temporal: Expose grpc ingress on ekman

values/temporal/env-ekman.yaml.gotmpl

@@ -2,4 +2,5 @@ temporal:
   enabled: true
   autosync: false
   ingress: true
+  grpcIngress: true
   workerController: true

values/temporal/env.yaml.gotmpl

@@ -2,5 +2,6 @@ temporal:
   enabled: false
   autosync: false
   ingress: false
+  grpcIngress: false
   workerController: false
   cluster: {{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}

values/temporal/manifests/ingress-grpc.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.temporal.grpcIngress }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: temporal-frontend-grpc
+  namespace: temporal
+  annotations:
+    cert-manager.io/cluster-issuer: {{ .Values.clusterConfig.ingress_clusterissuer }}
+    nginx.ingress.kubernetes.io/backend-protocol: GRPC
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    oceanbox.io/expose: internal
+  labels:
+    app.kubernetes.io/name: temporal
+    app.kubernetes.io/component: frontend
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: temporal-grpc.{{ .Values.clusterConfig.domain }}
+    http:
+      paths:
+      - backend:
+          service:
+            name: temporal-frontend
+            port:
+              number: 7233
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - temporal-grpc.{{ .Values.clusterConfig.domain }}
+    secretName: temporal-grpc.{{ .Values.clusterConfig.domain }}-tls
+{{- end }}