poll-interval flag constraint and format
The --poll-interval flag used in temporal cloud namespace commands cannot be greater than 10 minutes and supports both minutes (m) and seconds (s) formats.
cli
564 notes in this subject, read out of this brain and free to use. This is page 3 of 10.
temporal cloud namespace user-group list command
The 'temporal cloud namespace user-group list' command lists the user groups that have access to a Temporal Cloud namespace, including both directly-assigned and inherited access. Supported flags: --api-key (optional); --namespace/-n (required); --page-size (optional, int); --page-token (optional, string); --server (optional). Example: temporal cloud namespace user-group list --namespace my-namespace.my-account
temporal cloud namespace tag list command
The 'temporal cloud namespace tag list' command lists all tags configured for a Temporal Cloud namespace. Supported flags: --api-key (optional); --namespace/-n (required); --server (optional). Example: temporal cloud namespace tag list --namespace my-namespace.my-account
temporal cloud namespace tag delete command
The 'temporal cloud namespace tag delete' command deletes a tag from a Temporal Cloud namespace by its key. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --key (required, string); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --server (optional). Example: temporal cloud namespace tag delete --namespace my-namespace.my-account --key environment
temporal cloud namespace tag create command
The 'temporal cloud namespace tag create' command creates a new tag for a Temporal Cloud namespace. Fails if a tag with the specified key already exists. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --key (required, string); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --server (optional); --value (required, string). Example: temporal cloud namespace tag create --namespace my-namespace.my-account --key environment --value production
temporal cloud namespace export list command flags
The 'temporal cloud namespace export list' command lists all workflow history export sinks configured for a Temporal Cloud namespace. Required flags: --namespace (string, fully qualified namespace name in format 'namespace.account', e.g., 'my-namespace.my-account'). Optional flags: --api-key (string, API key for authentication), --server (string, override API server address).
temporal cloud namespace search-attribute list command
The 'temporal cloud namespace search-attribute list' command lists all custom search attributes configured for a Temporal Cloud namespace. Supported flags: --api-key (optional); --namespace/-n (required); --server (optional). Example: temporal cloud namespace search-attribute list --namespace my-namespace.my-account
temporal cloud namespace search-attribute create command
The 'temporal cloud namespace search-attribute create' command creates a new custom search attribute for a Temporal Cloud namespace. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --name (required, string); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional); --type (required, string with valid values: Text, Keyword, Int, Double, Bool, Datetime, KeywordList). Example: temporal cloud namespace search-attribute create --namespace my-namespace.my-account --name MyField --type Keyword
temporal cloud namespace retention set command
The 'temporal cloud namespace retention set' command sets the data retention period for a Temporal Cloud namespace. The retention period defines how long closed workflow history data are stored. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --retention-days (required, int); --server (optional). Example: temporal cloud namespace retention set --namespace my-namespace.my-account --retention-days 14
temporal cloud namespace mtls get command
The 'temporal cloud namespace mtls get' command retrieves the current mTLS authentication configuration for a Temporal Cloud namespace. Supported flags: --api-key (optional); --namespace/-n (required); --server (optional). Example: temporal cloud namespace mtls get --namespace my-namespace.my-account
temporal cloud namespace mtls enable command
The 'temporal cloud namespace mtls enable' command enables mTLS authentication for a Temporal Cloud namespace. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional). Example: temporal cloud namespace mtls enable --namespace my-namespace.my-account
temporal cloud namespace mtls cert-filter list command
The 'temporal cloud namespace mtls cert-filter list' command lists all certificate filters configured for a Temporal Cloud namespace. Supported flags: --api-key (optional); --namespace/-n (required); --server (optional).
temporal cloud namespace mtls cert-filter delete command
The 'temporal cloud namespace mtls cert-filter delete' command deletes certificate filters from a Temporal Cloud namespace. Filters are matched by exact field equality. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --common-name (optional, string); --idempotent (optional); --namespace/-n (required); --organization (optional, string); --organizational-unit (optional, string); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional); --subject-alternative-name (optional, string).
