cresettings: add vault force empty OCR rounds gate (#1945)

Author: prashantkumar1982

pkg/settings/cresettings/README.md

@@ -38,6 +38,7 @@ flowchart
 %%        TODO GatewayVaultManagementEnabled
         VaultJWTAuthEnabled[/VaultJWTAuthEnabled\]:::gate
         VaultOrgIdAsSecretOwnerEnabled[/VaultOrgIdAsSecretOwnerEnabled\]:::gate
+        VaultForceEmptyOCRRounds[/VaultForceEmptyOCRRounds\]:::gate
     end
 
     subgraph HandleNodeMessage[gatewayHandler.HandleNodeMessage]

pkg/settings/cresettings/defaults.json

@@ -5,6 +5,7 @@
 	"GatewayVaultManagementEnabled": "true",
 	"VaultJWTAuthEnabled": "false",
 	"VaultOrgIdAsSecretOwnerEnabled": "false",
+	"VaultForceEmptyOCRRounds": "false",
 	"GatewayHTTPGlobalRate": "500rps:500",
 	"GatewayHTTPPerNodeRate": "100rps:100",
 	"TriggerRegistrationStatusUpdateTimeout": "0s",

pkg/settings/cresettings/defaults.toml

@@ -4,6 +4,7 @@ GatewayIncomingPayloadSizeLimit = '1mb'
 GatewayVaultManagementEnabled = 'true'
 VaultJWTAuthEnabled = 'false'
 VaultOrgIdAsSecretOwnerEnabled = 'false'
+VaultForceEmptyOCRRounds = 'false'
 GatewayHTTPGlobalRate = '500rps:500'
 GatewayHTTPPerNodeRate = '100rps:100'
 TriggerRegistrationStatusUpdateTimeout = '0s'

pkg/settings/cresettings/settings.go

@@ -58,6 +58,7 @@ var Default = Schema{
 	GatewayVaultManagementEnabled:          Bool(true),
 	VaultJWTAuthEnabled:                    Bool(false),
 	VaultOrgIdAsSecretOwnerEnabled:         Bool(false),
+	VaultForceEmptyOCRRounds:               Bool(false),
 	GatewayHTTPGlobalRate:                  Rate(rate.Limit(500), 500),
 	GatewayHTTPPerNodeRate:                 Rate(rate.Limit(100), 100),
 	TriggerRegistrationStatusUpdateTimeout: Duration(0 * time.Second),
@@ -232,6 +233,7 @@ type Schema struct {
 	GatewayVaultManagementEnabled          Setting[bool]
 	VaultJWTAuthEnabled                    Setting[bool]
 	VaultOrgIdAsSecretOwnerEnabled         Setting[bool]
+	VaultForceEmptyOCRRounds               Setting[bool]
 	GatewayHTTPGlobalRate                  Setting[config.Rate]
 	GatewayHTTPPerNodeRate                 Setting[config.Rate]
 	TriggerRegistrationStatusUpdateTimeout Setting[time.Duration]

pkg/settings/cresettings/settings_test.go

@@ -124,6 +124,7 @@ func TestSchema_Unmarshal(t *testing.T) {
 	assert.Equal(t, true, cfg.GatewayVaultManagementEnabled.DefaultValue)
 	assert.Equal(t, false, cfg.VaultJWTAuthEnabled.DefaultValue)
 	assert.Equal(t, false, cfg.VaultOrgIdAsSecretOwnerEnabled.DefaultValue)
+	assert.Equal(t, false, cfg.VaultForceEmptyOCRRounds.DefaultValue)
 	assert.Equal(t, 48*time.Hour, cfg.PerOrg.ZeroBalancePruningTimeout.DefaultValue)
 	assert.Equal(t, 99, cfg.PerOwner.WorkflowExecutionConcurrencyLimit.DefaultValue)
 	assert.Equal(t, 250*config.MByte, cfg.PerWorkflow.WASMMemoryLimit.DefaultValue)