added repo

helm-templates/temporal/values/values.antiaffinity.yaml

@@ -0,0 +1,228 @@
+cassandra:
+  affinity:
+    podAntiAffinity:
+      preferredDuringSchedulingIgnoredDuringExecution:
+      - weight: 100
+        podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/component
+              operator: In
+              values:
+              - frontend
+              - history
+              - matching
+              - worker
+          topologyKey: kubernetes.io/hostname
+      - weight: 50
+        podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+            - key: app
+              operator: In
+              values:
+              - elasticsearch-master
+          topologyKey: kubernetes.io/hostname
+      - weight: 5
+        podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+            - key: app
+              operator: In
+              values:
+              - prometheus
+          topologyKey: kubernetes.io/hostname
+      - weight: 1
+        podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/name
+              operator: In
+              values:
+              - grafana
+          topologyKey: kubernetes.io/hostname
+      requiredDuringSchedulingIgnoredDuringExecution:
+      - labelSelector:
+          matchExpressions:
+          - key: app
+            operator: In
+            values:
+            - cassandra
+        topologyKey: kubernetes.io/hostname
+
+server:
+  frontend:
+    affinity:
+      podAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 50
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                 - history
+                 - matching
+                 - worker
+            topologyKey: kubernetes.io/hostname
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 100
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - cassandra
+            topologyKey: kubernetes.io/hostname
+        - weight: 75
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - elasticsearch-master
+            topologyKey: kubernetes.io/hostname    
+        requiredDuringSchedulingIgnoredDuringExecution:
+        - labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/component
+              operator: In
+              values:
+              - frontend
+          topologyKey: kubernetes.io/hostname
+ 
+  history:
+    affinity:
+      podAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 50
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                 - frontend
+                 - matching
+                 - worker
+            topologyKey: kubernetes.io/hostname
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 100
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - cassandra
+            topologyKey: kubernetes.io/hostname
+        - weight: 75
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - elasticsearch-master
+            topologyKey: kubernetes.io/hostname    
+        requiredDuringSchedulingIgnoredDuringExecution:
+        - labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/component
+              operator: In
+              values:
+              - history
+          topologyKey: kubernetes.io/hostname
+
+  matching:
+    affinity:
+      podAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 50
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                 - frontend
+                 - history
+                 - worker
+            topologyKey: kubernetes.io/hostname
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 100
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - cassandra
+            topologyKey: kubernetes.io/hostname
+        - weight: 75
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - elasticsearch-master
+            topologyKey: kubernetes.io/hostname
+        requiredDuringSchedulingIgnoredDuringExecution:
+        - labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/component
+              operator: In
+              values:
+              - matching
+          topologyKey: kubernetes.io/hostname
+
+  worker:
+    affinity:
+      podAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 50
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                 - frontend
+                 - matching
+                 - history
+            topologyKey: kubernetes.io/hostname
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+        - weight: 100
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - cassandra
+            topologyKey: kubernetes.io/hostname
+        - weight: 75
+          podAffinityTerm:
+            labelSelector:
+              matchExpressions:
+              - key: app
+                operator: In
+                values:
+                - elasticsearch-master
+            topologyKey: kubernetes.io/hostname
+        requiredDuringSchedulingIgnoredDuringExecution:
+        - labelSelector:
+            matchExpressions:
+            - key: app.kubernetes.io/component
+              operator: In
+              values:
+              - worker
+          topologyKey: kubernetes.io/hostname

helm-templates/temporal/values/values.archival.filestore.yaml

@@ -0,0 +1,25 @@
+server:
+  archival:
+    history:
+      state: "enabled"
+      enableRead: true
+      provider:
+        filestore:
+          fileMode: "0666"
+          dirMode: "0766"
+    visibility:
+      state: "enabled"
+      enableRead: true
+      provider:
+        filestore:
+          fileMode: "0666"
+          dirMode: "0766"
+
+  namespaceDefaults:
+    archival:
+      history:
+        state: "enabled"
+        URI: "file:///tmp/temporal_archival/development"
+      visibility:
+        state: "enabled"
+        URI: "file:///tmp/temporal_vis_archival/development"

