* update ui image to 2.25.0 (temporalio#478) Signed-off-by: Tihomir Surdilovic <tihomir@temporal.io> * Allow forcing a specific chart version. (temporalio#479) This is useful for patch releases on older release lines. * Update Chart to 0.37.0, Temporal v1.23.1 * Ensure appVersion is used by default as the server image tag. (temporalio#488) * Bumps server version to the specified appVersion * Use chart.appversion instead of image.tag from values in deployment spec * Allow overriding deployment spec with image.tag --------- Co-authored-by: Kshitij <kshitij.tulsyan@observe.ai> * Update Chart to 0.38.1, Temporal v1.23.1 * [Bug] Allow and document configuring Web UI via values.yaml (temporalio#394) 1. remove web ui config in values.yaml 2. remove web config volume in web-deployment.yaml 3. remove web-config config map 4. remove line 280 since the install bash didn't configure web ui auth 5. update the document for web ui configuration with env variable Co-authored-by: Rob Holland <rob.holland@gmail.com> * fix(imageTag): Fix default type in values for imageTag (temporalio#489) * Update Chart to 0.39.0, Temporal v1.24.0 * Update README.md * Update Chart to 0.39.1, Temporal v1.24.1 * Switch to devrel. * Support new admintools image tag format (temporalio#493) * Require tags for server, admintools and ui. Don't use server tag for admintools, it's versioned separately now. * Update Chart to 0.40.0. * fix: add support for pre upgrade. (temporalio#476) * adding missing ImagePullSecrets section to web deployment * Whitespace. * fix: Use visibility server when defining visibility config (temporalio#436) Co-authored-by: Rob Holland <rob@temporal.io> * fix: sidecarContainers should be an array, not a dict * Use tplvalues.render for templating inside values (temporalio#492) Allow templated values inside the values.yaml for web annotations * Apply security context regardless of persistence engine. (temporalio#494) Replaces temporalio#308. * Update Chart to 0.40.1. * Allow to skip database creation (temporalio#480) Signed-off-by: Valentin Zayash <valioozz@gmail.com> * Update Cassandra host URLs to remove the ".cluster.local" suffix (temporalio#485) * Update Cassandra host URLs to remove the ".cluster.local" suffix * Configure SQL TLS environment variables in server-job (temporalio#411) * Configure SQL_TLS environment variables in server-job * Update Chart to 0.41.0. * Fix weird helm lint false alarm. Fixes temporalio#284. * Helm 2 compat. Fixes temporalio#187. * Update codeowners. * Revert "Update Cassandra host URLs to remove the ".cluster.local" suffix (temporalio#485)" (temporalio#500) This reverts commit b25c4fc. * Update Chart to 0.41.1. * Adds a PodDisruptionBudget and topologySpreadConstraints to web (temporalio#409) * Adds a PodDisruptionBudget and topologySpreadConstraints to web * fixing type on topologySpreadConstraints topologySpreadConstraints should be a list instead of map * Update Chart to 0.42.0. * Update README to mention you cannot do Cassandra only anymore. (temporalio#499) Related: temporalio#470. * Remove invalid line. (temporalio#502) Fixes temporalio#426 * Service account should be set when present, even if not creating. (temporalio#498) Fixes temporalio#403. * Correct outdated port config. (temporalio#497) Fixes temporalio#333 and temporalio#149. Context: temporalio/temporal#650 * Update Chart to 0.43.0. * ElasticSearch -> Elasticsearch * fix: Escape ES credentials (temporalio#505) * feat: updated grafana and prometheus helm dependencies (temporalio#424) * feat: bump grafana and prometheus charts versions Signed-off-by: David Calvert <david@0xdc.me> * Remove hard coded cluster.local references. (temporalio#501) Switch check-cassandra-service init container to use nc. nslookup in recent busybox images is broken and doesn't obey resolv.conf, meaning it won't check k8s search domains. * Enable HTTP API for Nexus (temporalio#511) * Enable HTTP API for Nexus * Update charts/temporal/templates/server-service.yaml * Add FE Ingress (temporalio#435) * Add ingress for frontend * Add CONTRIBUTING. * Note contributing in README. * Note slack channel. * Use a shared config map for all services. (temporalio#514) Remove helpers in favour of defaults via values file. Remove unused Elasticsearch environment variables. Stop switching between es-visibility and visibility for store names. * Pass `ct lint` * Lint chart on PR. * Setup for `ci install`. (temporalio#522) * Setup for `ci install`. Adds a test so that `helm test` now checks that the cluster is healthy after the system is deployed. Refactors server-job to remove the use of helm hooks which