temporalio / temporalio/temporal
Generate a signed token for each workflow activity
@mfateev is already working on this.
Since Jul 4, 2021.
- Dominant language
- Go
- Stars
- 23.2k
- Forks
- 1.9k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 228
Description
Is your feature request related to a problem? Please describe.
I would like to let temporal workers access external systems using their own identity, that certifies what activity/workflow a worker is executing, fro mwhich task list and so on. Very similar to what a GitLab job is able to do:
https://docs.gitlab.com/ee/ci/examples/authenticating-with-hashicorp-vault/
Describe the solution you'd like
I would like to have Cadence generate such an identity and provide it to a worker when the worker extracts some work to do from a task list. The cadence server can generate the signed token (or call a configurable plugin to generate it) and thus certify a set of information about the activity/workflow.
If you think this is something valuable we can discuss the design more in depth and then I can work to contribute the required code.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.