Skip to content

Commit c33c912

Browse files
committed
Added label consensus flag
1 parent b6e18bc commit c33c912

5 files changed

Lines changed: 48 additions & 42 deletions

File tree

pkg/settings/cresettings/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,7 @@ flowchart
4242
VaultBase64EncodingEnabled[/VaultBase64EncodingEnabled\]:::gate
4343
VaultForceEmptyOCRRounds[/VaultForceEmptyOCRRounds\]:::gate
4444
VaultOptimizationsEnabled[/VaultOptimizationsEnabled\]:::gate
45+
VaultGetSecretsShareLabelConsensusEnabled[/VaultGetSecretsShareLabelConsensusEnabled\]:::gate
4546
VaultOwnerAddressCanonicalizationEnabled[/VaultOwnerAddressCanonicalizationEnabled\]:::gate
4647
VaultSignedResponseRequestIDEnabled[/VaultSignedResponseRequestIDEnabled\]:::gate
4748
end

pkg/settings/cresettings/defaults.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
"VaultBase64EncodingEnabled": "false",
1010
"VaultForceEmptyOCRRounds": "false",
1111
"VaultOptimizationsEnabled": "false",
12+
"VaultGetSecretsShareLabelConsensusEnabled": "false",
1213
"VaultOwnerAddressCanonicalizationEnabled": "false",
1314
"VaultSignedResponseRequestIDEnabled": "false",
1415
"GatewayHTTPGlobalRate": "500rps:500",

pkg/settings/cresettings/defaults.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ PropagateOrgIDInRequestMetadata = 'false'
88
VaultBase64EncodingEnabled = 'false'
99
VaultForceEmptyOCRRounds = 'false'
1010
VaultOptimizationsEnabled = 'false'
11+
VaultGetSecretsShareLabelConsensusEnabled = 'false'
1112
VaultOwnerAddressCanonicalizationEnabled = 'false'
1213
VaultSignedResponseRequestIDEnabled = 'false'
1314
GatewayHTTPGlobalRate = '500rps:500'

pkg/settings/cresettings/settings.go

Lines changed: 44 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -58,24 +58,25 @@ var Default = Schema{
5858
GatewayVaultManagementEnabled: Bool(true),
5959
VaultJWTAuthEnabled: Bool(false),
6060
// Deprecated: retained for backwards compatibility; workflow owner identifies secret ownership.
61-
VaultOrgIdAsSecretOwnerEnabled: Bool(false),
62-
PropagateOrgIDInRequestMetadata: Bool(false),
63-
VaultBase64EncodingEnabled: Bool(false),
64-
VaultForceEmptyOCRRounds: Bool(false),
65-
VaultOptimizationsEnabled: Bool(false),
66-
VaultOwnerAddressCanonicalizationEnabled: Bool(false),
67-
VaultSignedResponseRequestIDEnabled: Bool(false),
68-
GatewayHTTPGlobalRate: Rate(rate.Limit(500), 500),
69-
GatewayHTTPPerNodeRate: Rate(rate.Limit(100), 100),
70-
GatewayConfidentialRelayGlobalRate: Rate(rate.Limit(50), 10),
71-
GatewayConfidentialRelayPerNodeRate: Rate(rate.Limit(10), 10),
72-
GatewayHTTPActionMtlsRequestRate: Rate(rate.Every(30*time.Second), 0),
73-
GatewayHTTPActionMtlsConcurrencyLimit: Int(50),
74-
TriggerRegistrationStatusUpdateTimeout: Duration(0 * time.Second),
75-
BaseTriggerRetryInterval: Duration(30 * time.Second),
76-
BaseTriggerMaxRetries: Int(20),
77-
BaseTriggerPruneAge: Duration(24 * time.Hour),
78-
BaseTriggerMaxSendsPerTick: Int(20),
61+
VaultOrgIdAsSecretOwnerEnabled: Bool(false),
62+
PropagateOrgIDInRequestMetadata: Bool(false),
63+
VaultBase64EncodingEnabled: Bool(false),
64+
VaultForceEmptyOCRRounds: Bool(false),
65+
VaultOptimizationsEnabled: Bool(false),
66+
VaultGetSecretsShareLabelConsensusEnabled: Bool(false),
67+
VaultOwnerAddressCanonicalizationEnabled: Bool(false),
68+
VaultSignedResponseRequestIDEnabled: Bool(false),
69+
GatewayHTTPGlobalRate: Rate(rate.Limit(500), 500),
70+
GatewayHTTPPerNodeRate: Rate(rate.Limit(100), 100),
71+
GatewayConfidentialRelayGlobalRate: Rate(rate.Limit(50), 10),
72+
GatewayConfidentialRelayPerNodeRate: Rate(rate.Limit(10), 10),
73+
GatewayHTTPActionMtlsRequestRate: Rate(rate.Every(30*time.Second), 0),
74+
GatewayHTTPActionMtlsConcurrencyLimit: Int(50),
75+
TriggerRegistrationStatusUpdateTimeout: Duration(0 * time.Second),
76+
BaseTriggerRetryInterval: Duration(30 * time.Second),
77+
BaseTriggerMaxRetries: Int(20),
78+
BaseTriggerPruneAge: Duration(24 * time.Hour),
79+
BaseTriggerMaxSendsPerTick: Int(20),
7980

8081
// DANGER(cedric): Be extremely careful changing these vault limits below as they act as a default value
8182
// used by the Vault OCR plugin -- changing these values could cause issues with the plugin during an image
@@ -270,25 +271,26 @@ var Default = Schema{
270271
}
271272

