Merge remote-tracking branch 'origin/main' into staging-0.9.0 by moritzkiefer-da · Pull Request #7113 · canton-network/splice

moritzkiefer-da · 2026-09-04T05:13:13Z

Pull Request Checklist

Cluster Testing

If a cluster test is required, comment /cluster_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If an upgrade test is required, comment /upgrade_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a hard-migration test is required (from the latest release), comment /hdm_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a logical synchronizer upgrade test is required (from canton-3.5), comment /lsu_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.

PR Guidelines

Include any change that might be observable by our partners or affect their deployment in the release notes.
Specify fixed issues with Fixes #n, and mention issues worked on using #n
Include a screenshot for frontend-related PRs - see README or use your favorite screenshot tool

Merge Guidelines

Make the git commit message look sensible when squash-merging on GitHub (most likely: just copy your PR description).

fixes #3934 [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

- validate RewardConfig to address Quantstamp CC-4 - remove duplicate validation of lockHolderFee to address Quantstamp S-1 [ci] Signed-off-by: Simon Meier <simon@digitalasset.com>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

* Actually enable ci for staging bases [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Resolves the Daml part of #6722. [ci] Signed-off-by: Zhe Li <linuxcity.jn@gmail.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Part of DACH-NY/canton-network-internal#6745 Nothing we deploy uses the Kubernetes API from inside a pod. [static] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Signed-off-by: Tim Emiola <adetokunbo@emio.la>

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

* Add ability to override rate limiter per IP CIDR [ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

- Bump resources - Filter for metrics (a bit faster and uses less memory) I have tested the metrics query using `curl`. I haven't tested the full chart yet. My plan was to get this reviewed and merged and then try a helm upgrade to a snapshot temporarily to try it out before the release to make sure nothing goes wrong. [static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Signed-off-by: Tim Emiola <adetokunbo@emio.la>

--------- Signed-off-by: JYC11 <jaeyoon.c@gmail.com> Co-authored-by: Divam <dfordivam@gmail.com>

* Simplify istio rate limits By default only have a global rate limit [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

[ci] I can't come up with a sensible reason why this should be a warning, we also don't warn if you only have old unusable versions vetted. Looking at history it seems like this probably got preserved before we had party ignores so imho totally fine to just not warn. Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Fixes #6800 Signed-off-by: Stephane Loeuillet <stephane.loeuillet@kaiko.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

* Persist all command output to `compose.log`. This ensures `docker compose` output is included as well. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Previously we had the global limit and the per ip limit, but a request would consume only from one bucket which made us vulnerable We now have the following limits, mimicking the apps: - global limit for all clients, always consumed - global limit per client ip (with overrides) - ability to configure global limit per endpoint for all the clients - ability to configure global limit per endpoint per client ip (with overrides) these 4 rate limiters all apply at the same time and all must hold Extend metrics and logs: - logs now inlude the external address and the masked address - metrics are distinguished for each filter and we have a relabelng rule to add a label with the filter name so we know which ones are enforced [static] fixes DACH-NY/canton-network-internal#2115 Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com> Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

…lay (#6944) Signed-off-by: Zhe Li <linuxcity.jn@gmail.com>

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

[static] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Extends #6760 Fixes DACH-NY/cn-test-failures#9831 [force] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Will follow up with a PR to 0.9.0 staging that removes it; here it is: #7073 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Fixes #3900 Removes `inClause` in favor of `DbStorage.toInClause`. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

[static] Fixes some issues where we saw slow catchup while also not filling up our buffers which seems to have been caused by connection level flow control kicking in. Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

From the discussion around #7027 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Signed-off-by: DA Automation <splice-maintainers@digitalasset.com> Co-authored-by: DA Automation <splice-maintainers@digitalasset.com>

access logging was not working for gRPC response status was unavailable we were rate limiting even the sequencer p2p ports [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Extracts the startup config dump from pod logs in a namespace; optionally restarts pods whose logs no longer contain the dump. Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

[static] I am an idiot … Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

allow full access for the internal + SVs IPs (istio handles the whitelisting) allow full access to the scan and sequencer API (istio handles whitelisting) [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

…-global-domain` (#7106) Not even going to mention in release notes, because it's broken anyway. Some context here: DACH-NY/canton#35367 (comment) Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

…7100) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

…or (#7098) * Add a separate load balancer for sequencer p2p split the traffic from the public traffic and also don't route through cloud armor [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

* Adjust some sequencer istio rate limits up to allow for more room when runnning lots of validators behind a single ip [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com> * Remove some overrides for scan rate limits [ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com> --------- Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

canton-network-da · 2026-09-04T05:13:37Z

[backport] Reminder

Please consider backporting to the following branches:

▶️ Please check the boxes for branches that you wish to backport to and backport PRs will
automatically be created when you merge this PR.

