validator.yaml

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: {{ include "aztec-network.fullname" . }}-validator
  labels:
    {{- include "aztec-network.labels" . | nindent 4 }}
spec:
  serviceName: {{ include "aztec-network.fullname" . }}-validator
  replicas: {{ .Values.validator.replicas }}
  podManagementPolicy: Parallel
  selector:
    matchLabels:
      {{- include "aztec-network.selectorLabels" . | nindent 6 }}
      app: validator
  {{- if not .Values.storage.localSsd }}
  volumeClaimTemplates:
    - metadata:
        name: validator-data
      spec:
        accessModes: [ "ReadWriteOnce" ]
        resources:
          requests:
            storage: {{ .Values.validator.storageSize }}
  {{- end }}
  template:
    metadata:
      labels:
        {{- include "aztec-network.selectorLabels" . | nindent 8 }}
        app: validator
    spec:
      {{- if .Values.network.gke }}
      nodeSelector:
        local-ssd: "{{ .Values.storage.localSsd }}"
        node-type: network
      {{- end }}

      {{- if .Values.network.public }}
      serviceAccountName: {{ include "aztec-network.fullname" . }}-node
      hostNetwork: true
      dnsPolicy: ClusterFirstWithHostNet
      {{- include "aztec-network.publicAntiAffinity" . | nindent 6 }}
      {{- end }}
      initContainers:
        {{- include "aztec-network.p2pSetupContainer" . | nindent 8 }}
        {{- include "aztec-network.serviceAddressSetupContainer" . | nindent 8 }}

        # Get the private key from the mnemonic - based on the pod replica index
        - name: get-private-key
          image: {{ .Values.images.foundry.image }}
          imagePullPolicy: {{ .Values.images.foundry.pullPolicy }}
          command:
            - "/bin/sh"
            - "-c"
            - |
              source /scripts/get-private-key.sh
          volumeMounts:
            - name: scripts
              mountPath: /scripts
            - name: config
              mountPath: /shared/config
          env:
            - name: KEY_INDEX_START
              value: {{ .Values.aztec.validatorKeyIndexStart | quote }}
            - name: MNEMONIC
              value: {{ .Values.aztec.l1DeploymentMnemonic }}
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name


        - name: wait-for-services
          {{- include "aztec-network.image" . | nindent 10 }}
          command:
            - /bin/bash
            - -c
            - |
              source /shared/config/service-addresses
              cat /shared/config/service-addresses
              {{- include "aztec-network.waitForEthereum" . | nindent 14 }}

              if [ "{{ .Values.validator.dynamicBootNode }}" = "true" ]; then
                echo "{{ include "aztec-network.pxeUrl" . }}" > /shared/pxe/pxe_url
              else
                until curl --silent --head --fail "${BOOT_NODE_HOST}/status" > /dev/null; do
                  echo "Waiting for boot node..."
                  sleep 5
                done
                echo "Boot node is ready!"
                echo "${BOOT_NODE_HOST}" > /shared/pxe/pxe_url
              fi
          volumeMounts:
            - name: pxe-url
              mountPath: /shared/pxe
            - name: scripts
              mountPath: /scripts
            - name: config
              mountPath: /shared/config