cause lot of users pain and don't work with --wait, or the mechanism that helm test uses. Improve the handling of elasticsearch by treating it just like the other drivers. Correctly handle the schema.createDatabase setting which previously had edge cases. * Secret key fixes. * Fix missed ES quoting issue. * Add postgres-es test. * Fix branch reference. * Update Chart to 0.44.0. * Update README to use repo. (temporalio#531) * Update README to use repo. Fixes temporalio#458 --------- Co-authored-by: Alex Garnett <axfelix@gmail.com> * Check for pgx driver as well as plain postgres. (temporalio#546) Fixes temporalio#532 * Templatize resourceLabels for standardization (temporalio#539) * Templatize resourceLabels for standardization * Feat add authorization options (temporalio#542) Server authorization config. * Quote sql password for default store in the same way as the visibility store (temporalio#551) * Update Chart to 0.45.0. * Update Chart to 0.45.1. * Update UI version description (temporalio#556) * Use admintools-env and secret for ES password consistent with e.g. jobs (temporalio#530) * Provide option to create default namespace (temporalio#550) * Provide option to create default namespace * Create multiple namespaces with optional retention --------- Co-authored-by: Manan Mangal <mmangal@paloaltonetworks.com> * add Job annotations and labels (temporalio#536) * add job labels and annotations Signed-off-by: André Bauer <andre.bauer@staffbase.com> Co-authored-by: Rob Holland <rob.holland@gmail.com> --------- Signed-off-by: André Bauer <andre.bauer@staffbase.com> Co-authored-by: Rob Holland <rob.holland@gmail.com> * Config to specify tags to be excluded in prometheus metrics (temporalio#566) * Config to specify tags to be excluded in prometheus metrics --------- Co-authored-by: Rob Holland <rob@temporal.io> * Update Chart to 0.46.0. * Ensure we use global for includes. (temporalio#568) Some call sites used . which was sometimes not the global context. * Update Chart to 0.46.1. * Update _helpers.tpl to avoid nested custom resource label (temporalio#576) * Update Chart to 0.46.2. * fix: yaml parse error when specifying service account name (temporalio#578) * Improve serviceAccount behaviour (temporalio#562) Improve serviceAccount behaviour --------- Co-authored-by: Rob Holland <rob@temporal.io> * Create a job per chart version so that schema upgrades can run. (temporalio#564) * Include release revision in the schema job name. This allows upgrades to create a new job even if the original job is still present for some reason. Also set a TTL on the job so that it will be cleared up 1 day after completion (successful or otherwise). This gives an admin some time to see logs and so on if required. Unfortunately it isn't possible to only set a TTL on successful completions. * Update Chart to 0.47.0. * Fix YAML parse error when specifying two or more resource labels (temporalio#579) * fix: add newline after each label to prevent parse error * fix: remove newline between default labels and resource labels * Ensure we allow component level labels as well as scoped. (temporalio#584) Favour scoped labels. * Remove outdated commment. * Add tests to CI. * Update Chart to 0.48.0. * Try to get CI running. * Ignore this. (temporalio#587) * Add repos. * Add support for deployment annotations (temporalio#582) * feat: add deployment annotations support * Add support for deployment labels (temporalio#581) * feat: add support for defining deployment labels --------- Co-authored-by: Rob Holland <rob@temporal.io> * Update Chart to 0.49.0. * Add repos before releasing. * Update Chart to 0.50.0. * feat: Use HEAD request to check if es_visibility index exists (temporalio#585) * feat: Check ES index before creating from Template * Update Chart to 0.51.0. * Refactor deployment templates to support additional env vars from Secret (temporalio#603) * Refactor deployment templates to support additional environment variables from secrets * Add documentation --------- Co-authored-by: Rob Holland <rob@temporal.io> * Add some unit tests. (temporalio#610) * Add some unit tests. These are more succinct and much faster than the terratest tests. * Add additional Init Containers and Volume Mounts (temporalio#450) * Add additionalInitContainers * elastic-tls: add the elastic tls config if it exists. (temporalio#607) * fix: Populate SQL_CONNECT_ATTRIBUTES in admintools and schema job (temporalio#567) * fix: Populate SQL_CONNECT_ATTRIBUTES in admintools and schema job * Add failing test. --------- Co-authored-by: Rob Holland <rob@temporal.io> * Qoute annotation and label values (temporalio#589) * Update Chart to 0.52.0. * Unit tests for PR 450 (temporalio#611) * Add unit tests for temporalio#450. * Add support for TLS-enabled Cassandra configurations (temporalio#552) Signed-off-by: Greg Haskins <greg@manetu.com> * Add support for internal-frontend (temporalio#602) * Add support for internal-frontend * Disabling internal-frontend by default and ensuring that deployments, services and pdbs are not created if disabled * Implementing requested changes to internalFrontend naming and ports * Further updates to internalFrontend, backwards compatibility * restoring a line I accidentally deleted while resolving a merge conflict --------- Co-authored-by: Tom Wheeler <tom@temporal.io> * Update Chart to 0.53.0. * fix whitespace (temporalio#620) * Fixing the reference to a global Helm value within a local scope (temporalio#617) * Fix internalFrontend service selector labels (temporalio#618) Signed-off-by: Kurtser Alex <alexk@satoricyber.com> * Update Chart to 0.54.0. * fix issue temporalio#588 [Feature Request] Add prefix for metrics exposed by Pr… (temporalio#623) * fix issue temporalio#588 [Feature Request] Add prefix for metrics exposed by Prometheus temporalio#588 --------- Co-authored-by: Rob Holland <rob@temporal.io> * change mysql driver to mysql8 as mysql is no longer supported (temporalio#630) * Added liveliness probe to the web deployment. (temporalio#625) * Added liveliness probe to the web deployment. Note: didn't add startup or readiness since the other components don't have these either. * Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /charts/temporal/tests (temporalio#627) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.21.0 to 0.31.0. - [Commits](golang/crypto@v0.21.0...v0.31.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump golang.org/x/net from 0.23.0 to 0.33.0 in /charts/temporal/tests (temporalio#628) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.33.0. - [Commits](golang/net@v0.23.0...v0.33.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Expand CONTRIBUTING file (temporalio#638) * Expanded CONTRIBUTING file to provide more guidance on contributions. * Fix ports for service and enable istio support out-of-the-box (temporalio#639) Signed-off-by: Yevhen Tienkaiev <hronom@gmail.com> * Update Chart to 0.55.0. * [helm-charts][web] add additionalInitContainers (temporalio#646) * [helm-charts][web] add initContainers * Remove outdated sidecar support. (temporalio#649) * Remove outdated sidecar support. Users can use additionalInitContainers to add sidecars per: https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/ cloudsqlproxy example has been updated. * Add missing toYaml. * Update Chart to 0.56.0. * Add AdditionalEnvs to Namespace Job (temporalio#642) * add admintools additionalEnv to create ns job * Update Chart to 0.57.0. * Turn off service annotations when requested. (temporalio#652) * Turn off service annotations when requested. * Fix server vs specific metric logic. If the service specific value is set, we should use that. The previous code used default, which meant that if the service specific value was false, we incorrectly then used the server global setting. Also correct the service annotations, which have incorrectly been under labels rather than annotations since they were originally added. * Set maxIdleConns in values (temporalio#661) * Fix init containers restart policy (temporalio#657) * respect resources in create-{{store}}-store server job init containers (temporalio#669) * Update Chart to 0.58.0. * add missing securityContent in server-job and server-deployment (temporalio#670) Co-authored-by: Juan Jimenez <{ID}+{username}@users.noreply.github.com> * Update Chart to 0.59.0. * Add Values.web.service.clusterIP to provide headless temporal-web service toggle (temporalio#681) * Update Chart to 0.60.0. * prevent creation of headless services when server.enabled: false (temporalio#689) * Remove admintools-service. (temporalio#677) * Remove admintools-service. It looks like it was intended to allow SSH into the admintools pods, but they don't run sshd or have any ssh keys on them. * Remove leftover port. * Don't make the repo URL a link, it's not browseable. (temporalio#685) * Don't make the repo URL a link, it's not browseable. * Fix typo. * Update README.md Co-authored-by: Tom Wheeler <tom@temporal.io> --------- Co-authored-by: Tom Wheeler <tom@temporal.io> * Bump golang.org/x/crypto from 0.31.0 to 0.35.0 in /charts/temporal/tests (temporalio#693) * Bump golang.org/x/crypto from 0.31.0 to 0.35.0 in /charts/temporal/tests Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.31.0 to 0.35.0. - [Commits](golang/crypto@v0.31.0...v0.35.