONTEXT:-${WOODPECKER_WORKSPACE:-${CI_WORKSPACE:-${PWD:-/workspace}}}}" +if [ ! -d "${BUILD_CONTEXT}" ]; then + BUILD_CONTEXT="/workspace" +fi + +/kaniko/executor \ + --context "${BUILD_CONTEXT}" \ + --dockerfile "${BFF_DOCKERFILE}" \ + --destination "${REGISTRY_URL}/${BFF_IMAGE_PATH}:${APP_V}" \ + --build-arg APP_VERSION="${APP_V}" \ + --build-arg GIT_REV="${GIT_REV}" \ + --build-arg BUILD_BRANCH="${BUILD_BRANCH}" \ + --build-arg BUILD_DATE="${BUILD_DATE}" \ + --build-arg BUILD_USER="${BUILD_USER}" \ + --single-snapshot diff --git a/ci/scripts/bff/deploy.sh b/ci/scripts/bff/deploy.sh new file mode 100755 index 0000000..b5912bd --- /dev/null +++ b/ci/scripts/bff/deploy.sh @@ -0,0 +1,64 @@ +#!/bin/sh +set -eu + +if ! set -o pipefail 2>/dev/null; then + : +fi + +REPO_ROOT="$(cd "$(dirname "$0")/../../.." && pwd)" +cd "${REPO_ROOT}" + +sh ci/scripts/common/ensure_env_version.sh + +normalize_env_file() { + file="$1" + tmp="${file}.tmp.$$" + tr -d '\r' <"$file" >"$tmp" + mv "$tmp" "$file" +} + +load_env_file() { + file="$1" + while IFS= read -r line || [ -n "$line" ]; do + case "$line" in + ''|\#*) continue ;; + esac + key="${line%%=*}" + value="${line#*=}" + key="$(printf '%s' "$key" | tr -d '[:space:]')" + value="${value#"${value%%[![:space:]]*}"}" + value="${value%"${value##*[![:space:]]}"}" + export "$key=$value" + done <"$file" +} + +BFF_ENV_NAME="${BFF_ENV:-prod}" +RUNTIME_ENV_FILE="./ci/${BFF_ENV_NAME}/.env.runtime" + +if [ ! -f "${RUNTIME_ENV_FILE}" ]; then + echo "[bff-deploy] runtime env file not found: ${RUNTIME_ENV_FILE}" >&2 + exit 1 +fi + +normalize_env_file "${RUNTIME_ENV_FILE}" +normalize_env_file ./.env.version + +load_env_file "${RUNTIME_ENV_FILE}" +load_env_file ./.env.version + +BFF_MONGO_SECRET_PATH="${BFF_MONGO_SECRET_PATH:?missing BFF_MONGO_SECRET_PATH}" +BFF_API_SECRET_PATH="${BFF_API_SECRET_PATH:?missing BFF_API_SECRET_PATH}" +: "${NATS_HOST:?missing NATS_HOST}" +: "${NATS_PORT:?missing NATS_PORT}" + +export MONGO_USER="$(./ci/vlt kv_get kv "${BFF_MONGO_SECRET_PATH}" user)" +export MONGO_PASSWORD="$(./ci/vlt kv_get kv "${BFF_MONGO_SECRET_PATH}" password)" + +export API_ENDPOINT_SECRET="$(./ci/vlt kv_get kv "${BFF_API_SECRET_PATH}" secret)" + +export NATS_USER="$(./ci/vlt kv_get kv sendico/nats user)" +export NATS_PASSWORD="$(./ci/vlt kv_get kv sendico/nats password)" +export NATS_URL="nats://${NATS_USER}:${NATS_PASSWORD}@${NATS_HOST}:${NATS_PORT}" + +bash ci/prod/scripts/bootstrap/network.sh +bash ci/prod/scripts/deploy/bff.sh diff --git a/ci/scripts/chain_gateway/deploy.sh b/ci/scripts/chain_gateway/deploy.sh index 7af2b1a..f3d701b 100755 --- a/ci/scripts/chain_gateway/deploy.sh +++ b/ci/scripts/chain_gateway/deploy.sh @@ -56,7 +56,7 @@ CHAIN_GATEWAY_VAULT_SECRET_PATH="${CHAIN_GATEWAY_VAULT_SECRET_PATH:?missing CHAI export CHAIN_GATEWAY_MONGO_USER="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_MONGO_SECRET_PATH}" user)" export CHAIN_GATEWAY_MONGO_PASSWORD="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_MONGO_SECRET_PATH}" password)" -export CHAIN_GATEWAY_ARBITRUM_RPC_URL="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_RPC_SECRET_PATH}" rpc_url)" +export CHAIN_GATEWAY_ARBITRUM_RPC_URL="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_RPC_SECRET_PATH}" arbitrum_rpc_url)" export CHAIN_GATEWAY_SERVICE_WALLET_KEY="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_WALLET_SECRET_PATH}" private_key)" export CHAIN_GATEWAY_SERVICE_WALLET_ADDRESS="$(./ci/vlt kv_get kv "${CHAIN_GATEWAY_WALLET_SECRET_PATH}" address || true)"