        - name: configure-validator-env
          {{- include "aztec-network.image" . | nindent 10 }}
          command:
            - "/bin/bash"
            - "-c"
            - |
              source /shared/config/service-addresses && \
              cp /scripts/configure-validator-env.sh /tmp/configure-validator-env.sh && \
              chmod +x /tmp/configure-validator-env.sh && \
              /tmp/configure-validator-env.sh "$(cat /shared/pxe/pxe_url)"
          volumeMounts:
            - name: contracts-env
              mountPath: /shared/contracts
            - name: pxe-url
              mountPath: /shared/pxe
            - name: scripts
              mountPath: /scripts
            - name: config
              mountPath: /shared/config
      containers:
        - name: validator
          {{- include "aztec-network.image" . | nindent 10 }}
          command:
            - "/bin/bash"
            - "-c"
            - |
              sleep 10 && \
              source /shared/contracts/contracts.env && \
              source /shared/p2p/p2p-addresses && \
              source /shared/config/service-addresses && \
              source /shared/config/keys.env && \
              env && \
              node --no-warnings /usr/src/yarn-project/aztec/dest/bin/index.js start --node --archiver --sequencer
          startupProbe:
            httpGet:
              path: /status
              port: {{ .Values.validator.service.nodePort }}
            failureThreshold: {{ .Values.validator.startupProbe.failureThreshold }}
            periodSeconds: {{ .Values.validator.startupProbe.periodSeconds }}
          livenessProbe:
            exec:
              command:
                - /bin/sh
                - -c
                - curl -fSs http://127.0.0.1:{{ .Values.validator.service.nodePort }}/status
            initialDelaySeconds: 30
            periodSeconds: 5
            timeoutSeconds: 30
            failureThreshold: 3
          volumeMounts:
            - name: contracts-env
              mountPath: /shared/contracts
            - name: p2p-addresses
              mountPath: /shared/p2p
            - name: config
              mountPath: /shared/config
            - name: validator-data
              mountPath: {{ .Values.validator.dataDir }}
          env:
            - name: K8S_POD_UID
              valueFrom:
                fieldRef:
                  fieldPath: metadata.uid
            - name: K8S_POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: OTEL_SERVICE_NAME
              value: validator
            - name: POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: K8S_NAMESPACE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: NODE_OPTIONS
              value: "--max-old-space-size={{ .Values.validator.maxOldSpaceSize}}"
            - name: AZTEC_PORT
              value: "{{ .Values.validator.service.nodePort }}"
            - name: LOG_LEVEL
              value: "{{ .Values.validator.logLevel }}"
            - name: LOG_JSON
              value: "1"
            - name: P2P_ENABLED
              value: "{{ .Values.validator.p2p.enabled }}"
            - name: VALIDATOR_DISABLED
              value: "{{ .Values.validator.validator.disabled }}"
            - name: VALIDATOR_REEXECUTE
              value: "{{ .Values.validator.validator.reexecute }}"
            - name: SEQ_MAX_SECONDS_BETWEEN_BLOCKS
              value: "{{ .Values.validator.sequencer.maxSecondsBetweenBlocks }}"
            - name: SEQ_MIN_TX_PER_BLOCK
              value: "{{ .Values.validator.sequencer.minTxsPerBlock }}"
            - name: SEQ_MAX_TX_PER_BLOCK
              value: "{{ .Values.validator.sequencer.maxTxsPerBlock }}"
            - name: SEQ_ENFORCE_TIME_TABLE
              value: "{{ .Values.validator.sequencer.enforceTimeTable }}"
            - name: ENFORCE_FEES
              value: "{{ .Values.validator.sequencer.enforceFees }}"
            - name: L1_CHAIN_ID
              value: "{{ .Values.ethereum.chainId }}"
            - name: OTEL_RESOURCE_ATTRIBUTES
              value: service.name={{ .Release.Name }},service.namespace={{ .Release.Namespace }},service.version={{ .Chart.AppVersion }},environment={{ .Values.environment | default "production" }}
            - name: ETHEREUM_SLOT_DURATION
              value: "{{ .Values.ethereum.blockTime }}"
            - name: AZTEC_SLOT_DURATION
              value: "{{ .Values.aztec.slotDuration }}"
            - name: AZTEC_EPOCH_DURATION
              value: "{{ .Values.aztec.epochDuration }}"
            - name: AZTEC_EPOCH_PROOF_CLAIM_WINDOW_IN_L2_SLOTS
              value: "{{ .Values.aztec.epochProofClaimWindow }}"
            - name: VALIDATOR_ATTESTATIONS_POLLING_INTERVAL_MS
              value: {{ .Values.validator.attestationPollingInterval | quote }}
            - name: ARCHIVER_POLLING_INTERVAL_MS
              value: {{ .Values.validator.archiverPollingInterval | quote }}
            - name: ARCHIVER_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.validator.viemPollingInterval | quote }}
            - name: L1_READER_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.validator.viemPollingInterval | quote }}
            - name: SEQ_VIEM_POLLING_INTERVAL_MS
              value: {{ .Values.validator.viemPollingInterval | quote }}
            - name: L1_FIXED_PRIORITY_FEE_PER_GAS
              value: {{ .Values.validator.l1FixedPriorityFeePerGas | quote }}
            - name: L1_GAS_LIMIT_BUFFER_PERCENTAGE
              value: {{ .Values.validator.l1GasLimitBufferPercentage | quote }}
            - name: L1_GAS_PRICE_MAX
              value: {{ .Values.validator.l1GasPriceMax | quote }}
            - name: DATA_DIRECTORY
              value: "{{ .Values.validator.dataDir }}"
            - name: DATA_STORE_MAP_SIZE_KB
              value: "{{ .Values.storage.dataStoreMapSize }}"
            - name: WS_DB_MAP_SIZE_KB
              value: "{{ .Values.storage.worldStateMapSize }}"
            - name: USE_GCLOUD_OBSERVABILITY
              value: "{{ .Values.telemetry.useGcloudObservability }}"
            - name: OTEL_EXCLUDE_METRICS
              value: "{{ .Values.telemetry.excludeMetrics }}"
            {{- if .Values.blobSink.enabled }}
            - name: BLOB_SINK_URL
              value: {{ include "aztec-network.blobSinkUrl" . }}
            {{- end }}
          ports:
            - containerPort: {{ .Values.validator.service.nodePort }}
            - containerPort: {{ .Values.validator.service.p2pTcpPort }}
            - containerPort: {{ .Values.validator.service.p2pUdpPort }}
              protocol: UDP
          resources:
            {{- toYaml .Values.validator.resources | nindent 12 }}
      volumes:
        - name: scripts
          configMap:
            name: {{ include "aztec-network.fullname" . }}-scripts
        - name: contracts-env
          emptyDir: {}
        - name: p2p-addresses
          emptyDir: {}
        - name: pxe-url
          emptyDir: {}
        - name: config
          emptyDir: {}
      {{- if .Values.storage.localSsd }}
        - name: validator-data
          emptyDir: {}
      {{ else }}
        - name: validator-data
          persistentVolumeClaim:
            claimName: validator-data
      {{- end }}
---
# If this is not a public network, create a headless service for StatefulSet DNS entries
{{ if not .Values.network.public }}
apiVersion: v1
kind: Service
metadata:
  name: {{ include "aztec-network.fullname" . }}-validator
  labels:
    {{- include "aztec-network.labels" . | nindent 4 }}
    app: validator
spec:
  clusterIP: None
  selector:
    {{- include "aztec-network.selectorLabels" . | nindent 4 }}
    app: validator
  ports:
    - port: {{ .Values.validator.service.p2pTcpPort }}
      name: p2p-tcp
      protocol: TCP
    - port: {{ .Values.validator.service.p2pUdpPort }}
      name: p2p-udp
      protocol: UDP
    - port: {{ .Values.validator.service.nodePort }}
      name: node
      protocol: TCP
{{ end }}