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.35.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Ran `go mod tidy`, as was required here --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Tom Wheeler <tom@temporal.io> * Bump golang.org/x/net from 0.33.0 to 0.38.0 in /charts/temporal/tests (temporalio#697) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.38.0. - [Commits](golang/net@v0.33.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update Chart to 0.61.0. * decouple server job manifests from Values.server.enabled (temporalio#696) * Update Chart to 0.62.0. * [server-job] update TEMPORAL_ADDRESS (temporalio#672) * [server-job] update TEMPORAL_ADDRESS Signed-off-by: luis.costa <luis.costa@talkdesk.com> * fix: removes check-cassandra-service (temporalio#704) per temporalio#684 (comment) * Update Chart to 0.63.0. * Update Chart to 0.64.0. * Fixed group name (temporalio#719) * Update group name in CODEOWNERS (temporalio#723) * Update Chart to 0.65.0. * Allow passing datacenter when creating the keyspace. (temporalio#748) * Update Chart to 0.66.0. * Add support for "custom" persistence driver (temporalio#658) Temporal core allows for the registration and configuration of custom data stores. However, there is a disparity in how the helm chart translates persistence configuration between helm values and the resulting configmap. As an example, the temporal config for a custom driver for the default store may look as so: ``` persistence: defaultStore: my-custom-store visibilityStore: es-visibility numHistoryShards: 4 datastores: my-custom-store: customDatastore: name: "my-custom" options: hosts: "mycustom.example.com" keyspace: "temporal" ``` Translating to helm values would look like ``` server: config: persistence: defaultStore: my-custom-store additionalStores: my-custom-store: customDatastore: name: "my-custom" options: hosts: "mycustom.example.com" keyspace: "temporal" ``` This gets us most of the way there, but there are a few problems: 1. The charts always assume defaultStore = "default" and thus have opinions about subordinate structures such as default.driver. This results in objects such as Secrets and Jobs being incorrectly emitted for default.driver = "cassandra" even though we are trying to specify an alternate store. This logic should probably be $defaultStore.driver and $visibilityStore.driver instead. 2. The additionalStores configuration does not lend itself to first-class representation in conditional statements, even though it can be used to emit the resulting configmap correctly. One could argue that we should clean up the helm representation to more closely align with the temporal-server yaml, but this is a bigger task (and a breaking change). Instead, this patch ties into the existing model of using $store.driver = {cassandra, sql, elasticsearch} and adds a 4th first-class type "custom." The user may configure this as so: ``` server: config: persistence: default: driver: custom visibility: driver: custom ``` And in doing so, we instruct the various templates to elide the objects (Jobs, Secrets, etc.) related to that store, leaving it to the user to supply the rest of the required configuration using a combination of additionalStores, additionalEnv, additionalVolumeMounts, etc., to inject configuration and secrets. They would also, of course, be responsible for any DDL setup or migration. Signed-off-by: Greg Haskins <greg@manetu.com> * Update Chart to 0.67.0. * Update Chart to 0.68.0. * admintools tag 1.29.0 -> 1.29 (temporalio#756) * Update Chart to 0.68.1. * Update Chart to 0.69.0. * Set explicit permissions for GitHub Actions workflows (temporalio#765) This change was made by an automated process to ensure all GitHub Actions workflows have explicitly defined permissions as per best practices. * Update Chart to 0.70.0. * Update the contributing docs for clarity. (temporalio#768) * Update the contributing docs for clarity. Help to guide users on what kind of changes we will accept. --------- Co-authored-by: Tom Wheeler <tom@temporal.io> * Hand over to CGS team. (temporalio#772) * fix: Very minor typo in README (temporalio#769) what: fixed a very minor typo in README.md * Allow adjusting in appProtocol (temporalio#679) * Update Chart to 0.71.0. * Update Chart to 0.72.0. * add env var that instructs the temporal binary to read the provided config template (temporalio#782) * Support Running New images (temporalio#797) * rough starting point * give users a few toggles * no init container startup * Modify server config t Updated server