[Feature Request] SDKs users should have a way to inject new certificates to a connection instance

[bergundy]

Go

Use the built-in Go TLS config GetClientCertificate callback.
(Is this obvious enough to users? Do we have a sample and some docs?)

TypeScript

In order to do this in the TypeScript client we'd need to recreate the client since it uses grpc.credentials.createSsl which don't support dynamic certs.

EDIT: This can be done via entire client replacement

Rust Core (used for the TypeScript worker)

TLS certs are statically provided to Core, we'd need a way to inject new certs.

EDIT: This can be done via entire client replacement

Per-SDK Tickets

• Go - Already supported sample: temporalio/samples-go@065f233
• Java - Already supported
• Core - Done via client replacement: Worker client replacement sdk-core#721
• TypeScript - [Feature Request] Client replacement in worker sdk-typescript#1412
• Python - [Feature Request] Client replacement in worker sdk-python#513
• .NET - [Feature Request] Client replacement in worker sdk-dotnet#235
• PHP - TODO
• Temporal CLI - N/A