Add release v0.15.0

charts/celestia-app/README.md

@@ -1,6 +1,6 @@
 # celestia-app
 
-![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![AppVersion: v1.11.0](https://img.shields.io/badge/AppVersion-v1.11.0-informational?style=flat-square)
+![Version: 0.1.2](https://img.shields.io/badge/Version-0.1.2-informational?style=flat-square) ![AppVersion: v1.11.0](https://img.shields.io/badge/AppVersion-v1.11.0-informational?style=flat-square)
 
 Celestia App
 

charts/celestia-node/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.20.2
-digest: sha256:35d895f873f86ebff35e439bcf9da34c42a78c4db2e0e179bfb4014a2a0e2e10
-generated: "2024-06-13T11:08:30.71548+02:00"
+  version: 2.21.0
+digest: sha256:aad727fb6bd333a7ebb22f06f1edcb53349acdbffaa1baffa0266d9a33162dbd
+generated: "2024-08-08T12:00:46.778208+02:00"

charts/celestia-node/Chart.yaml

@@ -2,7 +2,7 @@ annotations:
   category: celestia
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: v0.14.1
+appVersion: v0.15.0
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
@@ -21,4 +21,4 @@ maintainers:
 name: celestia-node
 sources:
   - https://github.com/celestiaorg/celestia-node
-version: 0.1.4
+version: 0.2.0

charts/celestia-node/templates/configmap-address.yaml

@@ -9,4 +9,4 @@ metadata:
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 data:
-  address: {{ .Values.node.settings.address }}
+  {{ .Values.node.settings.node_id }}.address: {{ .Values.node.settings.address }}

charts/celestia-node/templates/configmap-bridge.yaml

@@ -19,9 +19,8 @@ data:
       RPCPort = "{{ .Values.node.config.bridge.configtoml.Core.RPCPort }}"
       GRPCPort = "{{ .Values.node.config.bridge.configtoml.Core.GRPCPort }}"
     [State]
-      KeyringAccName = "{{ .Values.node.config.bridge.configtoml.State.KeyringAccName }}"
-      KeyringBackend = "{{ .Values.node.config.bridge.configtoml.State.KeyringBackend }}"
-      GranterAddress = {{ .Values.node.config.bridge.configtoml.State.GranterAddress }}
+      DefaultKeyName = "{{ .Values.node.config.bridge.configtoml.State.DefaultKeyName }}"
+      DefaultBackendName = "{{ .Values.node.config.bridge.configtoml.State.DefaultBackendName }}"
     [P2P]
       ListenAddresses = [{{ range $index, $element := .Values.node.config.bridge.configtoml.P2P.ListenAddresses }}{{ if $index }}, {{ end }}"{{ $element }}"{{ end }}]
       AnnounceAddresses = {{ .Values.node.config.bridge.configtoml.P2P.AnnounceAddresses }}

charts/celestia-node/templates/configmap-full.yaml

@@ -19,9 +19,8 @@ data:
       RPCPort = "{{ .Values.node.config.full.configtoml.Core.RPCPort }}"
       GRPCPort = "{{ .Values.node.config.full.configtoml.Core.GRPCPort }}"
     [State]
-      KeyringAccName = "{{ .Values.node.config.full.configtoml.State.KeyringAccName }}"
-      KeyringBackend = "{{ .Values.node.config.full.configtoml.State.KeyringBackend }}"
-      GranterAddress = {{ .Values.node.config.full.configtoml.State.GranterAddress }}
+      DefaultKeyName = "{{ .Values.node.config.full.configtoml.State.DefaultKeyName }}"
+      DefaultBackendName = "{{ .Values.node.config.full.configtoml.State.DefaultBackendName }}"
     [P2P]
       ListenAddresses = [{{ range $index, $element := .Values.node.config.full.configtoml.P2P.ListenAddresses }}{{ if $index }}, {{ end }}"{{ $element }}"{{ end }}]
       AnnounceAddresses = {{ .Values.node.config.full.configtoml.P2P.AnnounceAddresses }}

