server: config: persistence: default: driver: "sql" sql: driver: "postgres12" host: _HOST_ port: 5432 database: temporal user: _USERNAME_ password: _PASSWORD_ # for a production deployment use this instead of `password` and provision the secret beforehand e.g. with a sealed secret # it has a single key called `password` # existingSecret: temporal-default-store maxConns: 20 maxIdleConns: 20 maxConnLifetime: "1h" # tls: # enabled: true # enableHostVerification: true # serverName: _HOST_ # this is strictly required when using serverless CRDB offerings # caFile: /path/to/certs/ # Here we assumed that caFile, certFile, keyFile are stored in one secret mounted as 'secret-with-certs' (see: server.additionalVolumes and server.additionalVolumeMounts sections). # certFile: /path/to/certs/ # keyFile: /path/to/certs/ visibility: driver: "sql" sql: driver: "postgres12" host: _HOST_ port: 5432 database: temporal_visibility user: _USERNAME_ password: _PASSWORD_ # for a production deployment use this instead of `password` and provision the secret beforehand e.g. with a sealed secret # it has a single key called `password` # existingSecret: temporal-visibility-store maxConns: 20 maxIdleConns: 20 maxConnLifetime: "1h" # tls: # enabled: true # enableHostVerification: true # serverName: _HOST_ # this is strictly required when using serverless CRDB offerings # caFile: /path/to/certs/ # Here we assumed that caFile, certFile, keyFile are stored in one secret mounted as 'secret-with-certs' (see: server.additionalVolumes and server.additionalVolumeMounts sections). # certFile: /path/to/certs/ # keyFile: /path/to/certs/ # additionalVolumes: # - name: secret-with-certs # secret: # secretName: secret-with-certs # additionalVolumeMounts: # - name: secret-with-certs # mountPath: /path/to/certs/ cassandra: enabled: false mysql: enabled: false postgresql: enabled: true prometheus: enabled: true grafana: enabled: true elasticsearch: enabled: true schema: createDatabase: enabled: true setup: enabled: false update: enabled: false