feat(chart): create helm chart for GRPC prover service

charts/prover-service/.helmignore

@@ -0,0 +1,5 @@
+*.gz
+*.tar
+*.tar.gz
+tmp/
+temp/

charts/prover-service/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: prover-service
+description: A Helm chart for Kubernetes to deploy the GRPC Prover Service application
+type: application
+version: 0.0.1
+appVersion: 0.0.1

charts/prover-service/templates/_helpers.tpl

@@ -0,0 +1,32 @@
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "service.fullname" -}}
+prover-service
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "service.labels" -}}
+app.kubernetes.io/name: {{ include "service.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/version: {{ .Chart.AppVersion }}
+app.kubernetes.io/managed-by: Helm
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "service.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Selector labels
+*/}}
+{{- define "service.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "service.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}

charts/prover-service/templates/deployment.yaml

@@ -0,0 +1,25 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "service.fullname" . }}
+  labels:
+    {{- include "service.labels" . | nindent 4 }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      {{- include "service.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "service.selectorLabels" . | nindent 8 }}
+    spec:
+      containers:
+        - name: {{ .Chart.Name }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          envFrom:
+            - secretRef:
+                name: {{ if .Values.useExistingSecrets }}{{ .Values.existingSecretName }}{{ else }}{{ include "service.fullname" . }}{{ end }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}

charts/prover-service/templates/secret.yaml

@@ -0,0 +1,9 @@
+{{- if not .Values.useExistingSecrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "service.fullname" . }}
+type: Opaque
+data:
+  PRIVATE_KEY: {{ .Values.secrets.privateKey | b64enc }}
+{{- end }}

charts/prover-service/values.yaml

@@ -0,0 +1,21 @@
+replicaCount: 1
+
+image:
+  repository: ghcr.io/galxe/galxe-raffle/prover-service
+  pullPolicy: IfNotPresent
+  tag: "latest"
+
+resources:
+  limits:
+    cpu: 100m
+    memory: 128Mi
+  requests:
+    cpu: 100m
+    memory: 128Mi
+
+useExistingSecrets: false
+existingSecretName: ""
+
+# Only used if useExistingSecrets is false
+secrets:
+  privateKey: ""

prover-service/src/bin/server.rs

@@ -17,7 +17,8 @@ struct Args {
     port: u16,
 
     /// Private key of the prover (must be allowlisted by the prover network for now)
-    #[arg(long)]
+    /// Can be provided via PRIVATE_KEY environment variable
+    #[arg(long, env = "PRIVATE_KEY")]
     private_key: String,
 
     /// Path to the ELF file