PSA/ee/helm/temporal-worker/README.md

Temporal Worker Helm Chart

This Helm chart deploys the Temporal Worker component for the Alga PSA application.

Overview

The Temporal Worker is responsible for executing workflows and activities in the Alga PSA system. It connects to a Temporal server and processes tasks from specified task queues.

Prerequisites

• Kubernetes 1.19+
• Helm 3.0+
• Temporal server deployed and accessible
• PostgreSQL database
• (Optional) HashiCorp Vault for secret management

Installation

Standalone Installation

To install the chart with the release name temporal-worker:

helm install temporal-worker ee/helm/temporal-worker/

As a Subchart

The temporal worker is included as an optional dependency in the main Alga PSA helm chart. To enable it:

helm install alga-psa helm/ --set temporal-worker.enabled=true

Configuration

The following table lists the configurable parameters and their default values.

Basic Configuration

Parameter	Description	Default
enabled	Enable/disable the temporal worker deployment	true
replicaCount	Number of worker replicas	2
image.repository	Container image repository	harbor.nineminds.com/nineminds/temporal-worker
image.tag	Container image tag	latest
image.pullPolicy	Image pull policy	Always
logLevel	Logging level (debug, info, warn, error)	info

Temporal Configuration

Parameter	Description	Default
temporal.address	Temporal frontend service address	temporal-frontend.temporal.svc.cluster.local:7233
temporal.namespace	Temporal namespace	default
temporal.taskQueue	Task queue name (comma-separated for multiple queues)	tenant-workflows,portal-domain-workflows,email-domain-workflows
temporal.maxConcurrentActivityExecutions	Max concurrent activities	10
temporal.maxConcurrentWorkflowTaskExecutions	Max concurrent workflow tasks	10

Database Configuration

Parameter	Description	Default
db.host	PostgreSQL host	postgresql.default.svc.cluster.local
db.port	PostgreSQL port	5432
db.serverDatabase	Database name	msp_server
db.user	Database user	msp_server
db.serverPasswordSecret.name	Secret name for DB password	db-secrets
db.serverPasswordSecret.key	Secret key for DB password	server-password

Secret Management

Parameter	Description	Default
vault.enabled	Enable Vault integration	false
vault.role	Vault role	temporal-worker
vault.secretPath	Vault secret path	secret/data/alga-psa/temporal-worker
secrets.internalApiSharedSecret	Shared secret for internal API (when Vault disabled)	change-me-in-production
secrets.algaAuthKey	Auth key (when Vault disabled)	change-me-in-production

Resources

Parameter	Description	Default
resources.limits.cpu	CPU limit	1000m
resources.limits.memory	Memory limit	1Gi
resources.requests.cpu	CPU request	200m
resources.requests.memory	Memory request	512Mi

Autoscaling

Parameter	Description	Default
autoscaling.enabled	Enable horizontal pod autoscaler	true
autoscaling.minReplicas	Minimum replicas	2
autoscaling.maxReplicas	Maximum replicas	10
autoscaling.targetCPUUtilizationPercentage	Target CPU utilization	70
autoscaling.targetMemoryUtilizationPercentage	Target memory utilization	80

Examples

Basic Installation with Custom Values

cat <<EOF > my-values.yaml
replicaCount: 3

temporal:
  address: my-temporal.example.com:7233
  taskQueue: my-task-queue

db:
  host: my-postgres.example.com
  serverPasswordSecret:
    name: my-db-secrets
    key: password

resources:
  requests:
    cpu: 500m
    memory: 1Gi
EOF

helm install temporal-worker ee/helm/temporal-worker/ -f my-values.yaml

Production Configuration with Vault

cat <<EOF > prod-values.yaml
replicaCount: 5

vault:
  enabled: true
  role: temporal-worker-prod
  secretPath: secret/data/prod/temporal-worker

resources:
  limits:
    cpu: 2000m
    memory: 4Gi
  requests:
    cpu: 1000m
    memory: 2Gi

autoscaling:
  enabled: true
  minReplicas: 5
  maxReplicas: 20
  targetCPUUtilizationPercentage: 60

podDisruptionBudget:
  enabled: true
  minAvailable: 2
EOF

helm install temporal-worker ee/helm/temporal-worker/ -f prod-values.yaml

Integration with Main Chart

cat <<EOF > alga-values.yaml
temporal-worker:
  enabled: true
  replicaCount: 3
  db:
    host: postgresql.default.svc.cluster.local
    serverPasswordSecret:
      name: alga-psa-db-secrets
      key: server-password
  applicationUrl: https://app.algapsa.com
EOF

helm install alga-psa helm/ -f alga-values.yaml

Upgrading

To upgrade an existing release:

helm upgrade temporal-worker ee/helm/temporal-worker/

Uninstalling

To uninstall/delete the release:

helm uninstall temporal-worker

Troubleshooting

Check Worker Status

kubectl get pods -l app.kubernetes.io/name=temporal-worker
kubectl logs -l app.kubernetes.io/name=temporal-worker

Verify Configuration

kubectl describe configmap <release-name>-temporal-worker

Common Issues

1. Worker not connecting to Temporal: Check the temporal.address configuration and ensure the Temporal frontend is accessible.

2. Database connection errors: Verify database credentials and connectivity. Check that the secrets are properly created.

3. High memory usage: Adjust temporal.maxConcurrentActivityExecutions and resource limits based on workload.

Development

For local development and testing:

# Render templates locally
helm template temporal-worker ee/helm/temporal-worker/

# Dry run installation
helm install temporal-worker ee/helm/temporal-worker/ --dry-run --debug

# Lint the chart
helm lint ee/helm/temporal-worker/

Support

For issues and questions, please refer to the main Alga PSA documentation or create an issue in the project repository.