temporal cloud namespace mtls cert-ca delete command
The 'temporal cloud namespace mtls cert-ca delete' command deletes client CA certificates from a Temporal Cloud namespace. This operation requires confirmation and will remove the specified certificates. Specify either --ca-certificate-file or --ca-certificate, but not both. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --ca-certificate (optional, string, mutually exclusive with --ca-certificate-file); --ca-certificate-file (optional, string, mutually exclusive with --ca-certificate); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional). Examples: temporal cloud namespace mtls cert-ca delete --namespace my-namespace.my-account --ca-certificate-file ca-cert.pem or temporal cloud namespace mtls cert-ca delete --namespace my-namespace.my-account --ca-certificate <base64-encoded-cert>
temporal cloud namespace mtls cert-ca create command
The 'temporal cloud namespace mtls cert-ca create' command adds client CA certificates to a Temporal Cloud namespace from a PEM file or base64 encoded string. Specify either --ca-certificate-file or --ca-certificate, but not both. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --ca-certificate (optional, string, mutually exclusive with --ca-certificate-file); --ca-certificate-file (optional, string, mutually exclusive with --ca-certificate); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional). Examples: temporal cloud namespace mtls cert-ca create --namespace my-namespace.my-account --ca-certificate-file ca-cert.pem or temporal cloud namespace mtls cert-ca create --namespace my-namespace.my-account --ca-certificate <base64-encoded-cert>
temporal cloud namespace lifecycle set command
The 'temporal cloud namespace lifecycle set' command sets the lifecycle configuration for a Temporal Cloud namespace, including delete protection to prevent accidental deletion. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --enable-delete-protection (required, bool); --idempotent (optional); --namespace/-n (required); --resource-version (optional); --server (optional); --verbose-diff (optional). Example: temporal cloud namespace lifecycle set --namespace my-namespace.my-account --enable-delete-protection true
temporal cloud namespace lifecycle get command
The 'temporal cloud namespace lifecycle get' command retrieves the current lifecycle configuration for a Temporal Cloud namespace, including delete protection status. Supported flags: --api-key (optional); --namespace/-n (required); --server (optional). Example: temporal cloud namespace lifecycle get --namespace my-namespace.my-account
temporal cloud namespace ha update command
The 'temporal cloud namespace ha update' command updates the High Availability configuration for a Temporal Cloud namespace. Use --auto-failover to enable or disable Temporal-managed automatic failover (accepted values: enabled, disabled). Use --passive-poller-forwarding to enable or disable passive poller forwarding (accepted values: enabled, disabled). Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --auto-failover (optional, string-enum); --idempotent (optional); --namespace/-n (required); --passive-poller-forwarding (optional, string-enum); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional). Example: temporal cloud namespace ha update --namespace my-namespace.my-account --auto-failover enabled --passive-poller-forwarding disabled
temporal cloud namespace ha region delete command
The 'temporal cloud namespace ha region delete' command removes a replica region from a Temporal Cloud namespace. A 7-day cooldown period applies before the same region can be re-added. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --region (required, e.g. aws-us-west-2); --resource-version/-v (optional); --server (optional). Example: temporal cloud namespace ha region delete --namespace my-namespace.my-account --region aws-us-west-2
temporal cloud namespace ha region add command
The 'temporal cloud namespace ha region add' command adds a replica region to a Temporal Cloud namespace as a passive replica that can later be used for failover. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --idempotent (optional); --namespace/-n (required); --poll-interval (optional, max 10 minutes); --region (required, e.g. aws-us-west-2); --resource-version/-v (optional); --server (optional). Example: temporal cloud namespace ha region add --namespace my-namespace.my-account --region aws-us-west-2
temporal cloud namespace ha get command
The 'temporal cloud namespace ha get' command retrieves the current High Availability configuration for a Temporal Cloud namespace, showing the active region, whether managed failover is enabled, and whether passive poller forwarding is enabled. Example: temporal cloud namespace ha get --namespace my-namespace.my-account. Supported flags: --api-key (string, optional); --namespace/-n (string, required); --server (string, optional).
