73 lines
2.1 KiB
YAML
73 lines
2.1 KiB
YAML
# Temporal Helm values for chart 0.55.x.
|
|
# Postgres credentials (password) are injected at runtime via extraEnv from the
|
|
# "temporal-db-creds" Secret managed by ExternalSecret (temporal/externalsecret-db-creds.yaml).
|
|
# DO NOT hardcode passwords here. Set TEMPORAL_DB_PASSWORD in Infisical first.
|
|
postgresql:
|
|
enabled: false
|
|
cassandra:
|
|
enabled: false
|
|
schema:
|
|
createDatabase:
|
|
enabled: true
|
|
setup:
|
|
enabled: true
|
|
update:
|
|
enabled: true
|
|
server:
|
|
replicaCount: 1
|
|
# Inject DB password from the ExternalSecret-managed Secret
|
|
extraEnv:
|
|
- name: TEMPORAL_DB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: temporal-db-creds
|
|
key: password
|
|
config:
|
|
persistence:
|
|
defaultStore: default
|
|
visibilityStore: default
|
|
numHistoryShards: 4
|
|
datastores:
|
|
default:
|
|
driver: "sql"
|
|
sql:
|
|
plugin: postgres12
|
|
databaseName: temporal
|
|
connectAddr: agentic-os-pg-rw.platform-data.svc.cluster.local:5432
|
|
connectProtocol: tcp
|
|
user: agentic_os
|
|
# Reference the injected env var; Temporal server reads TEMPORAL_DB_PASSWORD
|
|
# via its own env interpolation when password is left empty here.
|
|
password: "${TEMPORAL_DB_PASSWORD}"
|
|
maxConns: 20
|
|
maxIdleConns: 20
|
|
maxConnLifetime: "1h"
|
|
tls:
|
|
enabled: false
|
|
visibility:
|
|
driver: "sql"
|
|
sql:
|
|
plugin: postgres12
|
|
databaseName: temporal_visibility
|
|
connectAddr: agentic-os-pg-rw.platform-data.svc.cluster.local:5432
|
|
connectProtocol: tcp
|
|
user: agentic_os
|
|
password: "${TEMPORAL_DB_PASSWORD}"
|
|
maxConns: 20
|
|
maxIdleConns: 20
|
|
maxConnLifetime: "1h"
|
|
tls:
|
|
enabled: false
|
|
metrics:
|
|
enabled: true
|
|
# Prometheus scrape annotations added to temporal pods
|
|
serviceMonitor:
|
|
enabled: true
|
|
namespace: observability
|
|
elasticsearch:
|
|
enabled: false
|
|
prometheus:
|
|
enabled: false
|
|
grafana:
|
|
enabled: false
|