sv_operator/sv_helm

[giscus[bot]]

sv_operator/sv_helm

https://docs.dev.sync.global/sv_operator/sv_helm.html

[simonletort-da]

Feedback from Kaiko (Stef):
It would be great to document the OIDC providers that have been tested: Auth0, Okta, Keycloak

maybe in https://docs.dev.sync.global/sv_operator/sv_helm.html#oidc-provider-requirements

[cathyjung-da]

@simonletort-da I've actually created a doc around Okta and Keycloak, and I'm currently waiting for @moritzkiefer-da to verify the steps (CC. @mikesjewett-da).

[cathyjung-da]

The document is now publicly available in the Community-Contributed Documentation section of the Splice doc site. Documentation updates are published alongside releases, which currently occur every two weeks and are propagated sequentially to DevNet, TestNet, and MainNet. There's no need to request access to the Google Doc.

[gyorgy-balazsi-da]

The following route is in the wrong place on the architecture diagram:

global-domain-<MIGRATION_ID>-cometbft.sv.<YOUR_HOSTNAME>:26<MIGRATION_ID>56 should be routed to port 26656 of service global-domain-<MIGRATION_ID>-cometbft-cometbft-p2p in the sv namespace using the TCP protocol.

It should be on the right side of the "CometBft" box.

[gyorgy-balazsi-da]

There is a mismatch between the hostname and URL conventions vs the splice-cluster-ingress-runbook helm chart, so a workaround is needed. See in the docs above:

The SV operators have decided to follow the following convention for all SV hostnames and URLs:
...
Note that the reference ingress charts provided below do not fully satisfy these requirements, as they omit the enumerator part of the hostname.

This is the workaround I have applied:

Step #1: I printed the template:

NAME_SERVICE_DOMAIN="cns"
  
helm template \
  oci://ghcr.io/digital-asset/decentralized-canton-sync/helm/splice-cluster-ingress-runbook \
  --version ${CHART_VERSION} \
  -f - <<EOF \
  > to-be-fixed-splice-cluster-ingress-runbook-manifest.yaml
cluster:
  hostname: "${YOUR_HOSTNAME}"
  svNamespace: "sv"
withSvIngress: true
spliceDomainNames:
  nameServiceDomain: "${NAME_SERVICE_DOMAIN}"
EOF

Step #2: In the cluster-ingress-runbook-manifest.yaml file, I changed the external URLs like this:
"sequencer-0.sv.sv2.scratch.support.network.canton.global" --> "sequencer-0.sv2.scratch.support.network.canton.global"

Step #3: Applied the fixed manifest with kubectl:

kubectl apply -f cluster-ingress-runbook-manifest.yaml