temporal cloud namespace mtls cert-filter create command
The 'temporal cloud namespace mtls cert-filter create' command adds new certificate filters to a Temporal Cloud namespace. Certificate filters restrict mTLS connections to client certificates whose distinguished name properties match at least one of the filters. Supported flags: --api-key (optional); --async (optional); --async-operation-id (optional); --common-name (optional, string); --idempotent (optional); --namespace/-n (required); --organization (optional, string); --organizational-unit (optional, string); --poll-interval (optional, max 10 minutes); --resource-version/-v (optional); --server (optional); --subject-alternative-name (optional, string).
temporal cloud namespace ha failover flags
The 'temporal cloud namespace ha failover' command supports the following flags: --api-key (string, optional) for Temporal Cloud authentication; --async (bool, optional) to return immediately and use the returned operation ID to check status later; --async-operation-id (string, optional) for custom operation tracking; --idempotent (bool, optional) to succeed silently if resource already exists; --namespace/-n (string, required) in format 'namespace.account'; --poll-interval (duration, optional) to wait between status checks, cannot exceed 10 minutes, supports m and s; --region (string, required) as target region like aws-us-west-2; --server (string, optional) to override API server address.
temporal cloud namespace ha failover command purpose and flags
The 'temporal cloud namespace ha failover' command triggers a failover for a Temporal Cloud namespace to a different region. The target region must already be a replica region of the namespace. Required flags: --namespace (string, fully qualified namespace name), --region (string, target region for failover).
temporal cloud namespace get command flags and output
The 'temporal cloud namespace get' command retrieves the configuration and status of a Temporal Cloud namespace, returning details including region, retention period, endpoints, and certificate information. Required flags: --namespace (string, fully qualified namespace name in format 'namespace.account', e.g., 'my-namespace.my-account'). Optional flags: --api-key (string, API key for authentication), --server (string, override API server address), --spec (bool, output only namespace specification in JSON format, omitting metadata and status information).
temporal cloud namespace fairness set command flags
The 'temporal cloud namespace fairness set' command sets the task queue fairness configuration for a Temporal Cloud namespace. Required flags: --namespace (string, fully qualified namespace name), --enable-task-queue-fairness (bool, enable or disable task queue fairness for the namespace). Optional flags: --api-key (string, API key for authentication), --async (bool, return immediately), --async-operation-id (string, custom operation identifier), --idempotent (bool, succeed silently if no changes needed), --poll-interval (duration, max 10 minutes), --resource-version (string, for optimistic concurrency control), --server (string, override API server address).
temporal cloud namespace fairness get command flags
The 'temporal cloud namespace fairness get' command retrieves the current task queue fairness configuration for a Temporal Cloud namespace. Required flags: --namespace (string, fully qualified namespace name in format 'namespace.account', e.g., 'my-namespace.my-account'). Optional flags: --api-key (string, API key for authentication), --server (string, override API server address).
temporal cloud namespace export s3 validate command flags
The 'temporal cloud namespace export s3 validate' command validates an S3 workflow history export sink configuration without creating or updating it. A successful response means the configuration is valid. Required flags: --namespace (string, fully qualified namespace name), --sink-name (string, name of the export sink), --role-arn (string, IAM role ARN that Temporal Cloud assumes for writing to S3, e.g., 'arn:aws:iam::123456789012:role/my-role'), --bucket-name (string, name of destination S3 bucket), --region (string, AWS region where S3 bucket is located). Optional flags: --api-key (string, API key for authentication), --kms-arn (string, AWS KMS key ARN for server-side encryption), --server (string, override API server address).