configuration to support sprig * legacy -> modern * misc fixes and tests * use cassandra too if it exists and a few bug fixes with tests * few bug fixes * fix a few unit tests * addressing pr comments. not yet tested * updating unit tests * update go tests * rm cassandra check changes they use the cassandra image * Update charts/temporal/templates/server-deployment.yaml * address pr feedback and add some unit tests * fix templates * fix templates * fix templates * fix templates * update readme * update readme * Update setup-helm version --------- Signed-off-by: Tihomir Surdilovic <tihomir@temporal.io> Signed-off-by: Valentin Zayash <valioozz@gmail.com> Signed-off-by: David Calvert <david@0xdc.me> Signed-off-by: André Bauer <andre.bauer@staffbase.com> Signed-off-by: Greg Haskins <greg@manetu.com> Signed-off-by: Kurtser Alex <alexk@satoricyber.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Yevhen Tienkaiev <hronom@gmail.com> Signed-off-by: luis.costa <luis.costa@talkdesk.com> Co-authored-by: Tihomir Surdilovic <tihomir@temporal.io> Co-authored-by: Rob Holland <rob.holland@gmail.com> Co-authored-by: Temporal Data <commander-data@temporal.io> Co-authored-by: Kshitij Tulsyan <ktulsyan1990@gmail.com> Co-authored-by: Kshitij <kshitij.tulsyan@observe.ai> Co-authored-by: Jingyu <56581242+washanhanzi@users.noreply.github.com> Co-authored-by: Theo REY <account@reyth.dev> Co-authored-by: Alex Shtin <alex@shtin.com> Co-authored-by: Rob Holland <rob@temporal.io> Co-authored-by: Punit Kulal <punitkulal1996@gmail.com> Co-authored-by: Gerardo Enrique Mora Salazar <gerardo@ibm.com> Co-authored-by: Giovanny Gutiérrez <giovanny.gutierrez@commure.com> Co-authored-by: vogre <334187+vogre@users.noreply.github.com> Co-authored-by: Valentin Zayash <VLZZZ@users.noreply.github.com> Co-authored-by: Chris Taylor <taylor.cj@gmail.com> Co-authored-by: Grzegorz Kołakowski <grzegorz8@gmail.com> Co-authored-by: Prathyush PV <prathyushpv@gmail.com> Co-authored-by: sringel <903498+sringel@users.noreply.github.com> Co-authored-by: Alex Shtin <alex@temporal.io> Co-authored-by: David Calvert <david@0xdc.me> Co-authored-by: Roey Berman <roey@temporal.io> Co-authored-by: Rahul Kumar <rahulcomp24@gmail.com> Co-authored-by: Alex Garnett <axfelix@gmail.com> Co-authored-by: Sahil Vazirani <sahilvv@gmail.com> Co-authored-by: Quinn <116631861+qs-synth@users.noreply.github.com> Co-authored-by: Kristian Nordman <kristian@limber.no> Co-authored-by: Alex Tideman <alex.tideman@gmail.com> Co-authored-by: Csaba Tűz <124735422+csabatuz-chess@users.noreply.github.com> Co-authored-by: Manan Mangal <mananmangal@gmail.com> Co-authored-by: Manan Mangal <mmangal@paloaltonetworks.com> Co-authored-by: André Bauer <monotek@users.noreply.github.com> Co-authored-by: Mark Hofmeijer <83408614+mark-hofmeijer@users.noreply.github.com> Co-authored-by: Luong Vo <vo.tran.thanh.luong@gmail.com> Co-authored-by: Oleksandr Skoryi <askoriy@users.noreply.github.com> Co-authored-by: Freddie Rice <freddie.rice@gmail.com> Co-authored-by: Andrea Di Giorgi <adigiorgi@clickup.com> Co-authored-by: Gregory Haskins <gregory.haskins@gmail.com> Co-authored-by: dcaputo-harmoni <65166251+dcaputo-harmoni@users.noreply.github.com> Co-authored-by: Tom Wheeler <tom@temporal.io> Co-authored-by: Kevin NZUGUEM <32323481+nzuguem@users.noreply.github.com> Co-authored-by: alexk <42849762+alexku7@users.noreply.github.com> Co-authored-by: robert engels <robaho@users.noreply.github.com> Co-authored-by: Hung Chu <hungcqrt@gmail.com> Co-authored-by: Bill Moeller <bill@marcopolo.me> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Yevhen Tienkaiev <hronom@gmail.com> Co-authored-by: luismacosta <92727123+luismacosta@users.noreply.github.com> Co-authored-by: lsu-tc <168553658+lsu-tc@users.noreply.github.com> Co-authored-by: peter-c-larsson <48948282+peter-c-larsson@users.noreply.github.com> Co-authored-by: Alex Barganier <abarganier@users.noreply.github.com> Co-authored-by: Juan J. Jimenez-Anca <cortopy@users.noreply.github.com> Co-authored-by: Juan Jimenez <{ID}+{username}@users.noreply.github.com> Co-authored-by: Gifford Nowland <hi@giffordnowland.com> Co-authored-by: Gregory Haskins <greg@manetu.com> Co-authored-by: Phil Henning <philh@bitovi.com> Co-authored-by: Kent Gruber <kent.picat.gruber@gmail.com> Co-authored-by: M.Z. <m.zhivkov@abv.bg> Co-authored-by: Vitor de Moraes <vitor.np@gmail.com> Co-authored-by: Alex Stanfield <13949480+chaptersix@users.noreply.github.com>

[Feature Request] Document installing from helm repo #458

Description

Describe the solution you'd like

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions