Update terraform deployment for verified signers

Author: jpraynaud

mithril-infra/main.dns.tf

@@ -13,7 +13,24 @@ resource "google_dns_record_set" "mithril-aggregator-endpoint" {
   rrdatas      = [google_compute_address.mithril-external-address.address]
 }
 
+resource "google_dns_record_set" "mithril-signer-endpoint" {
+  for_each = var.mithril_signers
+
+  name         = "mithril-signer-${each.key}.${google_dns_managed_zone.mithril-api-zone.dns_name}"
+  managed_zone = google_dns_managed_zone.mithril-api-zone.name
+  type         = "A"
+  ttl          = 300
+  rrdatas      = [google_compute_address.mithril-external-address.address]
+}
+
 locals {
   mithril_aggregator_host         = trimsuffix(google_dns_record_set.mithril-aggregator-endpoint.name, ".")
   mithril_aggregator_endpoint_url = format("https://%s/aggregator", local.mithril_aggregator_host)
+  mithril_signers_host = {
+    for key, signer in var.mithril_signers :
+    key => "mithril-signer-${key}.${trimsuffix(google_dns_managed_zone.mithril-api-zone.dns_name, ".")}"
+  }
+  mithril_signers_endpoint_url = [for key, signer in var.mithril_signers :
+    format("https://%s", "mithril-signer-${key}.${trimsuffix(google_dns_managed_zone.mithril-api-zone.dns_name, ".")}")
+  ]
 }

mithril-infra/mithril.bootstrap.tf

@@ -36,7 +36,7 @@ done
 echo "Startup script complete!"
 EOT
       ,
-      "chmod u+x /home/curry/tools/*.sh",
+      "find /home/curry/tools -name '*.sh' -type f | xargs chmod u+x",
       "rm -rf /home/curry/docker/cardano-configurations && git clone https://github.com/input-output-hk/cardano-configurations.git /home/curry/docker/cardano-configurations"
     ]
   }

mithril-infra/mithril.signer.tf

@@ -1,3 +1,6 @@
+locals {
+  mithril_signers_index = [for key, signer in var.mithril_signers : key]
+}
 resource "null_resource" "mithril_signer" {
   for_each = var.mithril_signers
 
@@ -22,6 +25,7 @@ resource "null_resource" "mithril_signer" {
       "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/cardano/db",
       "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/cardano/ipc",
       "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/cardano/pool",
+      "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/cardano/www",
       "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/mithril/stores",
       "mkdir -p /home/curry/data/${var.cardano_network}/mithril-signer-${each.key}/mithril/snapshots"
     ]
@@ -33,6 +37,8 @@ resource "null_resource" "mithril_signer" {
       "export PARTY_ID=${each.value.pool_id}",
       "export NETWORK=${var.cardano_network}",
       "export IMAGE_ID=${var.mithril_image_id}",
+      "export SIGNER_HOST=${local.mithril_signers_host[each.key]}",
+      "export SIGNER_WWW_PORT=`expr 8080 + ${index(local.mithril_signers_index, each.key) + 1}`",
       "export CURRENT_UID=$(id -u)",
       "export DOCKER_GID=$(getent group docker | cut -d: -f3)",
       "docker-compose -p $SIGNER_ID -f /home/curry/docker/docker-compose-signer-${each.value.type}.yaml --profile all up -d",

mithril-infra/output.tf

@@ -2,10 +2,14 @@ output "google_project" {
   value = local.google_project_id
 }
 
-output "aggregator_endpoint" {
+output "mithril_aggregator_endpoint" {
   value = local.mithril_aggregator_endpoint_url
 }
 
+output "mithril_signers_endpoint_url" {
+  value = local.mithril_signers_endpoint_url
+}
+
 output "storage_bucket" {
   value = google_storage_bucket.cloud_storage.name
 }