mirrord-temporal

1# mirrord Temporal Splitting Configuration Skill
2 
3> Temporal splitting is configured with **`MirrordSplitConfig`** (which task queues to split + how the worker finds their names) and **`MirrordPropertyList`** (the Temporal frontend connection). Temporal has no native way to split a task queue, so the operator does it with a small gRPC proxy and virtual task queues — see "How it works" below. This is an **alpha** feature. Requires operator **3.170.0+**, CLI **3.221.0+**, and Kubernetes **1.30+** on the cluster running the split.
4 
5## Security Boundaries
6 
7> **IMPORTANT:** Follow these security rules for all operations in this skill.
8 
9- **No hardcoded credentials:** Never include actual Temporal Cloud API keys, TLS certificates, or private keys in generated `MirrordPropertyList` YAML. Reference a Kubernetes Secret with `valueFrom.secretKeyRef` per property.
10- **Credential protection:** Never ask the user to share API keys, certificates, or key material with the agent. Instruct them to create Kubernetes Secrets themselves and reference them by name.
11- **Secret creation guidance:** When telling the user to create a Secret, instruct `kubectl create secret generic ... --from-file=...` reading values from files (then delete the files). Do **not** suggest `--from-literal` for credential values — it exposes secrets in argv/shell history.
12…