272273
type Schema struct {
273-
WorkflowLimit Setting[int] `unit:"{workflow}"`
274-
WorkflowExecutionConcurrencyLimit Setting[int] `unit:"{workflow}"`
275-
GatewayIncomingPayloadSizeLimit Setting[config.Size]
276-
GatewayVaultManagementEnabled Setting[bool]
277-
VaultJWTAuthEnabled Setting[bool]
278-
VaultOrgIdAsSecretOwnerEnabled Setting[bool] // Deprecated
279-
PropagateOrgIDInRequestMetadata Setting[bool]
280-
VaultBase64EncodingEnabled Setting[bool]
281-
VaultForceEmptyOCRRounds Setting[bool]
282-
VaultOptimizationsEnabled Setting[bool]
283-
VaultOwnerAddressCanonicalizationEnabled Setting[bool]
284-
VaultSignedResponseRequestIDEnabled Setting[bool]
285-
GatewayHTTPGlobalRate Setting[config.Rate]
286-
GatewayHTTPPerNodeRate Setting[config.Rate]
287-
GatewayConfidentialRelayGlobalRate Setting[config.Rate]
288-
GatewayConfidentialRelayPerNodeRate Setting[config.Rate]
289-
GatewayHTTPActionMtlsRequestRate Setting[config.Rate]
290-
GatewayHTTPActionMtlsConcurrencyLimit Setting[int] `unit:"{request}"`
291-
TriggerRegistrationStatusUpdateTimeout Setting[time.Duration]
274+
WorkflowLimit Setting[int] `unit:"{workflow}"`
275+
WorkflowExecutionConcurrencyLimit Setting[int] `unit:"{workflow}"`
276+
GatewayIncomingPayloadSizeLimit Setting[config.Size]
277+
GatewayVaultManagementEnabled Setting[bool]
278+
VaultJWTAuthEnabled Setting[bool]
279+
VaultOrgIdAsSecretOwnerEnabled Setting[bool] // Deprecated
280+
PropagateOrgIDInRequestMetadata Setting[bool]
281+
VaultBase64EncodingEnabled Setting[bool]
282+
VaultForceEmptyOCRRounds Setting[bool]
283+
VaultOptimizationsEnabled Setting[bool]
284+
VaultGetSecretsShareLabelConsensusEnabled Setting[bool]
285+
VaultOwnerAddressCanonicalizationEnabled Setting[bool]
286+
VaultSignedResponseRequestIDEnabled Setting[bool]
287+
GatewayHTTPGlobalRate Setting[config.Rate]
288+
GatewayHTTPPerNodeRate Setting[config.Rate]
289+
GatewayConfidentialRelayGlobalRate Setting[config.Rate]
290+
GatewayConfidentialRelayPerNodeRate Setting[config.Rate]
291+
GatewayHTTPActionMtlsRequestRate Setting[config.Rate]
292+
GatewayHTTPActionMtlsConcurrencyLimit Setting[int] `unit:"{request}"`
293+
TriggerRegistrationStatusUpdateTimeout Setting[time.Duration]
292294

293295
BaseTriggerRetryInterval Setting[time.Duration]
294296
BaseTriggerMaxRetries Setting[int] `unit:"{attempt}"`
@@ -380,12 +382,12 @@ type Workflows struct {
380382
Secrets secrets
381383
DONTime donTime
382384

383-
FeatureMultiTriggerExecutionIDsActiveAt Setting[config.Timestamp] // Deprecated
384-
FeatureMultiTriggerExecutionIDsActivePeriod Setting[Range[config.Timestamp]]
385+
FeatureMultiTriggerExecutionIDsActiveAt Setting[config.Timestamp] // Deprecated
386+
FeatureMultiTriggerExecutionIDsActivePeriod Setting[Range[config.Timestamp]]
385387
FeatureUseSingleDONTimeProviderPerExecutionActivePeriod Setting[Range[config.Timestamp]]
386-
FeatureChainCapabilityHashBasedOCRActivePeriod Setting[Range[config.Timestamp]]
387-
FeatureEVMWriteReportL1FeeActivePeriod Setting[Range[config.Timestamp]]
388-
FeatureAptosWriteReportBlockTimestampActivePeriod Setting[Range[config.Timestamp]]
388+
FeatureChainCapabilityHashBasedOCRActivePeriod Setting[Range[config.Timestamp]]
389+
FeatureEVMWriteReportL1FeeActivePeriod Setting[Range[config.Timestamp]]
390+
FeatureAptosWriteReportBlockTimestampActivePeriod Setting[Range[config.Timestamp]]
389391
}
390392

391393
type cronTrigger struct {

pkg/settings/cresettings/settings_test.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -135,6 +135,7 @@ func TestSchema_Unmarshal(t *testing.T) {
135135
assert.False(t, cfg.VaultBase64EncodingEnabled.DefaultValue)
136136
assert.False(t, cfg.VaultForceEmptyOCRRounds.DefaultValue)
137137
assert.False(t, cfg.VaultOptimizationsEnabled.DefaultValue)
138+
assert.False(t, cfg.VaultGetSecretsShareLabelConsensusEnabled.DefaultValue)
138139
assert.False(t, cfg.VaultOwnerAddressCanonicalizationEnabled.DefaultValue)
139140
assert.False(t, cfg.VaultSignedResponseRequestIDEnabled.DefaultValue)
140141
assert.Equal(t, config.Rate{Limit: rate.Limit(20), Burst: 7}, cfg.GatewayConfidentialRelayGlobalRate.DefaultValue)

0 commit comments

Comments
 (0)