And your PR is currently against base branch: staging-0.9.0.

Note: Any PR comment containing [backport] will be considered for auto-backporting upon merge,
you can always add those manually for PRs that did not get these reminders. You can also edit
this comment manually and add more branches that this should be backported to.

moritzkiefer-da · 2026-09-04T09:16:28Z

        uses: ./.github/actions/tests/common_test_setup
        with:
-          cache_version: 8
+          cache_version: 10


don't ask me why it was at 8 before everything else was at 9. Bumping everything consistently seemed less confusing.

try sbt --client --batch [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

moritzkiefer-da and others added 30 commits August 7, 2026 10:25

Switch to explicit serializability annotations (#6703)

0a25092

fixes #3934 [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

daml: address Quanstamp 2026 report findings (#6586)

754fc71

- validate RewardConfig to address Quantstamp CC-4 - remove duplicate validation of lockHolderFee to address Quantstamp S-1 [ci] Signed-off-by: Simon Meier <simon@digitalasset.com>

Allow external CI on forks for staging bases (#6860)

3bd5266

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Actually enable ci for staging bases (#6863)

3988646

* Actually enable ci for staging bases [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Daml: add fund manager blacklist and dev fund coupon mint delay (#6793)

39f12c1

Resolves the Daml part of #6722. [ci] Signed-off-by: Zhe Li <linuxcity.jn@gmail.com>

Merge remote-tracking branch 'origin/main' into staging-0.8.0

e4a9dd4

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Merge main into staging-0.8.0 (#6937)

ed443c5

Remove deprecated transfer command functionality (#6959)

20b6af4

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[static] enable sweet security on all scratchnets (#7008)

a4ea43a

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Helm charts hardening: don't mount k8s API tokens by default (#7017)

82b447c

Part of DACH-NY/canton-network-internal#6745 Nothing we deploy uses the Kubernetes API from inside a pod. [static] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Traffic-based App Rewards: Switch on for default test network (#6000)

3418ac7

Signed-off-by: Tim Emiola <adetokunbo@emio.la>

Pin network banner to the top of the viewport (#7014)

3aba4db

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

Switch to stable canton library version (#7024)

cab6e6f

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Add ability to override rate limiter per IP CIDR (#7028)

623d38a

* Add ability to override rate limiter per IP CIDR [ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Merge remote-tracking branch 'origin/staging-0.8.0'

d831b91

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Merge staging-0.8.0 into main (#7037)

90bc437

Remove duplicate, unused vitest config. (#7016)

cc88e83

Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Broaden BFT bootstrap WARN ignore to span-name scoping (#7036)

7802ae1

Signed-off-by: Tim Emiola <adetokunbo@emio.la>

add switch over time field to configs (#7039)

d5b780b

--------- Signed-off-by: JYC11 <jaeyoon.c@gmail.com> Co-authored-by: Divam <dfordivam@gmail.com>

Simplify istio rate limits (#6933)

2958091

* Simplify istio rate limits By default only have a global rate limit [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

remove redundant log ignores

97dba1b

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Don't warn for parties that have no vetted amulet version (#7041)

4e6cb2d

helm: allow setting priorityClassName on node pods (#6801)

46d90ef

Fixes #6800 Signed-off-by: Stephane Loeuillet <stephane.loeuillet@kaiko.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Persist docker compose and Postgres logs (#7033)

b7931a6

* Persist all command output to `compose.log`. This ensures `docker compose` output is included as well. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Fix non-exhaustive match (#7018)

d437116

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com> Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

