fix/grpc-processor-address-double-scheme #34

Merged
asmo merged 2 commits from fix/grpc-processor-address-double-scheme into main 2026-08-17 07:21:20 +00:00
Owner
No description provided.
feat: migrate to CDK v0.18 database-authoritative configuration
All checks were successful
Docs / Build docs site (pull_request) Successful in 43s
Lint / Run on Ubuntu (pull_request) Successful in 5m0s
Tests / Run on Ubuntu (pull_request) Successful in 3m38s
E2E Tests / Run on Ubuntu (pull_request) Successful in 9m15s
2dae58f29e
CDK v0.18 stores the authoritative mint configuration in the primary
database; normal startup no longer reads config.toml or applies
operational CDK_MINTD_* env overrides.

- Add a config-init init container that runs config validate followed by
  config init (first start) or config apply (subsequent starts), which
  also covers one-time imports for existing v0.17 databases
- Render the v0.18 TOML document: [payment_backend]/backend instead of
  [ln]/ln_backend, tls_dir instead of tls_dir_path, and explicit
  allow_insecure for plaintext gRPC processor and management RPC
- Render secrets as env: references (postgres URLs, mint mnemonic, LDK
  RPC password and node mnemonic, Redis connection string) and inject
  the values from Secrets in the pod environment; literal credentials
  never enter the ConfigMap
- Slim pod env vars down to bootstrap settings (work dir, database
  engine, postgres connection) and env:-referenced secrets
- Reject spec.paymentBackend.lnbits in the webhook (removed upstream);
  LNBits mints must move to an external gRPC payment processor
- Add spec.ldkNode.bitcoinRpc.user as a literal alternative to
  userSecretRef (the username is a plain field in CDK and cannot be an
  env: reference); the controller resolves userSecretRef into the
  import document
- Default image: cashubtc/mintd:0.18.0-rc.0
- Docs: v0.18 upgrade guide (backup, signer identity, rollback) and
  LNBits removal notes
fix(grpc-processor): strip scheme from address before rendering config
Some checks failed
Docs / Build docs site (pull_request) Successful in 40s
Lint / Run on Ubuntu (pull_request) Successful in 1m28s
Tests / Run on Ubuntu (pull_request) Failing after 2m25s
E2E Tests / Run on Ubuntu (pull_request) Successful in 5m42s
5f46ab1100
CDK v0.18's PaymentProcessorClient::new prepends http:// or https://
itself based on tls_dir. Rendering the address with a scheme causes a
double scheme (http://http://127.0.0.1:50051) which makes tonic's DNS
resolver fail with 'Name does not resolve'.
asmo merged commit c6bb9c56e0 into main 2026-08-17 07:21:20 +00:00
Sign in to join this conversation.
No description provided.