Need help with automating namespace cert rotation in azure pipeline (Temporal Cloud)

Developer Corner
1

I’m working on automating the Azure DevOps Pipeline’s namespace cert rotation. worked on a unique project that required downloading the certificate from the Hashicorp vault. But due to a security policy, the tcld cli could not be installed on my agent. Is there anything else we can do about these?

2

I try using the tcld image but tcld command not found

Media
Media1735×1195 211 KB

3

Hi @kazeem — if I have referred above correctly, your container is created with temporalio/admin-tools image.
Upon inspecting the base image Dockerfile[Ref-1] and understanding the Makefile it doesn’t compile the tcld binary during the build time of admin-tool.

If your agent is based on container then you can create a custom image based on the above admin-tools as base image with tcld binary build from source which then you can push into your private registry & refer it your ADO pipeline.

Reference:
[1] docker-builds/admin-tools.Dockerfile at main · temporalio/docker-builds · GitHub

4

I was try to use docker build and run to execute acli commands instead of installing the CLI on a specific agent

5

As highlighted – it wont run, because the tcld binary is not preinstalled in the dockerimage.

However can you share the build and run command reference, which you were trying to run.

6

so i took another approach which is:- task: CmdLine@2 displayName: 'Clone Temporal CLI Repo' inputs: script: | git clone https://github.com/temporalio/tcld.git cd tcld make ls -la cp tcld $(Agent.TempDirectory) ls -la tcld version
but still getting error : -rwxr-xr-x 1 users Mar 20 15:49 tcld drwxr-xr-x users 84 Mar 20 15:48 utils linux/_work/_temp/e.sh: line 7: tcld: command not found ##[error]Bash exited with code '127'.