ci(infra): Fix worker connect to temporal server - Githubissues

TracecatHQ / tracecat

The open source Tines / Splunk SOAR alternative for security engineers.

https://tracecat.com

GNU Affero General Public License v3.0

2.4k stars 168 forks source link

ci(infra): Fix worker connect to temporal server #252

Closed topher-lo closed 3 months ago

topher-lo commented 3 months ago

What changed

Remove unused port 8001 ingress rules (outdated worker logic from alpha)
Add command override to Fargate worker container definition
Fix: change Temporal port mapping (port 7233) app protocol to grpc
Consolidate all backend services into a into security group BackendSecurityGroup

Why

Entrypoint doesn't override command
Missing worker command override in fargate service
Worker temporal client cannot connect to temporal server (incorrectly configured app protocol: was http, now fixed to grpc)
Easier to understand security group rules (frontend, backend, tracecat db, temporal db)