Temporal TLS

https://docs.temporal.io/references/configuration#tls

• Temporal API: 7233 GRPC
• server.config.tls
• server.config.persistence.sql.tls
• /etc/temporal/certs/

• TEMPORAL_TLS_
  • TEMPORAL_TLS_DISABLE_HOST_VERIFICATION

Temporal frontend (API)

server.config.tls
server.config.tls.internode
server.config.tls.frontend (Temporal API)

Temporal UI/web

• web.additionalEnv

• global.tls.frontend

Errors

• io.grpc.StatusRuntimeException: UNAVAILABLE: Network closed for unknown reason
• Certificate signed by unknown authority

Related

• Quarkus TLS
• requireClientAuth
• mTLS: clientCaFiles
• Temporal OAUTH
• Temporal CLI TLS
• certFile, keyFile

See also

• Temporal TLS: server.config.tls [ .internode | .frontend ], Ports, web.additionalEnv for Temporal UI, requireClientAuth (mTLS), /etc/temporal/certs/, TEMPORAL_TLS_ vars: TEMPORAL_TLS
• Temporal ports, 7233 GRPC, temporal-internal-frontend:7236
• Temporal Server (7233 GRPC), temporal server, Temporal Worker, Temporal Server Dashboards, OIDC, TLS, /etc/temporal/certs/, dynamic configuration reference, frontend.rps, DynamicConfig:, versions
• Temporal UI, oAuth, web., temporal-web, web.additionalEnv, web.additionalEnvSecretName, temporalio/ui, Env variables, ExtraObjects