Skip to content

Add KMS signer support to run-enclave.sh #433

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jjeangal wants to merge 4 commits into
base: celo-integration-rebase-17
Choose a base branch
from
Open

Add KMS signer support to run-enclave.sh #433

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
7580ebb
add kms signer endpoints
jjeangal May 8, 2026
9d94a70
Address reviewer comments: error on partial KMS config, fix misleadin…
jjeangal May 8, 2026
88a3e63
add logging
jjeangal May 11, 2026
c21a9c3
tls disabled by default
jjeangal May 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions espresso/docker/op-batcher-tee/run-enclave.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,8 @@ echo "Debug Mode: $ENCLAVE_DEBUG"
echo "Monitor Interval: $MONITOR_INTERVAL seconds"
echo "Memory: ${MEMORY_MB}MB"
echo "CPU Count: $CPU_COUNT"
echo "KMS Signer Endpoint: ${SIGNER_ENDPOINT:-[not set, using private key]}"
echo "KMS Signer Address: ${SIGNER_ADDRESS:-[not set]}"
Comment thread
jjeangal marked this conversation as resolved.
Outdated
echo "Max Channel Duration: $MAX_CHANNEL_DURATION"
echo "Target Num Frames: $TARGET_NUM_FRAMES"
echo "Max L1 Tx Size Bytes: $MAX_L1_TX_SIZE_BYTES"
Expand All @@ -93,8 +95,12 @@ BATCHER_ARGS="$BATCHER_ARGS,--espresso.batch-authenticator-addr=$BATCH_AUTHENTIC
BATCHER_ARGS="$BATCHER_ARGS,--espresso.origin-height-espresso=$ESPRESSO_ORIGIN_HEIGHT_ESPRESSO"
BATCHER_ARGS="$BATCHER_ARGS,--espresso.origin-height-l2=$ESPRESSO_ORIGIN_HEIGHT_L2"

# Use private key if provided, otherwise fall back to test mnemonic
if [ -n "$OP_BATCHER_PRIVATE_KEY" ]; then
# Use KMS signer if endpoint+address are provided, otherwise fall back to private key or test mnemonic.
if [ -n "${SIGNER_ENDPOINT:-}" ] && [ -n "${SIGNER_ADDRESS:-}" ]; then
echo "Using KMS signer at $SIGNER_ENDPOINT (address: $SIGNER_ADDRESS)"
BATCHER_ARGS="$BATCHER_ARGS,--signer.endpoint=$SIGNER_ENDPOINT"
BATCHER_ARGS="$BATCHER_ARGS,--signer.address=$SIGNER_ADDRESS"
Comment thread
jjeangal marked this conversation as resolved.
Outdated
elif [ -n "$OP_BATCHER_PRIVATE_KEY" ]; then
Comment thread
jjeangal marked this conversation as resolved.
echo "Using OP_BATCHER_PRIVATE_KEY for authentication"
BATCHER_ARGS="$BATCHER_ARGS,--private-key=$OP_BATCHER_PRIVATE_KEY"
else
Expand Down
Loading