Skip to content

Conversation

@2opremio
Copy link
Contributor

@2opremio 2opremio commented Dec 9, 2025

Controller counterpart to https://github.com/sagaxyz/SagaOS/pull/227

Add conditional logic to set REMOTE_SIGNER_ENABLED and PRIV_VALIDATOR_LADDR when ValidatorKey is not supplied, for both CCV and non-CCV templates. Also expose port 26658 for the privval server when using remote signer.

Add conditional logic to set REMOTE_SIGNER_ENABLED and PRIV_VALIDATOR_LADDR
when ValidatorKey is not supplied, for both CCV and non-CCV templates.
Also expose port 26658 for the privval server when using remote signer.
Copy link
Contributor

@emanuelconunaemme emanuelconunaemme left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The part to test it with the current controller should be changed. We might also require a version check, but we can skip it if we are able to upgrade all the chains to v0.15 which we should.

value: "%%% stake_owner_address %%%"
- name: KEYPASSWD
value: "%%% keychain_password %%%"
{{- if .ValidatorKey }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The correct version would be:

{% if remote_signer_enabled %}
   - name: REMOTE_SIGNER_ENABLED
      value: "true"
   - name: PRIV_VALIDATOR_LADDR
      value: "tcp://0.0.0.0:26658"
{% endif %}

No key is passed.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You mean controller_remote_signer_enabled ?

Copy link
Contributor

@rkollar rkollar Dec 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just to expand - ValidatorKey is only provided by the new controller (controller-ccv role). In the old version (controller role) there is no such variable and deployment will fail.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @rkollar ! I was actually relaying on the lack of ValidatorKey. I just added value: "{{ .ValidatorKey }}" for completeness.

BTW, how can the old controller role work without supplying VALIDATOR_KEY. Does it also rely on an old version of SagaOS which doesn't require it?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Old version of controller only runs pre-CCV SagaOS (so the one currently in mainnet), which uses the mnemonic instead.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the clarification!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be addressed

{{- if not .ValidatorKey }}
- containerPort: 26658
name: privval
{{- end }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

{% if remote_signer_enabled %}
   - containerPort: 26658
     name: privval
{% endif %}

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. Again, you mean controller_remote_signer_enabled ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@emanuelconunaemme confirmed offline that he actually meant controller_remote_signer_enabled

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be addressed

@2opremio
Copy link
Contributor Author

@emanuelconunaemme @rkollar PTAL

@2opremio 2opremio force-pushed the add-remote-signer-support branch from 7fed988 to ddcf952 Compare December 16, 2025 17:18
@2opremio 2opremio force-pushed the add-remote-signer-support branch from ddcf952 to 244d3b8 Compare December 16, 2025 17:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants