From e0c1fe60dcde195b727164300a67e4d0baf6e7c6 Mon Sep 17 00:00:00 2001 From: Oleg Tsybizov Date: Thu, 29 Jan 2026 18:33:59 -0600 Subject: [PATCH 1/2] fix: added empty string as default web3signer key value --- ops/mainnet/mason/main.tf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ops/mainnet/mason/main.tf b/ops/mainnet/mason/main.tf index 52f69fce..2b4337eb 100644 --- a/ops/mainnet/mason/main.tf +++ b/ops/mainnet/mason/main.tf @@ -40,7 +40,8 @@ locals { mark_config_json = jsondecode(data.aws_ssm_parameter.mark_config_mainnet.value) mark_config = { dd_api_key = local.mark_config_json.dd_api_key - web3_signer_private_key = local.mark_config_json.web3_signer_private_key + # Private keys are stored as Shamir shares in separate SSM parameters, not in main config + web3_signer_private_key = try(local.mark_config_json.web3_signer_private_key, "") signerAddress = local.mark_config_json.signerAddress chains = local.mark_config_json.chains db_password = local.mark_config_json.db_password From f8d07c6718319806cc4d3bdfadf4a8125f269230 Mon Sep 17 00:00:00 2001 From: Oleg Tsybizov Date: Thu, 29 Jan 2026 18:34:49 -0600 Subject: [PATCH 2/2] fix: added shard env variables for the invoice handler --- ops/mainnet/mason/config.tf | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/ops/mainnet/mason/config.tf b/ops/mainnet/mason/config.tf index 9f1acb13..3c53cc7e 100644 --- a/ops/mainnet/mason/config.tf +++ b/ops/mainnet/mason/config.tf @@ -293,6 +293,26 @@ locals { name = "MARK_CONFIG_SSM_PARAMETER" value = "MASON_CONFIG_MAINNET" }, + { + name = "SHARD_MANIFEST" + value = local.shard_manifest + }, + { + name = "GCP_PROJECT_ID" + value = local.gcp_project_id + }, + { + name = "GOOGLE_CLOUD_PROJECT" + value = local.gcp_project_id + }, + { + name = "GCP_WORKLOAD_IDENTITY_PROVIDER" + value = local.gcp_workload_identity_provider + }, + { + name = "GCP_SERVICE_ACCOUNT_EMAIL" + value = local.gcp_service_account + }, { name = "REBALANCE_CONFIG_S3_BUCKET" value = local.rebalanceConfig.bucket