charts/celestia-node/templates/configmap-light.yaml

@@ -19,9 +19,8 @@ data:
       RPCPort = "{{ .Values.node.config.light.configtoml.Core.RPCPort }}"
       GRPCPort = "{{ .Values.node.config.light.configtoml.Core.GRPCPort }}"
     [State]
-      KeyringAccName = "{{ .Values.node.config.light.configtoml.State.KeyringAccName }}"
-      KeyringBackend = "{{ .Values.node.config.light.configtoml.State.KeyringBackend }}"
-      GranterAddress = {{ .Values.node.config.light.configtoml.State.GranterAddress }}
+      DefaultKeyName = "{{ .Values.node.config.light.configtoml.State.DefaultKeyName }}"
+      DefaultBackendName = "{{ .Values.node.config.light.configtoml.State.DefaultBackendName }}"
     [P2P]
       ListenAddresses = [{{ range $index, $element := .Values.node.config.light.configtoml.P2P.ListenAddresses }}{{ if $index }}, {{ end }}"{{ $element }}"{{ end }}]
       AnnounceAddresses = {{ .Values.node.config.light.configtoml.P2P.AnnounceAddresses }}
@@ -63,6 +62,8 @@ data:
         PeerCooldown = "{{ .Values.node.config.light.configtoml.Share.PeerManagerParams.PeerCooldown }}"
         GcInterval = "{{ .Values.node.config.light.configtoml.Share.PeerManagerParams.GcInterval }}"
         EnableBlackListing = {{ .Values.node.config.light.configtoml.Share.PeerManagerParams.EnableBlackListing }}
+      [Share.LightAvailability]
+        SampleAmount = {{ printf "%.0f" .Values.node.config.light.configtoml.Share.LightAvailability.SampleAmount }}
       [Share.Discovery]
         PeersLimit = {{ printf "%.0f" .Values.node.config.light.configtoml.Share.Discovery.PeersLimit }}
         AdvertiseInterval = "{{ .Values.node.config.light.configtoml.Share.Discovery.AdvertiseInterval }}"

charts/celestia-node/templates/service.yaml

@@ -57,6 +57,19 @@ spec:
       nodePort: null
       {{- end }}
     {{- end }}
+    {{- if .Values.service.external.ports.ws }}
+    - name: ws
+      port: {{ .Values.service.external.ports.ws }}
+      {{- if not (eq .Values.service.external.ports.ws .Values.node.containerPorts.ws) }}
+      targetPort: {{ .Values.node.containerPorts.ws }}
+      {{- end }}
+      protocol: TCP
+      {{- if and (or (eq .Values.service.external.type "NodePort") (eq .Values.service.external.type "LoadBalancer")) (not (empty .Values.service.external.nodePorts.ws)) }}
+      nodePort: {{ .Values.service.external.nodePorts.ws }}
+      {{- else if eq .Values.service.external.type "ClusterIP" }}
+      nodePort: null
+      {{- end }}
+    {{- end }}
     {{- if .Values.service.external.ports.rest }}
     - name: rest
       port: {{ .Values.service.external.ports.rest }}
@@ -151,6 +164,12 @@ spec:
       port: {{ .Values.service.internal.ports.p2p }}
       targetPort: {{ .Values.node.containerPorts.p2p }}
       protocol: UDP
+    - name: ws
+      port: {{ .Values.service.internal.ports.ws }}
+      {{- if not (eq .Values.service.internal.ports.ws .Values.node.containerPorts.ws) }}
+      targetPort: {{ .Values.node.containerPorts.ws }}
+      {{- end }}
+      protocol: TCP
     - name: rest
       port: {{ .Values.service.internal.ports.rest }}
       {{- if not (eq .Values.service.internal.ports.rest .Values.node.containerPorts.rest) }}