temporal cloud namespace export s3 update command flags
The 'temporal cloud namespace export s3 update' command updates the configuration of an existing S3 workflow history export sink. Only provided flags are changed; omitted flags keep current values. Enabled/disabled state and region are preserved. Required flags: --namespace (string, fully qualified namespace name), --sink-name (string, name of the export sink). Optional flags: --api-key (string, API key for authentication), --async (bool, return immediately), --async-operation-id (string, custom operation identifier), --bucket-name (string, name of destination S3 bucket; if omitted, current value kept), --idempotent (bool, succeed silently if no changes needed), --kms-arn (string, AWS KMS key ARN; if omitted, current value kept), --poll-interval (duration, max 10 minutes), --resource-version (string, for optimistic concurrency control), --role-arn (string, IAM role ARN; if omitted, current value kept), --server (string, override API server address).
Temporal Cloud API key usage in CLI
The --api-key flag can be used instead of interactive login for automation and CI/CD pipelines when authenticating with Temporal Cloud via the CLI.
temporal cloud region list command
The 'temporal cloud region list' command lists all available Temporal Cloud regions. Example usage: temporal cloud region list. Flags: --api-key (optional string for automation), --server (optional string to override Cloud API server address).
temporal cloud region get command
The 'temporal cloud region get' command retrieves details for a specific Temporal Cloud region. Example usage: temporal cloud region get --region aws-us-east-1. Flags: --api-key (optional string for automation), --region/-r (required string for region ID), --server (optional string to override Cloud API server address).
temporal cloud service-account update command
Update a Temporal Cloud service account. Only flags explicitly provided are changed. For account-scoped service accounts, use --account-role and/or --namespace-access. For namespace-scoped service accounts, use --namespace-permission. Namespace access format: 'namespace=permission' where permission is one of: admin, write, read. Use 'namespace=' (empty permission) to remove access to a namespace. Required flag: --service-account-id (string, the ID of the service account to update). Optional flags: --account-role (string: owner, admin, developer, finance-admin, read, metrics-read; only valid for account-scoped service accounts), --api-key (string), --async (bool), --async-operation-id (string), --custom-role (string[], repeat to assign multiple; replaces existing custom role list), --description (string), --idempotent (bool), --name (string), --namespace-access (string[], format 'namespace=permission'; use 'namespace=' to remove access; repeat for multiple; only valid for account-scoped service accounts), --namespace-permission (string: admin, write, read; only valid for namespace-scoped service accounts), --poll-interval (duration, max 10 minutes, supports m and s), --resource-version or -v (string, for optimistic concurrency control; if not provided, current version is fetched automatically), --server (string).
temporal cloud service-account set-custom-roles command
Set the custom roles assigned to a Temporal Cloud service account. Replaces the service account's current custom role list. Pass no --custom-role flags to remove all custom roles. Not valid for namespace-scoped service accounts. Required flag: --service-account-id (string, the ID of the service account). Optional flags: --api-key (string), --async (bool), --async-operation-id (string), --custom-role (string[], custom role ID to assign, repeat to assign multiple; when provided, replaces existing custom role list), --idempotent (bool), --poll-interval (duration, max 10 minutes, supports m and s), --resource-version or -v (string, for optimistic concurrency control; if not provided, current version is fetched automatically), --server (string).
temporal cloud service-account get command
Retrieve the configuration and status of a Temporal Cloud service account. Required flag: --service-account-id (string, the ID of the service account to retrieve). Optional flags: --api-key (string), --server (string).
temporal cloud service-account edit command
Open a service account configuration in your default editor for interactive modification. After saving and closing the editor, changes are applied to Temporal Cloud. The editor is determined by the EDITOR environment variable, falling back to 'vi' if not set. Required flag: --service-account-id (string, the ID of the service account to edit). Optional flags: --api-key (string), --async (bool), --async-operation-id (string), --idempotent (bool), --poll-interval (duration, max 10 minutes, supports m and s), --resource-version or -v (string, for optimistic concurrency control; if not provided, current version is fetched automatically), --server (string), --verbose-diff (bool, show detailed differences between current and desired configurations).
