cc412605c7
Terra key moved out from env variable, VAA submission on Terra made async ( #129 )
...
* Terra fee payer key moved from environment variable into the separate file
* Removed closed issues from the comments, VAA submition made async
* Review comments fixed
2020-11-30 19:24:39 +01:00
106fecca00
bridge: always gate Terra features on the main feature flag
2020-11-30 17:13:48 +01:00
a77f89f646
Terra configuration moved to docker image instead of config maps ( #128 )
...
* Terra configuration moved to docker image instead of config maps
2020-11-30 12:34:31 +01:00
029d4b71ef
fix account sizes
2020-11-30 11:33:40 +01:00
bec598b41a
Fix subsidization and fees ( #127 )
...
* Revert "solana: partially revert #82 subsidization changes"
This reverts commit 2967653e
2020-11-30 11:09:08 +01:00
5997f133c3
solana: use loopback address to connect to other containers in same pod
...
There's a bit of a chicken-and-egg problem here - the liveness probe
cannot succeed until all containers in the pod are ready, and the
service load balancer won't work until it's ready.
2020-11-29 19:19:37 +01:00
120dfab49e
bridge: type alias for readiness components
2020-11-29 17:07:15 +01:00
c31777d1b3
e2e: add bidirectional end-to-end tests
2020-11-29 17:07:15 +01:00
30278397f7
bridge: add erc20 abi for use in tests
2020-11-29 17:07:15 +01:00
2967653e06
solana: partially revert #82 subsidization changes
...
... while keeping the borrowing fixes. Please review carefully whether
any of the remaining changes should've been reverted as well.
Fails due to account ownership check for debits, new tests caught it.
2020-11-29 17:07:15 +01:00
fddbd01f9d
solana: update Rust and Solana to latest stable releases
...
Unfortunately, the new release has a much chattier message_processor,
but we cannot do anything about that without losing value debug info.
2020-11-29 17:07:15 +01:00
de8d1dee31
devnet: pin Dockerfile syntax to digest
...
This speeds up the build by ~1.5s by avoiding a remote lookup on
Docker Hub every time this is built (WTF).
2020-11-29 17:07:15 +01:00
a2f48fdee3
solana/cli: fetch token account balance
...
The request needs to include the decimals (part of the derivation path).
2020-11-29 17:07:15 +01:00
45837241ed
devnet: add readiness checks to most components
2020-11-29 17:07:15 +01:00
561852d499
bridge: simple readiness check
2020-11-29 17:07:15 +01:00
ee0904adf9
Update assumptions.md
2020-11-27 19:43:57 +01:00
8c0c902b42
Update assumptions.md
2020-11-27 19:31:11 +01:00
c2c50b3326
Update assumptions.md
2020-11-27 19:28:14 +01:00
26942d7edb
Update assumptions.md
2020-11-27 19:27:11 +01:00
d350731dda
Update assumptions.md
2020-11-27 19:26:09 +01:00
36a025b088
Update to Go 1.15.5 to account for CVE-2020-28362
2020-11-27 19:20:07 +01:00
540fbbb31b
Clarify that we do not automatically rate limit spammy guardians
2020-11-27 19:08:13 +01:00
d4054b4733
Update assumptions.md
2020-11-27 19:00:39 +01:00
70eddbee6e
Document our security assumptions
2020-11-27 18:51:32 +01:00
4658dcb8f1
Update README.md
2020-11-27 15:16:18 +01:00
f43e5617f9
Update operations.md
2020-11-24 22:57:50 +01:00
8306a83833
solana/agent: listen on UNIX socket ( #122 )
...
This allows us to use UNIX filesystem permissions for access control.
Previously, any process in the network namespace could connect to it,
which is insecure for obvious reasons.
Verified that correct permissions are set:
```
# ls -lisa /run/bridge/
total 8
31996269 4 drwxrwxrwx 2 root root 4096 Nov 23 21:58 .
14676759 4 drwxr-xr-x 1 root root 4096 Nov 23 21:58 ..
