feat(temporal): Add worker controller

values/argo/manifests/sys-project.yaml

@@ -160,3 +160,4 @@ spec:
   - public.ecr.aws/diagrid/catalyst
   - ghcr.io/haproxytech/helm-charts
   - https://go.temporal.io/helm-charts
+  - docker.io/temporalio

values/temporal/env-ekman.yaml.gotmpl

@@ -2,3 +2,4 @@ temporal:
   enabled: true
   autosync: false
   ingress: true
+  workerController: true

values/temporal/env.yaml.gotmpl

@@ -2,4 +2,5 @@ temporal:
   enabled: false
   autosync: false
   ingress: false
+  workerController: false
   cluster: {{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}

values/temporal/manifests/worker-controller.yaml

@@ -0,0 +1,45 @@
+{{- if and .Values.clusterConfig.argo.enabled .Values.temporal.workerController }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: temporal-worker-controller
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: temporal
+    server: 'https://kubernetes.default.svc'
+  sources:
+  # CRDs (WorkerDeployment, Connection, WorkerResourceTemplate).
+  - repoURL: 'docker.io/temporalio'
+    chart: temporal-worker-controller-crds
+    targetRevision: '0.26.0'
+  - repoURL: 'docker.io/temporalio'
+    chart: temporal-worker-controller
+    targetRevision: '0.26.0'
+    helm:
+      values: |
+        certmanager:
+          install: false
+          enabled: true
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: sys
+    syncOptions:
+      - ServerSideApply=true
+      - ApplyOutOfSyncOnly=true
+    {{- if .Values.temporal.autosync }}
+    automated:
+      prune: true
+    {{- end }}
+  ignoreDifferences:
+    - group: admissionregistration.k8s.io
+      kind: ValidatingWebhookConfiguration
+      jqPathExpressions:
+        - '.webhooks[]?.clientConfig.caBundle'
+{{- end }}