helm-templates/temporal/values/values.archival.gcloud.yaml

@@ -0,0 +1,23 @@
+server:
+  archival:
+    history:
+      state: "enabled"
+      enableRead: true
+      provider:
+        gstorage:
+          credentialsPath: "/tmp/keyfile.json"
+    visibility:
+      state: "enabled"
+      enableRead: true
+      provider:
+        gstorage:
+          credentialsPath: "/tmp/keyfile.json"
+
+  namespaceDefaults:
+    archival:
+      history:
+        state: "enabled"
+        URI: "gs://my-bucket-cad/temporal_archival/development"
+      visibility:
+        state: "enabled"
+        URI: "gs://my-bucket-cad/temporal_archival/visibility"

helm-templates/temporal/values/values.archival.s3.yaml

@@ -0,0 +1,23 @@
+server:
+  archival:
+    history:
+      state: "enabled"
+      enableRead: true
+      provider:
+        s3store:
+          region: "us-east-1"
+    visibility:
+      state: "enabled"
+      enableRead: true
+      provider:
+        s3store:
+          region: "us-east-1"
+
+  namespaceDefaults:
+    archival:
+      history:
+        state: "enabled"
+        URI: "s3://archival-bucket-name"
+      visibility:
+        state: "enabled"
+        URI: "s3://visibility-archival-bucket-name"

helm-templates/temporal/values/values.aurora-mysql.yaml

@@ -0,0 +1,51 @@
+server:
+  config:
+    persistence:
+      default:
+        driver: "sql"
+
+        sql:
+          driver: "mysql8"
+          host: _HOST_
+          port: 3306
+          database: temporal
+          user: _USERNAME_
+          password: _PASSWORD_
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+          connectAttributes:
+            tx_isolation: 'READ-COMMITTED'
+
+      visibility:
+        driver: "sql"
+
+        sql:
+          driver: "mysql8"
+          host: _HOST_
+          port: 3306
+          database: temporal_visibility
+          user: _USERNAME_
+          password: _PASSWORD_
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+          connectAttributes:
+            tx_isolation: 'READ-COMMITTED'          
+
+cassandra:
+  enabled: false
+
+mysql:
+  enabled: true
+
+postgresql:
+  enabled: false
+
+schema:
+  createDatabase:
+    enabled: true
+  setup:
+    enabled: false
+  update:
+    enabled: false

helm-templates/temporal/values/values.cassandra.yaml

@@ -0,0 +1,57 @@
+server:
+  config:
+    logLevel: "debug,info"
+
+    numHistoryShards: 512
+
+    persistence:
+      default:
+        driver: "cassandra"
+
+#        faultInjection:
+#          targets:
+#            dataStores:
+#              ExecutionStore:
+#                methods:
+#                  GetCurrentExecution:
+#                    errors:
+#                      ResourceExhausted: 0.1
+#                  AppendHistoryNodes:
+#                    errors:
+#                      ResourceExhausted: 0.05
+#                  UpdateWorkflowExecution:
+#                    errors:
+#                      ResourceExhausted: 0.15
+#                  GetWorkflowExecution:
+#                    errors:
+#                      ResourceExhausted: 0.15
+
+        cassandra:
+          hosts: ["cassandra.default.svc.cluster.local"]
+          port: 9042
+          keyspace: temporal
+          user: "user"
+          password: "password"
+          existingSecret: ""
+          replicationFactor: 1
+          consistency:
+            default:
+              consistency: "local_quorum"
+              serialConsistency: "local_serial"
+
+cassandra:
+  enabled: false
+
+mysql:
+  enabled: false
+
+postgresql:
+  enabled: false
+
+schema:
+  createDatabase:
+    enabled: true
+  setup:
+    enabled: false
+  update:
+    enabled: false

helm-templates/temporal/values/values.cloudsqlproxy.yaml

@@ -0,0 +1,43 @@
+admintools:
+  additionalInitContainers:
+    - name: cloud-sql-proxy
+      image: gcr.io/cloudsql-docker/gce-proxy:1.17
+      command:
+        - "/cloud_sql_proxy"
+        - "-ip_address_types=PRIVATE"
+        - "-instances=_PROJECTNAME_:_REGION_:_INSTANCENAME_=tcp:5432"
+        - "-credential_file=/etc/google-cloud-key/key.json"
+      restartPolicy: Always
+      securityContext:
+        runAsNonRoot: true
+      volumeMounts:
+        - name: google-cloud-key
+          mountPath: /etc/google-cloud-key
+          readOnly: true
+
+  additionalVolumes:
+    - name: google-cloud-key
+      secret:
+        secretName: cloud-sql-proxy-sa
+
+server:
+  additionalInitContainers:
+    - name: cloud-sql-proxy
+      image: gcr.io/cloudsql-docker/gce-proxy:1.17
+      command:
+        - "/cloud_sql_proxy"
+        - "-ip_address_types=PRIVATE"
+        - "-instances=_PROJECTNAME_:_REGION_:_INSTANCENAME_=tcp:5432"
+        - "-credential_file=/etc/google-cloud-key/key.json"
+      restartPolicy: Always
+      securityContext:
+        runAsNonRoot: true
+      volumeMounts:
+        - name: google-cloud-key
+          mountPath: /etc/google-cloud-key
+          readOnly: true
+
+  additionalVolumes:
+    - name: google-cloud-key
+      secret:
+        secretName: cloud-sql-proxy-sa

helm-templates/temporal/values/values.dynamic_config.yaml

@@ -0,0 +1,8 @@
+server:
+  dynamicConfig:
+    matching.numTaskqueueReadPartitions:
+    - value: 5
+      constraints: {}
+    matching.numTaskqueueWritePartitions:
+    - value: 5
+      constraints: {}

helm-templates/temporal/values/values.elasticsearch.yaml

@@ -0,0 +1,8 @@
+elasticsearch:
+  enabled: false
+  external: true
+  host: "elasticsearch-master-headless"
+  port: "9200"
+  version: "v7"
+  scheme: "http"
+  logLevel: "error"

helm-templates/temporal/values/values.mysql.yaml

@@ -0,0 +1,47 @@
+server:
+  config:
+    persistence:
+      default:
+        driver: "sql"
+
+        sql:
+          driver: "mysql8"
+          host: _HOST_
+          port: 3306
+          database: temporal
+          user: _USERNAME_
+          password: _PASSWORD_
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+
+      visibility:
+        driver: "sql"
+
+        sql:
+          driver: "mysql8"
+          host: _HOST_
+          port: 3306
+          database: temporal_visibility
+          user: _USERNAME_
+          password: _PASSWORD_
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+
+cassandra:
+  enabled: false
+
+mysql:
+  enabled: true
+
+postgresql:
+  enabled: false
+
+schema:
+  createDatabase:
+    enabled: true
+  setup:
+    enabled: false
+  update:
+    enabled: false

helm-templates/temporal/values/values.ndc.yaml

@@ -0,0 +1,34 @@
+server:
+  config:
+    dcRedirectionPolicy:
+      policy: "selected-apis-forwarding"
+      toDC: ""
+
+    clusterMetadata:
+      enableGlobalNamespace: true
+      replicationConsumer:
+        type: rpc
+      failoverVersionIncrement: 100
+      masterClusterName: cluster_a
+      currentClusterName: # <current cluster name>
+      # clusterInformation:
+      #   <cluster name>:
+      #     enabled: true
+      #     initialFailoverVersion: <cluster initial failover version>
+      #     rpcName: "frontend"
+      #     rpcAddress: <cluster address:cluster port>
+      #   cluster_a:
+      #     enabled: true
+      #     initialFailoverVersion: 1
+      #     rpcName: "frontend"
+      #     rpcAddress: "localhost:7233"
+      #   cluster_b:
+      #     enabled: true
+      #     initialFailoverVersion: 2
+      #     rpcName: "frontend"
+      #     rpcAddress: "localhost:8233"
+      #   cluster_c:
+      #     enabled: false
+      #     initialFailoverVersion: 3
+      #     rpcName: "frontend"
+      #     rpcAddress: "localhost:9233"