charts/celestia-node/templates/statefulset.yaml

@@ -116,7 +116,10 @@ spec:
           command:
             - "sh"
             - "-c"
-            - "chown -R {{ .Values.node.containerSecurityContext.runAsUser }}:{{ .Values.node.containerSecurityContext.runAsGroup }} /home"
+            - |
+              set -ex
+              chown -R {{ .Values.node.containerSecurityContext.runAsUser }}:{{ .Values.node.containerSecurityContext.runAsGroup }} /home
+              ls -ltra /home
           volumeMounts:
             - name: home-dir # This is needed so that the process has permissions to create files in the home directory
               mountPath: /home
@@ -127,18 +130,22 @@ spec:
             - "sh"
             - "-c"
             - |
-              mkdir -p /keys-volume/keyring-test && \
-              cp /keys/* /keys-volume/ && \
-              cp /address/* /keys-volume/keyring-test/ && \
-              cp /celes-key/* /keys-volume/keyring-test/ && \
-              chown -R {{ .Values.node.containerSecurityContext.runAsUser }}:{{ .Values.node.containerSecurityContext.runAsGroup }} /keys-volume/* /keys-volume/keyring-test/ && \
-              find /keys-volume/ -type f -exec chmod 0600 {} \;
+              set -ex
+              mkdir -p /keys-volume/keyring-test
+              cp /keys/* /keys-volume/
+              cp /address/* /keys-volume/keyring-test/
+              cp /celes-key/* /keys-volume/keyring-test/
+              printf "%s" "$(cat /celes-key/my_celes_key.info)" > /keys-volume/keyring-test/my_celes_key.info
+              rm /keys-volume/my_celes_key.info
+              chown -R {{ .Values.node.containerSecurityContext.runAsUser }}:{{ .Values.node.containerSecurityContext.runAsGroup }} /keys-volume/* /keys-volume/keyring-test/
+              find /keys-volume/ -type f -exec chmod 0400 {} \;
           volumeMounts:
             - name: keys
               mountPath: /keys
               readOnly: true
             - name: address
-              mountPath: /address
+              mountPath: /address/{{ .Values.node.settings.node_id }}.address
+              subPath: {{ .Values.node.settings.node_id }}.address
               readOnly: true
             - name: celes-key
               mountPath: /celes-key
@@ -168,6 +175,10 @@ spec:
           env:
             - name: CELESTIA_HOME
               value: {{ .Values.node.settings.home }}
+            {{- if .Values.node.settings.ws.tls.enabled }}
+            - name: CELESTIA_TLS_PATH
+              value: /etc/celestia/tls
+            {{- end }}
             {{- if .Values.node.extraEnvVars }}
             {{- include "common.tplvalues.render" (dict "value" .Values.node.extraEnvVars "context" $) | nindent 12 }}
             {{- end }}
@@ -194,6 +205,10 @@ spec:
               containerPort: {{ .Values.node.containerPorts.p2p }}
               hostPort: {{ .Values.node.containerPorts.p2p }}
               protocol: UDP
+            - name: ws
+              containerPort: {{ .Values.node.containerPorts.ws }}
+              hostPort: {{ .Values.node.containerPorts.ws }}
+              protocol: TCP
             - name: rest
               containerPort: {{ .Values.node.containerPorts.rest }}
               hostPort: {{ .Values.node.containerPorts.rest }}
@@ -272,6 +287,16 @@ spec:
             - name: home-dir # This is needed so that the process has permissions to create files in the home directory
               mountPath: {{ .Values.node.settings.home }}
               readOnly: false
+            {{- if .Values.node.settings.ws.tls.enabled }}
+            - name: tls-certs
+              mountPath: {{ .Values.node.settings.home }}/tls/cert.pem
+              subPath: tls.cert
+              readOnly: true
+            - name: tls-certs
+              mountPath: {{ .Values.node.settings.home }}/tls/key.pem
+              subPath: tls.key
+              readOnly: true
+            {{- end }}
           {{- if .Values.node.extraVolumeMounts }}
           {{- include "common.tplvalues.render" (dict "value" .Values.node.extraVolumeMounts "context" $) | nindent 12 }}
           {{- end }}
@@ -330,8 +355,8 @@ spec:
           configMap:
             name: {{ template "common.names.fullname" . }}-address
             items:
-              - key: address
-                path: address
+              - key: {{ .Values.node.settings.node_id }}.address
+                path: {{ .Values.node.settings.node_id }}.address
         - name: celes-key
           secret:
             secretName: {{ .Values.node.settings.secret.name }}
@@ -345,6 +370,16 @@ spec:
         - name: configtoml
           configMap:
             name: {{ template "common.names.fullname" . }}-configtoml
+        {{- if .Values.node.settings.ws.tls.enabled }}
+        - name: tls-certs
+          secret:
+            secretName: {{ .Values.node.settings.secret.name }}
+            items:
+              - key: tls.cert
+                path: tls.cert
+              - key: tls.key
+                path: tls.key
+        {{- end }}
         - name: otel-agent-config
           configMap:
             name: {{ template "common.names.fullname" . }}-otel-agent

