add grpc ingress setup

pluralsh · Sep 12, 2023 · b54ac72 · b54ac72
1 parent 8dfa420
commit b54ac72
Show file tree

Hide file tree

Showing 7 changed files with 57 additions and 1 deletion.
diff --git a/temporal/helm/temporal/Chart.yaml b/temporal/helm/temporal/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: temporal
 description: helm chart for temporal
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: "1.21.5"
 dependencies:
 - name: postgres

diff --git a/temporal/helm/temporal/templates/grpc-ingress.yaml b/temporal/helm/temporal/templates/grpc-ingress.yaml
@@ -0,0 +1,27 @@
+{{ if .Values.grpc.hostname }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+  {{ toYaml .Values.grpc.annotations | nindent 4 }}
+  name: grpc-ingress
+  labels:
+  {{ include "temporal-plural.labels" . | nindent 4 }}
+spec:
+  ingressClassName: {{ .Values.grpc.ingressClass }}
+  rules:
+  - host: {{ .Values.grpc.hostname }}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .Values.grpc.service }}
+            port:
+              name: {{ .Values.grpc.port }}
+  tls:
+  - secretName: temporal-grpc-tls
+    hosts:
+      - {{ .Values.grpc.hostname }}
+{{ end }}
diff --git a/temporal/helm/temporal/values.yaml b/temporal/helm/temporal/values.yaml
@@ -9,6 +9,17 @@ oidc:
   clientId: bogus
   clientSecret: bogus
 
+grpc:
+  hostname: ~
+  ingressClass: internal-nginx
+  service: temporal-frontend
+  port: grpc-rpc
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
+    kubernetes.io/tls-acme: "true"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+
 temporal:
   web:
     config:

diff --git a/temporal/helm/temporal/values.yaml.tpl b/temporal/helm/temporal/values.yaml.tpl
@@ -3,6 +3,15 @@ global:
     links:
     - description: temporal web ui
       url: {{ .Values.hostname }}
+    {{ if .Values.grpcHostname }}
+    - description: grpc endpoint
+      url: {{ .Values.grpcHostname }}
+    {{ end }}
+
+{{ if .Values.grpcHostname }}
+grpc:
+  hostname: {{ .Values.grpcHostname }}
+{{ end }}
 
 {{ if .OIDC }}
 oidc:

diff --git a/temporal/plural/recipes/temporal-aws.yaml b/temporal/plural/recipes/temporal-aws.yaml
@@ -19,6 +19,9 @@ sections:
   - name: hostname
     documentation: the fqdn for the temporal admin console
     type: DOMAIN
+  - name: grpcHostname
+    documentation: fqdn for temporals grpc service (this will be used for temporal clients)
+    type: DOMAIN
   items:
   - type: TERRAFORM
     name: aws

diff --git a/temporal/plural/recipes/temporal-azure.yaml b/temporal/plural/recipes/temporal-azure.yaml
@@ -19,6 +19,9 @@ sections:
   - name: hostname
     documentation: the fqdn for the temporal admin console
     type: DOMAIN
+  - name: grpcHostname
+    documentation: fqdn for temporals grpc service (this will be used for temporal clients)
+    type: DOMAIN
   items:
   - type: TERRAFORM
     name: azure

diff --git a/temporal/plural/recipes/temporal-gcp.yaml b/temporal/plural/recipes/temporal-gcp.yaml
@@ -19,6 +19,9 @@ sections:
   - name: hostname
     documentation: the fqdn for the temporal admin console
     type: DOMAIN
+  - name: grpcHostname
+    documentation: fqdn for temporals grpc service (this will be used for temporal clients)
+    type: DOMAIN
   items:
   - type: TERRAFORM
     name: gcp