helm-templates/temporal/values/values.postgresql.yaml

@@ -0,0 +1,84 @@
+server:
+  config:
+    persistence:
+      default:
+        driver: "sql"
+
+        sql:
+          driver: "postgres12"
+          host: _HOST_
+          port: 5432
+          database: temporal
+          user: _USERNAME_
+          password: _PASSWORD_
+          # for a production deployment use this instead of `password` and provision the secret beforehand e.g. with a sealed secret
+          # it has a single key called `password`
+          # existingSecret: temporal-default-store
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+          # tls:
+          #  enabled: true
+          #  enableHostVerification: true
+          #  serverName: _HOST_ # this is strictly required when using serverless CRDB offerings
+          #  caFile: /path/to/certs/<CA-file> # Here we assumed that caFile, certFile, keyFile are stored in one secret mounted as 'secret-with-certs' (see: server.additionalVolumes and server.additionalVolumeMounts sections).
+          #  certFile: /path/to/certs/<client-cert-file>
+          #  keyFile: /path/to/certs/<client-key-file>
+
+      visibility:
+        driver: "sql"
+
+        sql:
+          driver: "postgres12"
+          host: _HOST_
+          port: 5432
+          database: temporal_visibility
+          user: _USERNAME_
+          password: _PASSWORD_
+          # for a production deployment use this instead of `password` and provision the secret beforehand e.g. with a sealed secret
+          # it has a single key called `password`
+          # existingSecret: temporal-visibility-store
+          maxConns: 20
+          maxIdleConns: 20
+          maxConnLifetime: "1h"
+          # tls:
+          #  enabled: true
+          #  enableHostVerification: true
+          #  serverName: _HOST_ # this is strictly required when using serverless CRDB offerings
+          #  caFile: /path/to/certs/<CA-file> # Here we assumed that caFile, certFile, keyFile are stored in one secret mounted as 'secret-with-certs' (see: server.additionalVolumes and server.additionalVolumeMounts sections).
+          #  certFile: /path/to/certs/<client-cert-file>
+          #  keyFile: /path/to/certs/<client-key-file>
+
+  # additionalVolumes:
+  #   - name: secret-with-certs
+  #     secret:
+  #       secretName: secret-with-certs
+  # additionalVolumeMounts:
+  #   - name: secret-with-certs
+  #     mountPath: /path/to/certs/
+
+cassandra:
+  enabled: false
+
+mysql:
+  enabled: false
+
+postgresql:
+  enabled: true
+
+prometheus:
+  enabled: true
+
+grafana:
+  enabled: true
+  
+elasticsearch:
+  enabled: true
+
+schema:
+  createDatabase:
+    enabled: true
+  setup:
+    enabled: false
+  update:
+    enabled: false

helm-templates/temporal/values/values.prometheus.external.yaml

@@ -0,0 +1,28 @@
+prometheus: 
+  alertmanager:
+    enabled: false
+  alertmanagerFiles:
+    alertmanager.yml: {}
+  kubeStateMetrics:
+    enabled: false
+  nodeExporter:
+    enabled: false
+  pushgateway:
+    enabled: false
+  server:
+    persistentVolume:
+      enabled: false
+    extraArgs:
+      # minimal possible values
+      storage.tsdb.retention: 6h
+      storage.tsdb.min-block-duration: 2h
+      storage.tsdb.max-block-duration: 2h
+  serverFiles:
+    alerts: {}
+    prometheus.yml:
+      remote_write:
+        - url: _URL_
+          basic_auth:
+            password: _PASSWORD_
+            username: _USERNAME_
+    rules: {}

helm-templates/temporal/values/values.resources.yaml

@@ -0,0 +1,24 @@
+server:
+  frontend:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 512Mi
+
+  history:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 512Mi
+
+  matching:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 512Mi
+
+  worker:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 512Mi