charts/celestia-node/values.yaml

@@ -90,7 +90,7 @@
     # -- repository for the image, celestiaorg/celestia-node by default
     repository: celestiaorg/celestia-node
     # -- tag for the image, v0.13.6 by default
-    tag: v0.14.1
+    tag: v0.15.0
     digest: ""
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -137,6 +137,16 @@
     secret:
       # -- name of the secret, it must be set
       name: SET_IT
+    ws:
+      tls:
+        enabled: false
+        ## A secret must be available in the cluster with the following format:
+        ## - name: <secret-name>
+        ## - items:
+        ##     - key: tls.cert
+        ##     - key: tls.key
+        secret:
+          name: SET_IT
   ## @param node.config Configuration for the celestia-node
   ##
   ## @param node.config.bridge Configuration for the celestia-node bridge
@@ -155,15 +165,16 @@
           RPCPort: "26657"
           GRPCPort: "9090"
         State:
-          KeyringAccName: ""
-          KeyringBackend: test
-          GranterAddress: []
+          DefaultKeyName: my_celes_key
+          DefaultBackendName: test
         P2P:
           ListenAddresses:
             - /ip4/0.0.0.0/udp/2121/quic-v1/webtransport
             - /ip6/::/udp/2121/quic-v1/webtransport
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip6/::/tcp/2121
           AnnounceAddresses: []
@@ -174,6 +185,9 @@
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip4/127.0.0.1/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip4/127.0.0.1/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip4/127.0.0.1/tcp/2121
             - /ip6/::/tcp/2121
@@ -247,15 +261,16 @@
           RPCPort: "26657"
           GRPCPort: "9090"
         State:
-          KeyringAccName: ""
-          KeyringBackend: test
-          GranterAddress: []
+          DefaultKeyName: my_celes_key
+          DefaultBackendName: test
         P2P:
           ListenAddresses:
             - /ip4/0.0.0.0/udp/2121/quic-v1/webtransport
             - /ip6/::/udp/2121/quic-v1/webtransport
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip6/::/tcp/2121
           AnnounceAddresses: []
@@ -266,6 +281,9 @@
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip4/127.0.0.1/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip4/127.0.0.1/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip4/127.0.0.1/tcp/2121
             - /ip6/::/tcp/2121
@@ -345,15 +363,16 @@
           RPCPort: "26657"
           GRPCPort: "9090"
         State:
-          KeyringAccName: ""
-          KeyringBackend: test
-          GranterAddress: []
+          DefaultKeyName: my_celes_key
+          DefaultBackendName: test
         P2P:
           ListenAddresses:
             - /ip4/0.0.0.0/udp/2121/quic-v1/webtransport
             - /ip6/::/udp/2121/quic-v1/webtransport
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip6/::/tcp/2121
           AnnounceAddresses: []
@@ -364,6 +383,9 @@
             - /ip4/0.0.0.0/udp/2121/quic-v1
             - /ip4/127.0.0.1/udp/2121/quic-v1
             - /ip6/::/udp/2121/quic-v1
+            - /ip4/0.0.0.0/udp/2121/webrtc-direct
+            - /ip4/127.0.0.1/udp/2121/webrtc-direct
+            - /ip6/::/udp/2121/webrtc-direct
             - /ip4/0.0.0.0/tcp/2121
             - /ip4/127.0.0.1/tcp/2121
             - /ip6/::/tcp/2121
@@ -450,16 +472,16 @@
     ## @param volumePermissions.resourcesPreset Set init container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if volumePermissions.resources is set (volumePermissions.resources is recommended for production).
     ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15
     ##
     #resourcesPreset: "micro"
     ## @param volumePermissions.resources Set init container resources for the otel agent (essential for production workloads)
     ## Example:
     resources:
       requests:
         cpu: 100m
         memory: 100Mi
       #limits:
         #cpu: 200m
         #memory: 200Mi
     ## A secret must be available in the cluster with the following format:
     ## - name: <secret-name>
     ## - items:
@@ -525,6 +547,8 @@
   containerPorts:
     # -- P2P container port, 2121 by default
     p2p: 2121
+    # -- WebSocket container port, 2122 by default
+    ws: 2122
     # -- REST container port, 26659 by default
     rest: 26659
     # -- RPC container port, 26658 by default
@@ -633,7 +657,7 @@
     # -- limits for the node
     limits:
       # -- cpu limits for the node, 2 by default
       #cpu: 6
       # -- memory limits for the node, 8Gi by default
       memory: 16Gi
   ## Configure Pods Security Context
@@ -911,6 +935,8 @@
     ports:
       # -- P2P container port, 2121 by default
       p2p: 2121
+      # -- WebSocket container port, 2122 by default
+      ws: 2122
       # -- REST container port, 26659 by default
       rest: 26659
       # -- RPC container port, 26658 by default
@@ -957,6 +983,8 @@
     ports:
       # -- P2P container port, 2121 by default
       p2p: 2121
+      # -- WebSocket container port, 2122 by default
+      ws: 2122
       # -- REST container port, 26659 by default
       rest: 26659
       # -- RPC container port, 26658 by default