From 92891d0f9c2c6d66e16eebab6ca9e1cb42746474 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 18 Aug 2026 15:08:02 -0700
Subject: [PATCH] feat(temporal): Cassandra/ES persistence bring-up attempt
 (RBAC + config iterate)

---
 .../sqs/charts/queue-crd/templates/rbac.yaml  |  9 ++-
 .../templates/temporalworker-crd.yaml         | 62 +++++++++++++++++++
 .../temporal/temporal-values.yaml             |  2 +-
 k8s/argocd/apps/60-applications.yaml          |  2 +-
 4 files changed, 70 insertions(+), 5 deletions(-)
 create mode 100644 k8s/applications/sqs/charts/queue-crd/templates/temporalworker-crd.yaml

diff --git a/k8s/applications/sqs/charts/queue-crd/templates/rbac.yaml b/k8s/applications/sqs/charts/queue-crd/templates/rbac.yaml
index 39a46d7..f85a429 100644
--- a/k8s/applications/sqs/charts/queue-crd/templates/rbac.yaml
+++ b/k8s/applications/sqs/charts/queue-crd/templates/rbac.yaml
@@ -10,13 +10,13 @@ metadata:
   name: queue-operator
 rules:
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues"]
+    resources: ["queues", "temporalworkers"]
     verbs: ["get", "list", "watch", "update", "patch"]
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues/status"]
+    resources: ["queues/status", "temporalworkers/status"]
     verbs: ["get", "update", "patch"]
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues/finalizers"]
+    resources: ["queues/finalizers", "temporalworkers/finalizers"]
     verbs: ["update"]
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
@@ -27,6 +27,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods", "nodes"]
     verbs: ["get"]
+  - apiGroups: ["apps"]
+    resources: ["deployments"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/k8s/applications/sqs/charts/queue-crd/templates/temporalworker-crd.yaml b/k8s/applications/sqs/charts/queue-crd/templates/temporalworker-crd.yaml
new file mode 100644
index 0000000..54e0e45
--- /dev/null
+++ b/k8s/applications/sqs/charts/queue-crd/templates/temporalworker-crd.yaml
@@ -0,0 +1,62 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: temporalworkers.kmsvc.io
+spec:
+  group: kmsvc.io
+  names:
+    kind: TemporalWorker
+    plural: temporalworkers
+    singular: temporalworker
+  scope: Namespaced
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          required:
+            - spec
+          properties:
+            apiVersion:
+              type: string
+            kind:
+              type: string
+            metadata:
+              type: object
+            spec:
+              type: object
+              description: Temporal worker specification
+              properties:
+                namespace:
+                  type: string
+                  description: Temporal namespace
+                taskQueue:
+                  type: string
+                  description: Task queue name
+                workflowTypes:
+                  type: array
+                  items:
+                    type: string
+                  description: List of workflow types to execute
+                activityTypes:
+                  type: array
+                  items:
+                    type: string
+                  description: List of activity types to execute
+                concurrency:
+                  type: integer
+                  minimum: 1
+                  description: Worker concurrency level
+            status:
+              type: object
+              description: Temporal worker status
+              properties:
+                ready:
+                  type: boolean
+                lastHeartbeat:
+                  type: string
+                  format: date-time
+                error:
+                  type: string
diff --git a/k8s/applications/temporal/temporal-values.yaml b/k8s/applications/temporal/temporal-values.yaml
index 6c93688..16abeeb 100644
--- a/k8s/applications/temporal/temporal-values.yaml
+++ b/k8s/applications/temporal/temporal-values.yaml
@@ -15,7 +15,7 @@ postgresql:
 elasticsearch:
   enabled: true
   scheme: http
-  host: temporal-elasticsearch
+  host: elasticsearch-master-headless
   port: 9200
   version: v7
   logLevel: error
diff --git a/k8s/argocd/apps/60-applications.yaml b/k8s/argocd/apps/60-applications.yaml
index bcb116c..9b8b66b 100644
--- a/k8s/argocd/apps/60-applications.yaml
+++ b/k8s/argocd/apps/60-applications.yaml
@@ -14,7 +14,7 @@ spec:
   sources:
     - repoURL: https://go.temporal.io/helm-charts
       chart: temporal
-      targetRevision: "*"
+      targetRevision: "0.74.0"
       helm:
         valueFiles:
           - $values/k8s/applications/temporal/temporal-values.yaml