temporalio / temporalio/temporal-worker-controller

Add Watch namespace support

Open
#196 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
187
Forks
70
Avg merge
4d 1h
Merged PRs (30d)
31

Description

Hello, I worked on a small PR that adds optional namespace scoping to the Temporal Worker Controller.

The controller can be restricted to a single namespace or a comma-separated
list of namespaces using the --watch-namespace flag or WATCH_NAMESPACE
environment variable.

When multiple namespaces are specified, the controller uses a multi-namespaced
cache and does not require cluster-wide watch permissions.

If unset, the controller preserves its existing cluster-wide behavior.

I also modified the rbac.yaml file to automatically create Roles instead of ClusterRoles when a specific key is set in the values (only usable when only one namespace is specified)

Tested on my side without any issue.

Could I create the pullRequest for review ?

Many thanks !

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the Temporal Worker Controller entry point and the handling for --watch-namespace and WATCH_NAMESPACE. Review rbac.yaml and the existing cache configuration, then verify single-namespace, multi-namespace, and unset-namespace behavior, including the expected Role or ClusterRole permissions.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.