From 46dc24a26ca25a4db2058c579b40ea725625f8ff Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Thu, 27 Aug 2026 09:48:46 -0700
Subject: [PATCH] fix: remove workflow adapter (temporal-frontend is gRPC-only,
 not HTTP)

Per homelab/project-usage/jwt-auth-rollout.md, temporal-frontend (port 7233)
is gRPC-specific for workers/SDKs. External HTTP access is unresolved design.
Disabled until gRPC ingress is added. Keeps only: sqs, memory, s3, iam.
---
 k8s/configmap.yaml | 25 ++++++-------------------
 1 file changed, 6 insertions(+), 19 deletions(-)

diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml
index 4a8b872..425a15d 100644
--- a/k8s/configmap.yaml
+++ b/k8s/configmap.yaml
@@ -59,25 +59,12 @@ data:
         - verb: GET
           upstreamPath: /sqs/queues
 
-    - serviceName: workflow
-      upstream:
-        url: http://temporal-frontend.temporal.svc.cluster.local:7233
-        timeoutSeconds: 60
-      auth:
-        required: false
-      resources:
-      - name: execute
-        methods:
-        - verb: POST
-          upstreamPath: /workflow/execute
-      - name: describe
-        methods:
-        - verb: GET
-          upstreamPath: /workflow/describe
-      - name: list
-        methods:
-        - verb: GET
-          upstreamPath: /workflow/list
+    # NOTE: temporal-frontend (port 7233) is gRPC-only, not HTTP.
+    # External worker/SDK access is unresolved per homelab/project-usage/jwt-auth-rollout.md
+    # Disabled until a gRPC-capable ingress is added.
+    # - serviceName: workflow
+    #   upstream:
+    #     url: http://temporal-frontend.temporal.svc.cluster.local:7233
 
     - serviceName: memory
       upstream: