feat(temporal): Cassandra/ES persistence bring-up attempt (RBAC + config iterate)

k8s/applications/sqs/charts/queue-crd/templates/rbac.yaml

@@ -10,13 +10,13 @@ metadata:
   name: queue-operator
 rules:
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues"]
+    resources: ["queues", "temporalworkers"]
     verbs: ["get", "list", "watch", "update", "patch"]
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues/status"]
+    resources: ["queues/status", "temporalworkers/status"]
     verbs: ["get", "update", "patch"]
   - apiGroups: ["kmsvc.io"]
-    resources: ["queues/finalizers"]
+    resources: ["queues/finalizers", "temporalworkers/finalizers"]
     verbs: ["update"]
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
@@ -27,6 +27,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods", "nodes"]
     verbs: ["get"]
+  - apiGroups: ["apps"]
+    resources: ["deployments"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

k8s/applications/sqs/charts/queue-crd/templates/temporalworker-crd.yaml

@@ -0,0 +1,62 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: temporalworkers.kmsvc.io
+spec:
+  group: kmsvc.io
+  names:
+    kind: TemporalWorker
+    plural: temporalworkers
+    singular: temporalworker
+  scope: Namespaced
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          required:
+            - spec
+          properties:
+            apiVersion:
+              type: string
+            kind:
+              type: string
+            metadata:
+              type: object
+            spec:
+              type: object
+              description: Temporal worker specification
+              properties:
+                namespace:
+                  type: string
+                  description: Temporal namespace
+                taskQueue:
+                  type: string
+                  description: Task queue name
+                workflowTypes:
+                  type: array
+                  items:
+                    type: string
+                  description: List of workflow types to execute
+                activityTypes:
+                  type: array
+                  items:
+                    type: string
+                  description: List of activity types to execute
+                concurrency:
+                  type: integer
+                  minimum: 1
+                  description: Worker concurrency level
+            status:
+              type: object
+              description: Temporal worker status
+              properties:
+                ready:
+                  type: boolean
+                lastHeartbeat:
+                  type: string
+                  format: date-time
+                error:
+                  type: string

k8s/applications/temporal/temporal-values.yaml

@@ -15,7 +15,7 @@ postgresql:
 elasticsearch:
   enabled: true
   scheme: http
-  host: temporal-elasticsearch
+  host: elasticsearch-master-headless
   port: 9200
   version: v7
   logLevel: error

k8s/argocd/apps/60-applications.yaml

@@ -14,7 +14,7 @@ spec:
   sources:
     - repoURL: https://go.temporal.io/helm-charts
       chart: temporal
-      targetRevision: "*"
+      targetRevision: "0.74.0"
       helm:
         valueFiles:
           - $values/k8s/applications/temporal/temporal-values.yaml