31996306 0 srwx------ 1 root root 0 Nov 23 21:58 agent.sock
```
Fixes #119
2020-11-24 09:48:44 +01:00
d99977a8ae
Commit .run IntelliJ shortcuts to repo
2020-11-23 17:21:41 +01:00
471417cd6e
bridge: use GPG-armored binary protobufs for keys
2020-11-20 22:40:42 +01:00
0152a00114
all: rename LockupObservation to SignedObservation
...
We observe things other than lockups, account for it.
2020-11-20 22:35:00 +01:00
50807037a5
Update README.md
2020-11-20 21:32:12 +01:00
e5a81c0db3
Update README.md
...
Add flavour
2020-11-20 21:29:47 +01:00
3e3e9dd651
bridge: fix typo in flag errors
2020-11-20 21:18:29 +01:00
14106ea750
Update operations.md
2020-11-20 19:54:40 +01:00
be6320af69
Update README.md
2020-11-20 19:26:03 +01:00
f2aa612ee0
Add nodearchitecture.excalidraw
2020-11-20 19:14:09 +01:00
b9a8b9e345
operations.md draft
2020-11-20 19:13:22 +01:00
3e57f475e1
solana: fix borrow issues
2020-11-20 14:23:05 +01:00
501a63c9eb
chmod +x send-eth-lockups.sh
2020-11-20 12:05:39 +01:00
8510140165
subsidize guardian transactions using fees ( #82 )
...
* subsidize guardian transactions using fees
* reuse transfer function
* evict signature state on inbound transfers
* fix mutability issues due to copying
* add fee refund
* unify fee calculation
* add fee documentation
* Unflip tables
* type annotation
2020-11-19 22:47:09 +01:00
ee5d07c929
Fixes to VAA submission to Terra smart contract ( #115 )
...
* Terra smart contract binary interface changed from vector to base64 string
* Added initial guardian set submission to Terra
2020-11-19 20:05:05 +01:00
e39fb2abec
Update README.md
2020-11-19 16:33:34 +01:00
90f1c9703a
Update README.md
2020-11-19 16:30:13 +01:00
dc82826ef3
Update overview image to properly describe Terra flow
2020-11-19 16:24:34 +01:00
a3c745ace7
bridge/pkg/ethereum: remove channel unsubscribes
...
Unsubscribe() does blocking I/O that ignores the runnable context
and can block forever: #107
It would appear that removing the Unsubscribe calls is the only
way to work around this go-ethereum bug.
ghstack-source-id: 93f287efc09be7eb12921a431effb282aea78510
Pull Request resolved: https://github.com/certusone/wormhole/pull/109
2020-11-19 12:57:21 +01:00
66430cb5be
bridge: implement guardian set update submission node admin service
...
Tested on a live devnet via `scripts/test-injection.sh 0`.
ghstack-source-id: 92489c2455e677433414dfa66c6917a577e4c4a5
Pull Request resolved: https://github.com/certusone/wormhole/pull/104
2020-11-19 12:57:21 +01:00
7545d2b803
terra: disable in production mode
...
ghstack-source-id: c22885f1219fe9a0cb2a84983743c0c198366660
Pull Request resolved: https://github.com/certusone/wormhole/pull/103
2020-11-19 12:57:21 +01:00
5f8ca60ab1
bridge: refactor out broadcastSignature to prepare for injection path
...
ghstack-source-id: e3b8aee5a055bdd4b2492de5204ac7cffb6d24da
Pull Request resolved: https://github.com/certusone/wormhole/pull/102
2020-11-19 12:57:21 +01:00
fdc2be10b3
solana: verify that new guardian set isn't empty
...
ghstack-source-id: 4fc1d9415250ba5a9bea3c464111328f109924fd
Pull Request resolved: https://github.com/certusone/wormhole/pull/101
2020-11-19 12:57:21 +01:00
ee71c73611
docs: add simple overview image
...
ghstack-source-id: 275b38858acebea0d61227cb699985fea68ea0fd
Pull Request resolved: https://github.com/certusone/wormhole/pull/92
2020-11-19 12:57:21 +01:00
Yuriy Savchenko
Leo
Hendrik Hofstadt
Hendrik Hofstadt