Skip to content

Latest commit

 

History

History

temporal

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
README.md
README.md
 
 
helm.values.yml
helm.values.yml
 
 
temporal.routes.yml
temporal.routes.yml
 
 

README.md

Temporal IO

Késako ?

Temporal is a distributed, scalable, durable, and highly available orchestration engine designed to execute asynchronous long-running business logic in a resilient way.

Temporal Components

Install

task workflows:temporal-install

⚠️ Installation can take several minutes

Visit UI : http://temporal-ui.127.0.0.1.nip.io

Connect To Temporal Frontend Service

Via Temporal CLI

ℹ️ After installing the Helm Temporal chart, I automatically configure the CLI to consider the Frontend Service address and the Ingress certificate:

kubectl get secret temporal-gateway.127.0.0.1.nip.io-tls -n temporal-system -o jsonpath="{['data']['ca\.crt']}" | base64 --decode > /home/vscode/temporal-ing-ca.crt
cat <<EOF >> /home/vscode/.bashrc
export TEMPORAL_TLS_CA=/home/vscode/temporal-ing-ca.crt
export TEMPORAL_ADDRESS=temporal-gateway.127.0.0.1.nip.io:443
EOF
source /home/vscode/.bashrc
## Get Health of Temporal Cluster
temporal operator cluster health
# SERVING

## Create namespace Team 1
temporal operator namespace create --retention 5d --namespace team-temporal
# Namespace team-temporal successfully registered.

## Create namespace Team 2
temporal operator namespace create --retention 5d --namespace team-cadence
# Namespace team-cadence successfully registered.

Temporal accessible via the K8S Gateway API

temporal operator namespace create --retention 5d --namespace t
eam-gateway-api --address temporal-gateway-new.127.0.0.1.nip.io:9080
# Namespace team-cadence successfully registered.

Via Temporal SDK Java

import io.grpc.Grpc;
import io.grpc.ManagedChannel;
import io.grpc.TlsChannelCredentials;
import io.grpc.netty.shaded.io.netty.handler.ssl.util.InsecureTrustManagerFactory;
import io.temporal.serviceclient.WorkflowServiceStubs;
import io.temporal.serviceclient.WorkflowServiceStubsOptions;

// https://github.com/grpc/grpc-java/issues/10523
ManagedChannel managedChannel = Grpc.newChannelBuilder("temporal-gateway.127.0.0.1.nip.io:443",
        TlsChannelCredentials.newBuilder()
                .trustManager(InsecureTrustManagerFactory.INSTANCE.getTrustManagers()[0])
                .build()
        ).build();
WorkflowServiceStubs service = WorkflowServiceStubs.newServiceStubs(
        WorkflowServiceStubsOptions.newBuilder()
                .setChannel(managedChannel)
                .build()
        );

ℹ️ You can see that I'm using an InsecureTrustManagerFactory. The simple reason that the ingress certificate is self-signed, and to avoid getting the Empty issuer DN not allowed in X509Certificates error, I decide to bypass the SSL verification.

⚠️ However, this configuration is exclusively reserved for Tests. For production use, you should consider using Security Features

Temporal accessible via the K8S Gateway API

import io.temporal.serviceclient.WorkflowServiceStubs;
import io.temporal.serviceclient.WorkflowServiceStubsOptions;

WorkflowServiceStubs service = WorkflowServiceStubs.newServiceStubs(
        WorkflowServiceStubsOptions.newBuilder()
                .setTarget("temporal-gateway-new.127.0.0.1.nip.io:9080")
                .build()
        );

Uninstall

task discovery:temporal-uninstall

Resources