You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It is working with local dockerized setup of temporal application and temporal server.
#temporal-application(Seperate pod) is not able to make secure network communication to temporal-auto-setup(Seperate pod) inside kubernetes.
Error:
[TransportError: transport error]
It is working with local dockerized setup of temporal application and temporal server.
#temporal-application(Seperate pod) is not able to make secure network communication to temporal-auto-setup(Seperate pod) inside kubernetes.
Error:
[TransportError: transport error]
To Reproduce:
I am using
1.Temporal-Application - https://github.com/temporalio/samples-typescript/blob/main/hello-world-mtls.
2.Temporal-Server(image - temporalio/auto-setup:1.13.1) - Generate test certificates with generate-test-certs.sh and Start Temporal with start-temporal.sh.
3.temporal-auto-setup container(image - temporalio/auto-setup:1.13.1) is deployed in separate pod and successful connection is made with Postgres db.
4.Environment Variables for temporal-auto-setup deployment:
containers:
- name: temporal-auto-setup
image: temporalio/auto-setup:1.13.1
env:
- name: AUTO_SETUP
value: "true"
- name: SKIP_DEFAULT_NAMESPACE_CREATION
value: "true"
- name: TEMPORAL_TLS_SERVER_CA_CERT
value: /path-to/ca.cert
- name: TEMPORAL_TLS_SERVER_CERT
value: /path-to/cluster.pem
- name: TEMPORAL_TLS_SERVER_KEY
value: /path-to/cluster.key
- name: TEMPORAL_TLS_REQUIRE_CLIENT_AUTH
value: "true"
- name: TEMPORAL_TLS_FRONTEND_CERT
value: /path-to/cluster.pem
- name: TEMPORAL_TLS_FRONTEND_KEY
value: /path-to/cluster.key
- name: TEMPORAL_TLS_CLIENT1_CA_CERT
value: /path-to/ca.cert
- name: TEMPORAL_TLS_CLIENT2_CA_CERT
value: /path-to/ca.cert
- name: TEMPORAL_TLS_INTERNODE_SERVER_NAME
value: tls-sample
- name: TEMPORAL_TLS_FRONTEND_SERVER_NAME
value: tls-sample
- name: TEMPORAL_TLS_FRONTEND_DISABLE_HOST_VERIFICATION
value: "false"
- name: TEMPORAL_TLS_INTERNODE_DISABLE_HOST_VERIFICATION
value: "false"
- name: TEMPORAL_CLI_ADDRESS
value: temporal-auto-setup.default.svc.cluster.local:7233
- name: TEMPORAL_GRPC_ENDPOINT
value: temporal-auto-setup.default.svc.cluster.local:7233
- name: TEMPORAL_CLI_TLS_CA
value: /path-to/ca.cert
- name: TEMPORAL_CLI_TLS_CERT
value: /path-to/cluster.pem
- name: TEMPORAL_CLI_TLS_KEY
value: /path-to/cluster.key
- name: TEMPORAL_CLI_TLS_ENABLE_HOST_VERIFICATION
value: "true"
- name: TEMPORAL_CLI_TLS_SERVER_NAME
value: tls-sample
- name: TEMPORAL_TLS_SERVER_NAME
value: tls-sample
- name: TEMPORAL_TLS_CERT_PATH
value: /path-to/cluster.pem
- name: TEMPORAL_TLS_KEY_PATH
value: /path-to/cluster.key
- name: TEMPORAL_TLS_CA_PATH
value: /path-to/ca.cert
- name: TEMPORAL_TLS_ENABLE_HOST_VERIFICATION
value: "true"
- name: SKIP_SCHEMA_SETUP
value: "false"
- name: DB
value: postgresql
- name: DB_PORT
value: "5432"
- name: POSTGRES_SEEDS
value: temporal.postgres.svc.cluster.local
- name: POSTGRES_USER
value: xxx
- name: POSTGRES_PWD
value: xxx
- name: TEMPORAL_STORE_PASSWORD
value: xxx
- name: TEMPORAL_VISIBILITY_STORE_PASSWORD
value: xxx
- name: DYNAMIC_CONFIG_FILE_PATH
value: "path-to/development.yaml"
- name: SQL_TLS
value: 'true'
- name: SQL_TLS_DISABLE_HOST_VERIFICATION
value: 'true'
- name: SQL_TLS_ENABLED
value: 'true'
- name: SQL_HOST_VERIFICATION
value: 'false'
5.Environment Variables for temporal-application deployment.
containers:
- name: temporal-application
image: localhost:5000/temporal-application:dev
imagePullPolicy: Always
env:
- name: TEMPORAL_SERVER_ROOT_CA_CERT_PATH
value: /path-to/ca.cert
- name: TEMPORAL_CLIENT_CERT_PATH
value: /path-to/client.pem
- name: TEMPORAL_CLIENT_KEY_PATH
value: /path-to/client.key
- name: TEMPORAL_NAMESPACE
value: default
- name: TEMPORAL_ADDRESS
value: temporal-auto-setup.default.svc.cluster.local
- name: TEMPORAL_SERVER_NAME_OVERRIDE
value: tls-sample
- name: TEMPORAL_GRPC_ENDPOINT
value: temporal-auto-setup.default.svc.cluster.local:7233
Kubernetes deployment made through kustomize method not helm charts.
The text was updated successfully, but these errors were encountered: