Installation Instructions

# -- Domain name where the application will be hosted
domainName: ""
# -- Override for the full release name used in resource names
fullnameOverride: ""

ledger:
  # -- Canton ledger API host address
  host: ""
  # -- Canton ledger API port number
  port: "5001"
  # -- Canton domain identifier
  domainId: ""

mainService:
  # -- Override for the main service name
  nameOverride: ""
  # -- Enable or disable the main service
  enabled: true
  # -- Additional environment variables for the main service
  extraEnv: {}
  image:
    # -- Docker image repository
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/main-service
    # -- Image tag
    tag: ""
    # -- Image pull policy
    pullPolicy: IfNotPresent
  # -- Secrets to use for pulling the image
  imagePullSecrets: []
  # -- Number of replicas
  replicas: 1
  service:
    # -- Kubernetes service type
    type: ClusterIP
    # -- Service port number
    port: 80
    # -- Service port name
    portName: http
    # -- Annotations for the service
    annotations: {}
  # -- Container port to expose
  containerPort: 80
  # -- Custom labels for pods
  labels: {}
  # -- Resource requests and limits
  resources: {}
  # -- Node selector for scheduling
  nodeSelector: {}

listingService:
  # -- Override for the listing service name
  nameOverride: ""
  # -- Enable or disable the listing service
  enabled: false
  # -- URL for the listing service
  listingUrl: ""
  auth:
    keycloak:
      # -- Token endpoint URL
      tokenUrl: ""
      # -- Keycloak client ID
      clientId: ""
      # -- Keycloak client secret
      clientSecret: ""
      externalSecret:
        # -- Enable external secret reference
        enabled: false
        # -- Reference to the remote secret
        remoteSecretRef: ""
        secretStoreRef:
          # -- Name of the secret store
          name: ""
          # -- Kind of the secret store (SecretStore or ClusterSecretStore)
          kind: "SecretStore"
  image:
    # -- Docker image repository
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/listing-service
    # -- Image tag
    tag: ""
    # -- Image pull policy
    pullPolicy: IfNotPresent
  # -- Secrets to use for pulling the image
  imagePullSecrets: []
  # -- Number of replicas
  replicas: 1
  service:
    # -- Kubernetes service type
    type: ClusterIP
    # -- Service port number
    port: 80
    # -- Service port name
    portName: http
    # -- Annotations for the service
    annotations: {}
  # -- Container port to expose
  containerPort: 80
  # -- Additional environment variables for the listing service
  extraEnv: {}
  # -- Custom labels for pods
  labels: {}
  # -- Resource requests and limits
  resources: {}
  # -- Node selector for scheduling
  nodeSelector: {}

# UI component values
ui:
  # -- Override for the ui name
  nameOverride: ""
  # -- number of ui pods to run
  replicaCount: 1
  # -- api image settings
  image:
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/cpm-ui
    pullPolicy: IfNotPresent
    # defaults to appVersion
    tag: ""
  # -- api image pull secrets
  imagePullSecrets: []
  #   - name: ""
  # -- extra env variables for ui pods
  extraEnv: {}
  # -- labels for ui pods
  labels: {}
  # -- api service port and name
  service:
    port: 80
    portName: http
  # -- annotations for api pods
  podAnnotations: {}
  # -- securtiry context on a pod level
  podSecurityContext:
  #   runAsNonRoot: true
  #   runAsUser: 4444
  #   runAsGroup: 5555
  #   fsGroup: 4444
  # -- security context on a container level
  securityContext: {}
  # Define update strategy for UI pods
  updateStrategy: {}
  # -- CPU and Memory requests and limits
  resources: {}
  #   requests:
  #     cpu: "100m"
  #     memory: "50Mi"
  #   limits:
  #     cpu: "200m"
  #   memory: "200Mi"
  # -- Specify Node Labels to place api pods on
  nodeSelector: {}
  # -- https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
  tolerations: []
  # -- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
  affinity: {}
  # -- keycloak client secret is used to get token from keycloak (set in env-specific values)
  keycloakClient:
    id: ""

ingressConfig:
  # Enable the creation of Ingress resources
  enabled: false
  # Select the ingress provider (supported: traefik, traefikCRD)
  provider:
    name: traefikCRD
    traefik:
      # Ingress class name to use when provider is "traefik"
      ingressClass: ""
    traefikCRD:
      tlsStore:
        # Enable or disable creation of TLSStore
        enabled: false
        # Name of the TLSStore to be used (default by Traefik)
        name: default

  # Ingress class name to be applied to all ingress resources
  className: traefik

  # Annotations for ingress routes
  annotations: {}

  # List of domains
  hosts:
    - host: ""

  # TLS configuration options
  tls:
    # Enable or disable TLS for ingress
    enabled: false
    # Name of the existing secret with TLS certs (ignored if certManager is enabled)
    secretName: ""
    certManager:
      # Enable automatic certificate management using Cert-Manager
      enabled: true
      # Email to use for Let's Encrypt registration
      email: services.cat-bp@intellecteu.com
      # ACME server URL (production or staging)
      server: https://acme-v02.api.letsencrypt.org/directory

  # Middleware configuration to strip path prefixes before routing
  stripApplicationPrefix:
    enabled: true
    type: regex
    # List of regex patterns to remove from the request path
    regex:
      - "^/[^/]+/api/"

#!/bin/bash

# Define endpoint, user and parties
export PUBLISHER_TOKEN_URL="https://{keycloak_url}/auth/realms/${realm}/protocol/openid-connect/token"
export PUBLISHER_USER="cpm-${client}"
export PUBLISHER_PARTY="${party_id}"
export IEU_LISTER_PARTY=IEU::1220e2a179be15928ce0b551c069faaa2b8e521fd9c601b59752b82842790695caa0

get_token() {
    local url="$1"
    local user="$2"
    local pass="$3"

    local response=$(curl -s -X POST "$url" \
        -H 'Content-Type: application/x-www-form-urlencoded' \
        -d 'client_id=cpm-cli' \
        -d "username=$user" \
        -d "password=$pass" \
        -d 'grant_type=password')

    if ! token=$(jq -r '.access_token' <<< "$response" 2>/dev/null) || [[ "$token" == "null" ]]; then
        echo "ERROR: Failed to fetch token for user '$user'. Response:" >&2
        echo "$response" >&2
        return 1
    fi

    echo "$token"
}

printf "Enter password for %s user: " "$PUBLISHER_USER"
read -s pass
echo
if ! TOKEN_PUBLISHER=$(get_token "$PUBLISHER_TOKEN_URL" "$PUBLISHER_USER" "$pass"); then
    unset pass
    return 1
fi
unset pass

export TOKEN_PUBLISHER
echo "Token exported successfully. You can now run CPM CLI commands."

function cpm() {
    java -jar target/cli-0.2.1-all.jar --config-file config/mainnet.json "$@"
}

{
  "authUrl": "https://${keycloak_url}/auth/realms/${realm}/protocol/openid-connect/auth/device",
  "tokenUrl": "https://${keycloak_url}/auth/realms/${realm}/protocol/openid-connect/token",
  "listingUrl": "https://cantonapps.com/cpm-listing-service/api",
  "mainUrl": "https://${cpm_url}/cpm-main-service/api"
}