feat(delegations): [CON-1664] make cloud engine nodes use API BNs to fetch delegations

Cargo.Bazel.json.lock

@@ -1,5 +1,5 @@
 {
-  "checksum": "1fefbde32ed3b3779e766927393403bb1c21b915c373908eacc9793962c43fa7",
+  "checksum": "1d88faead9fe3d4ca18cc2287397ac1457604de13e94aded554c8104ad506e69",
   "crates": {
     "abnf 0.12.0": {
       "name": "abnf",
@@ -21686,6 +21686,10 @@
               "id": "hex-literal 0.4.1",
               "target": "hex_literal"
             },
+            {
+              "id": "hickory-resolver 0.25.2",
+              "target": "hickory_resolver"
+            },
             {
               "id": "hkdf 0.12.4",
               "target": "hkdf"
@@ -22736,6 +22740,10 @@
               "id": "wat 1.244.0",
               "target": "wat"
             },
+            {
+              "id": "webpki-roots 1.0.6",
+              "target": "webpki_roots"
+            },
             {
               "id": "which 4.4.0",
               "target": "which"
@@ -34021,7 +34029,7 @@
               "target": "tower_service"
             },
             {
-              "id": "webpki-roots 1.0.2",
+              "id": "webpki-roots 1.0.6",
               "target": "webpki_roots"
             }
           ],
@@ -66327,7 +66335,7 @@
                 "target": "tokio_util"
               },
               {
-                "id": "webpki-roots 1.0.2",
+                "id": "webpki-roots 1.0.6",
                 "target": "webpki_roots"
               }
             ],
@@ -66377,7 +66385,7 @@
                 "target": "tokio_util"
               },
               {
-                "id": "webpki-roots 1.0.2",
+                "id": "webpki-roots 1.0.6",
                 "target": "webpki_roots"
               }
             ],
@@ -66497,7 +66505,7 @@
                 "target": "tokio_util"
               },
               {
-                "id": "webpki-roots 1.0.2",
+                "id": "webpki-roots 1.0.6",
                 "target": "webpki_roots"
               }
             ],
@@ -66547,7 +66555,7 @@
                 "target": "tokio_util"
               },
               {
-                "id": "webpki-roots 1.0.2",
+                "id": "webpki-roots 1.0.6",
                 "target": "webpki_roots"
               }
             ]
@@ -69500,7 +69508,7 @@
               "target": "thiserror"
             },
             {
-              "id": "webpki-roots 1.0.2",
+              "id": "webpki-roots 1.0.6",
               "target": "webpki_roots"
             },
             {
@@ -91790,14 +91798,14 @@
       ],
       "license_file": "LICENSE"
     },
-    "webpki-roots 1.0.2": {
+    "webpki-roots 1.0.6": {
       "name": "webpki-roots",
-      "version": "1.0.2",
+      "version": "1.0.6",
       "package_url": "https://github.com/rustls/webpki-roots",
       "repository": {
         "Http": {
-          "url": "https://static.crates.io/crates/webpki-roots/1.0.2/download",
-          "sha256": "7e8983c3ab33d6fb807cfcdad2491c4ea8cbc8ed839181c7dfd9c67c83e261b2"
+          "url": "https://static.crates.io/crates/webpki-roots/1.0.6/download",
+          "sha256": "22cfaf3c063993ff62e73cb4311efde4db1efb31ab78a3e5c457939ad5cc0bed"
         }
       },
       "targets": [
@@ -91830,7 +91838,7 @@
           "selects": {}
         },
         "edition": "2021",
-        "version": "1.0.2"
+        "version": "1.0.6"
       },
       "license": "CDLA-Permissive-2.0",
       "license_ids": [
@@ -98642,6 +98650,7 @@
     "hashlink 0.8.3",
     "hex 0.4.3",
     "hex-literal 0.4.1",
+    "hickory-resolver 0.25.2",
     "hkdf 0.12.4",
     "hmac 0.12.1",
     "hpke 0.12.0",
@@ -98912,6 +98921,7 @@
     "wasmtime 42.0.1",
     "wast 244.0.0",
     "wat 1.244.0",
+    "webpki-roots 1.0.6",
     "which 4.4.0",
     "wirm 2.1.0",
     "wsl 0.1.0",

Cargo.Bazel.toml.lock

@@ -3713,6 +3713,7 @@ dependencies = [
  "hashlink 0.8.3",
  "hex",
  "hex-literal 0.4.1",
+ "hickory-resolver",
  "hkdf",
  "hmac",
  "hpke",
@@ -3983,6 +3984,7 @@ dependencies = [
  "wasmtime",
  "wast",
  "wat",
+ "webpki-roots 1.0.6",
  "which",
  "wirm",
  "wsl",
@@ -5870,7 +5872,7 @@ dependencies = [
  "tokio",
  "tokio-rustls 0.26.0",
  "tower-service",
- "webpki-roots 1.0.2",
+ "webpki-roots 1.0.6",
 ]
 
 [[package]]
@@ -11264,7 +11266,7 @@ dependencies = [
  "wasm-bindgen-futures",
  "wasm-streams",
  "web-sys",
- "webpki-roots 1.0.2",
+ "webpki-roots 1.0.6",
 ]
 
 [[package]]
@@ -11713,7 +11715,7 @@ dependencies = [
  "serde",
  "serde_json",
  "thiserror 2.0.18",
- "webpki-roots 1.0.2",
+ "webpki-roots 1.0.6",
  "x509-parser 0.16.0",
 ]
 
