Secures Temporal clusters using mTLS, role-based access control (RBAC), and network isolation policies.
The Temporal Security Configuration skill provides comprehensive guidance and implementation patterns for hardening Temporal workflow orchestration clusters. It simplifies the complex tasks of configuring mutual TLS (mTLS) for frontend and internode communication, setting up authorization plugins for RBAC, and defining Kubernetes network policies for traffic restriction. This skill is essential for developers and DevOps engineers needing to implement production-grade security, including certificate management, namespace isolation, and secure SDK client configuration, ensuring that workflow data and system access remain protected.
Key Features
01Secure Go SDK client setup for encrypted worker-to-frontend communication
020 GitHub stars
03Comprehensive production-readiness checklists for namespace isolation and audit logging
04Pre-configured Kubernetes NetworkPolicy templates for infrastructure-level security
05Implementation patterns for Role-Based Access Control (RBAC) and claim mapping
06Automated mTLS certificate generation and configuration for cluster components
Use Cases
01Configuring multi-tenant isolation using Temporal namespaces and specific authorization claims
02Hardening a production Temporal cluster against unauthorized access and data interception
03Automating the setup of mTLS for encrypted internode and client-to-server traffic