Add UI support for fund manager blacklist and dev fund coupon mint de…

58a729d

…lay (#6944) Signed-off-by: Zhe Li <linuxcity.jn@gmail.com>

upgrade canton to 3.5.16-snapshot.20260901.19217.0.v1ed99f4c (#7057)

b45148e

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

OriolMunoz-da and others added 22 commits September 2, 2026 14:46

Kill dead pods in node restore (#6985)

af3fe06

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Test handling of multiple verdicts with the same update_id (#7007)

b8c9aae

Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

remove split sv config as it becomes default (#7071)

79e56f4

[static] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Extend "Restarting stream ... Channel shutdown" log ignore (#7074)

553b2c3

Extends #6760 Fixes DACH-NY/cn-test-failures#9831 [force] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Mark splice-domain Helm chart as deprecated (#7072)

44afd18

Will follow up with a PR to 0.9.0 staging that removes it; here it is: #7073 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Use DbStorage.toInClause and remove inClause. (#6963)

51e7a89

Fixes #3900 Removes `inClause` in favor of `DbStorage.toInClause`. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Canton config cleanups (#7035)

214940a

From the discussion around #7027 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

[ci] bump GHA runner version to the latest (auto-generated) (#7038)

165558b

Signed-off-by: DA Automation <splice-maintainers@digitalasset.com> Co-authored-by: DA Automation <splice-maintainers@digitalasset.com>

Fix gRPC rate limits (#7093)

94b0e96

access logging was not working for gRPC response status was unavailable we were rate limiting even the sequencer p2p ports [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Add script for SV operators to collect resolved node configs (#7092)

0ea0f6a

Extracts the startup config dump from pod logs in a namespace; optionally restarts pods whose logs no longer contain the dump. Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Fix flow control settings (#7094)

2c12508

[static] I am an idiot … Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Working cloud armour (#7067)

dc2d1f2

allow full access for the internal + SVs IPs (istio handles the whitelisting) allow full access to the scan and sequencer API (istio handles whitelisting) [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Add backed off FE retries on rate limit errors (#7087)

e7e6efa

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

Helm: Drop dead sequencer.driver.type: "postgres" code from `splice…

b442ddd

…-global-domain` (#7106) Not even going to mention in release notes, because it's broken anyway. Some context here: DACH-NY/canton#35367 (comment) Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Pin postgres version in compose, localnet, splice-postgres & pulumi (#…

3fab383

…7100) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

upgrade canton to 3.5.16-snapshot.20260902.19223.0.v7ed204a4 (#7105)

db32e21

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

add network backend that ensures cantonbft traffic bypasses cloud arm…

0fb7e5f

…or (#7098) * Add a separate load balancer for sequencer p2p split the traffic from the public traffic and also don't route through cloud armor [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

feat: add checks for FROM directives (#7068)

fff5ae3

Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>

upgrade canton to 3.5.16 (#7110)

3063ad6

[ci] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Merge remote-tracking branch 'origin/main' into staging-0.9.0

91a0bae

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

moritzkiefer-da force-pushed the cocreature/merge-main-0.9.0 branch from ea5ab4e to 2f63ec7 Compare September 4, 2026 08:54

moritzkiefer-da commented Sep 4, 2026

View reviewed changes

moritzkiefer-da force-pushed the cocreature/merge-main-0.9.0 branch from 6d00dff to 10991d6 Compare September 4, 2026 10:24

try bumping cache version

dd929af

try sbt --client --batch [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

moritzkiefer-da force-pushed the cocreature/merge-main-0.9.0 branch 3 times, most recently from 3764e13 to dd929af Compare September 4, 2026 15:48

Navigation Menu

Uh oh!

Merge remote-tracking branch 'origin/main' into staging-0.9.0 - #7113

Merge remote-tracking branch 'origin/main' into staging-0.9.0#7113
moritzkiefer-da wants to merge 59 commits into
staging-0.9.0from
cocreature/merge-main-0.9.0

moritzkiefer-da commented Sep 4, 2026

Uh oh!

canton-network-da commented Sep 4, 2026

Uh oh!

moritzkiefer-da Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

17 participants

Uh oh!

Conversation

moritzkiefer-da commented Sep 4, 2026

Pull Request Checklist

Cluster Testing

PR Guidelines

Merge Guidelines

Uh oh!

canton-network-da commented Sep 4, 2026

[backport] Reminder

Please consider backporting to the following branches:

Uh oh!

moritzkiefer-da Sep 4, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

17 participants