@@ -15425,9 +15427,9 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "1.0.2"
+version = "1.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e8983c3ab33d6fb807cfcdad2491c4ea8cbc8ed839181c7dfd9c67c83e261b2"
+checksum = "22cfaf3c063993ff62e73cb4311efde4db1efb31ab78a3e5c457939ad5cc0bed"
 dependencies = [
  "rustls-pki-types",
 ]

Cargo.toml

@@ -666,6 +666,7 @@ getrandom = { version = "0.2", features = ["custom"] }
 goldenfile = "1.8.0"
 gpt = "4.1"
 hex = { version = "0.4.3", features = ["serde"] }
+hickory-resolver = "0.25.2"
 hkdf = "^0.12"
 http = "1.3.1"
 http-body = "1.0.1"
@@ -918,6 +919,7 @@ wasmparser = "0.244.0"
 wasmprinter = "0.244.0"
 wast = "244.0.0"
 wat = "~1.244.0"
+webpki-roots = "1.0.6"
 which = "6.0.3"
 wirm = { version = "2.1.0", features = ["parallel"] }
 wsl = "0.1.0"

bazel/rust.MODULE.bazel

@@ -537,6 +537,10 @@ crate.spec(
     package = "hex-literal",
     version = "^0.4.1",
 )
+crate.spec(
+    package = "hickory-resolver",
+    version = "0.25.2",
+)
 crate.spec(
     package = "hkdf",
     version = "^0.12",
@@ -1899,6 +1903,10 @@ crate.spec(
     package = "wat",
     version = "~1.244.0",
 )
+crate.spec(
+    package = "webpki-roots",
+    version = "1.0.6",
+)
 crate.spec(
     package = "which",
     version = "^4.2.2",

rs/canonical_state/src/lazy_tree_conversion.rs

@@ -978,7 +978,7 @@ fn canister_metadata_as_tree(
 /// Helper function to turn a subnet type into a string.
 /// This is intentionally explicitly implemented here, so that the state tree representation cannot be changed outside this crate, as opposed
 /// to calling something like `subnet_type.to_string()`.
-fn subnet_type_as_string(subnet_type: SubnetType) -> &'static str {
+pub fn subnet_type_as_string(subnet_type: SubnetType) -> &'static str {
     match subnet_type {
         SubnetType::Application => "application",
         SubnetType::System => "system",

rs/http_endpoints/nns_delegation_manager/BUILD.bazel

@@ -22,22 +22,26 @@ rust_library(
         "//rs/interfaces/registry",
         "//rs/monitoring/logger",
         "//rs/monitoring/metrics",
+        "//rs/protobuf",
         "//rs/registry/helpers",
         "//rs/types/types",
         "@crate_index//:axum",
         "@crate_index//:futures",
+        "@crate_index//:hickory-resolver",
         "@crate_index//:http-body-util",
         "@crate_index//:hyper",
         "@crate_index//:hyper-util",
         "@crate_index//:prometheus",
         "@crate_index//:rand",
+        "@crate_index//:rustls",
         "@crate_index//:serde",
         "@crate_index//:serde_cbor",
         "@crate_index//:slog",
         "@crate_index//:tokio",
         "@crate_index//:tokio-rustls",
         "@crate_index//:tokio-util",
         "@crate_index//:tower",
+        "@crate_index//:webpki-roots",
     ],
 )
 
@@ -56,6 +60,7 @@ rust_test(
         "//rs/registry/fake",
         "//rs/registry/keys",
         "//rs/registry/proto_data_provider",
+        "//rs/registry/subnet_type",
         "//rs/test_utilities/registry",
         "//rs/test_utilities/types",
         "@crate_index//:assert_matches",
@@ -64,7 +69,6 @@ rust_test(
         "@crate_index//:hyper",
         "@crate_index//:rand",
         "@crate_index//:rcgen",
-        "@crate_index//:rustls",
         "@crate_index//:tokio",
     ],
 )

rs/http_endpoints/nns_delegation_manager/Cargo.toml

@@ -13,6 +13,7 @@ harness = false
 [dependencies]
 axum = { workspace = true }
 futures = { workspace = true }
+hickory-resolver = { workspace = true }
 http-body-util = { workspace = true }
 hyper = { workspace = true }
 hyper-util = { workspace = true }
@@ -24,17 +25,20 @@ ic-crypto-utils-threshold-sig-der = { path = "../../crypto/utils/threshold_sig_d
 ic-interfaces-registry = { path = "../../interfaces/registry" }
 ic-logger = { path = "../../monitoring/logger" }
 ic-metrics = { path = "../../monitoring/metrics" }
+ic-protobuf = { path = "../../protobuf" }
 ic-registry-client-helpers = { path = "../../registry/helpers" }
 ic-types = { path = "../../types/types" }
 prometheus = { workspace = true }
 rand = { workspace = true }
+rustls = { workspace = true }
 serde = { workspace = true }
 serde_cbor = { workspace = true }
 slog = { workspace = true }
 tokio = { workspace = true }
 tokio-rustls = { workspace = true }
 tokio-util = { workspace = true }
 tower = { workspace = true }
+webpki-roots = { workspace = true }
 
 [dev-dependencies]
 assert_matches = { workspace = true }
@@ -46,8 +50,8 @@ ic-nns-delegation-manager-test-utils = { path = "test_utils" }
 ic-registry-client-fake = { path = "../../registry/fake" }
 ic-registry-keys = { path = "../../registry/keys" }
 ic-registry-proto-data-provider = { path = "../../registry/proto_data_provider" }
+ic-registry-subnet-type = { path = "../../registry/subnet_type" }
 ic-test-utilities-registry = { path = "../../test_utilities/registry" }
 ic-test-utilities-types = { path = "../../test_utilities/types" }
 pprof = { workspace = true }
 rcgen = { workspace = true }
-rustls = { workspace = true }