Skip to content

v0.15.0

Choose a tag to compare

View all tags
@lsm lsm released this 11 Feb 23:59
v0.15.0
a9e0d59

v0.15.0 - Azure Workload Identity Authentication for Temporal Sink

🚀 New Feature: Azure Workload Identity for Temporal

Adds Azure Workload Identity authentication support for the Temporal sink, enabling Fiso Flow to authenticate to Temporal Cloud or self-hosted Temporal servers using Azure Entra ID when running on Azure Kubernetes Service (AKS).

What's New

Azure Workload Identity Authentication:

  • Seamless authentication to Temporal using Azure Entra ID
  • Support for Azure Workload Identity (AKS pod identity)
  • Support for Azure Managed Identity (DefaultAzureCredential)
  • Support for Service Principal credentials
  • Support for Azure CLI credentials (for local development)

Configuration:

temporal:
  client:
    host: "your-tenant.tmprl.cloud:7233"
    namespace: "your-namespace"
    tls:
      enabled: true
    auth:
      azure:
        scope: "api://{temporal-app-id}/.default"

Use Cases

This feature is ideal for:

  • AKS Deployments: Use Workload Identity to authenticate without managing secrets
  • Azure Integration: Leverage Azure's identity platform for Temporal authentication
  • Zero-Trust Security: Eliminate hardcoded credentials in favor of managed identity

Security

  • No client secrets required when using Workload Identity or Managed Identity
  • Automatic token refresh handled by Azure SDK
  • Follows Azure best practices for workload identity

Testing

  • Unit tests for Azure credential configuration
  • Integration tests for Temporal authentication
  • All existing tests pass (backward compatible)

📦 Installation

# Download binaries from the assets below

# Or use Docker
docker pull ghcr.io/lsm/fiso-flow:v0.15.0
docker pull ghcr.io/lsm/fiso-link:v0.15.0

🔗 Links

🙏 Contributors

Thanks to everyone who contributed to this release!

Assets 9
Loading