Add Dockerfile and shared connectionOptions

Author: lorensr

production/.dockerignore

@@ -0,0 +1 @@
+node_modules

production/.gitignore

@@ -1,3 +1,4 @@
 lib
 node_modules
-workflow-bundle.js
+workflow-bundle.js
+certs

production/Dockerfile

@@ -0,0 +1,20 @@
+# syntax=docker/dockerfile:1
+
+FROM node:16.14.2-bullseye
+
+RUN apt update && apt install -y ca-certificates
+
+ENV NODE_ENV=production
+WORKDIR /app
+
+COPY ["package.json", "./"]
+RUN npm install --production
+
+ARG TEMPORAL_SERVER="host.docker.internal:7233"
+ENV TEMPORAL_SERVER=$TEMPORAL_SERVER
+
+ARG NAMESPACE="default"
+ENV NAMESPACE=$NAMESPACE
+
+COPY . .
+CMD [ "node", "lib/worker.js" ]

production/README.md

@@ -23,5 +23,21 @@ Hello, Temporal!
 ### Running this sample in production
 
 1. `npm run build` to build the Worker script and Activities code.
-1. `npm run build:workflow` to build the Workflow code bundle.
-1. `NODE_ENV=production node lib/worker.js` to run the production Worker.
+2. `npm run build:workflow` to build the Workflow code bundle.
+3. `NODE_ENV=production node lib/worker.js` to run the production Worker.
+
+If you use Docker in production, replace step 3 with:
+
+```
+docker build . --tag my-temporal-worker --build-arg TEMPORAL_SERVER=host.docker.internal:7233
+docker run my-temporal-worker
+```
+
+### Connecting to deployed Temporal Server
+
+We use [`src/connection.ts`](./src/connection.ts) for connecting to Temporal Server from both the Client and Worker. When connecting to Temporal Server running on our local machine, the defaults (`localhost:7233` for `node lib/worker.js` and `host.docker.internal:7233` for Docker) work. When connecting to a production Temporal Server, we need to:
+
+- Put the TLS certificate in `certs/server.pem`
+- Put the TLS private key in `certs/server.key`
+- Provide the GRPC endpoint, like `TEMPORAL_SERVER=loren.temporal-dev.tmprl.cloud:7233`
+- Provide the namespace, like `NAMESPACE=loren.temporal-dev`

production/src/client.ts

@@ -1,13 +1,12 @@
 import { Connection, WorkflowClient } from '@temporalio/client';
+import { connectionOptions, namespace } from './connection';
 import { example } from './workflows';
 
 async function run() {
-  const connection = new Connection(); // Connect to localhost with default ConnectionOptions.
-  // In production, pass options to the Connection constructor to configure TLS and other settings.
-  // This is optional but we leave this here to remind you there is a gRPC connection being established.
+  const connection = new Connection(connectionOptions);
 
   const client = new WorkflowClient(connection.service, {
-    // In production you will likely specify `namespace` here; it is 'default' if omitted
+    namespace,
   });
 
   const result = await client.execute(example, {

production/src/connection.ts

@@ -0,0 +1,37 @@
+import { readFileSync } from 'fs';
+import { fileNotFound } from './errors';
+
+const { TEMPORAL_SERVER, NODE_ENV = 'development', NAMESPACE = 'default' } = process.env;
+
+export { NAMESPACE as namespace };
+
+const isDeployed = ['production', 'staging'].includes(NODE_ENV);
+
+interface ConnectionOptions {
+  address: string;
+  tls?: { clientCertPair: { crt: Buffer; key: Buffer } };
+}
+
+export const connectionOptions: ConnectionOptions = {
+  address: TEMPORAL_SERVER || 'localhost:7233',
+};
+
+if (isDeployed) {
+  try {
+    const crt = readFileSync('./certs/server.pem');
+    const key = readFileSync('./certs/server.key');
+
+    if (crt && key) {
+      connectionOptions.tls = {
+        clientCertPair: {
+          crt,
+          key,
+        },
+      };
+    }
+  } catch (e) {
+    if (!fileNotFound(e)) {
+      throw e;
+    }
+  }
+}

production/src/errors.ts

@@ -0,0 +1,20 @@
+type ErrorWithCode = {
+  code: string;
+};
+
+function isErrorWithCode(error: unknown): error is ErrorWithCode {
+  return (
+    typeof error === 'object' &&
+    error !== null &&
+    'code' in error &&
+    typeof (error as Record<string, unknown>).code === 'string'
+  );
+}
+
+export function getErrorCode(error: unknown) {
+  if (isErrorWithCode(error)) return error.code;
+}
+
+export function fileNotFound(error: unknown) {
+  return getErrorCode(error) === 'ENOENT';
+}

production/src/worker.ts

@@ -1,5 +1,6 @@
-import { Worker } from '@temporalio/worker';
+import { NativeConnection, Worker } from '@temporalio/worker';
 import * as activities from './activities';
+import { connectionOptions, namespace } from './connection';
 
 // @@@SNIPSTART typescript-production-worker
 const workflowOption = () =>
@@ -8,7 +9,11 @@ const workflowOption = () =>
     : { workflowsPath: require.resolve('./workflows') };
 
 async function run() {
+  const connection = await NativeConnection.create(connectionOptions);
+
   const worker = await Worker.create({
+    connection,
+    namespace,
     ...workflowOption(),
     activities,
     taskQueue: 'production-sample',