temporal cloud service-account delete command
Delete a Temporal Cloud service account. This action is irreversible. Required flag: --service-account-id (string, the ID of the service account to delete). Optional flags: --api-key (string), --async (bool), --async-operation-id (string), --idempotent (bool), --poll-interval (duration, max 10 minutes, supports m and s), --resource-version or -v (string, for optimistic concurrency control; if not provided, current version is fetched automatically), --server (string).
temporal cloud service-account create-namespace-scoped command
Create a new Temporal Cloud service account scoped to a single namespace. Required flags: --name (string, must be unique across all active service accounts), --namespace (string, the namespace to scope to), --namespace-permission (string: admin, write, read). Optional flags: --api-key (string), --async (bool), --async-operation-id (string), --description (string), --idempotent (bool), --poll-interval (duration, max 10 minutes, supports m and s), --server (string).
temporal cloud service-account create command
Create a new Temporal Cloud service account with account-level access. Can optionally assign an account role and namespace-level permissions. Account roles available: owner, admin, developer, finance-admin, read, metrics-read. Namespace access format: 'namespace=permission' where permission is one of: admin, write, read. Required flag: --name (string, must be unique across all active service accounts). Optional flags: --account-role (string: owner, admin, developer, finance-admin, read, metrics-read), --api-key (string), --async (bool), --async-operation-id (string), --custom-role (string[], repeat to assign multiple), --description (string), --idempotent (bool), --namespace-access (string[], repeat for multiple), --poll-interval (duration, max 10 minutes, supports m and s), --server (string).
temporal cloud service-account list command
List all Temporal Cloud service accounts accessible with the current authentication credentials. Optional flags: --api-key (string), --page-size (int, number of service accounts to return per page), --page-token (string, for retrieving next page of results), --server (string).
temporal cloud user get example
temporal cloud user get --user-id my-user-id
temporal cloud user list example
temporal cloud user list
temporal cloud user edit example by email
temporal cloud user edit --user-email alice@example.com
temporal cloud user set-account-role example by user ID
temporal cloud user set-account-role --user-id my-user-id --account-role developer
temporal cloud user delete example by user ID
temporal cloud user delete --user-id my-user-id
temporal cloud user apply example file path
temporal cloud user apply --spec @user-spec.json
temporal cloud user apply example inline JSON
temporal cloud user apply --spec '{"email": "alice@example.com", "access": {"account_access": {"role": "developer"}}}'
temporal cloud user set-custom-roles command flags
The 'temporal cloud user set-custom-roles' command sets the custom roles assigned to a Temporal Cloud user, replacing the user's current custom role list. Pass no --custom-role flags to remove all custom roles. Specify the user with either --user-id or --user-email (not both). Flags: --api-key (string, optional), --async (bool, optional), --async-operation-id (string, optional), --custom-role (string[], optional, repeatable, replaces existing custom role list), --idempotent (bool, optional), --poll-interval (duration, optional, max 10 minutes, supports m and s), --resource-version/-v (string, optional), --server (string, optional), --user-email (string, optional, mutually exclusive with --user-id), --user-id (string, optional, mutually exclusive with --user-email).
temporal cloud user invite example with roles
temporal cloud user invite --email alice@example.com --account-role developer --namespace-access my-namespace.my-account=write
temporal cloud user list command flags
The 'temporal cloud user list' command lists all Temporal Cloud users accessible with the current authentication credentials. Flags: --api-key (string, optional), --email (string, optional, filter users by email address), --namespace (string, optional, filter users by namespace access), --page-size (int, optional, number of users per page), --page-token (string, optional, for paginated results), --server (string, optional).
temporal cloud user invite command flags
The 'temporal cloud user invite' command invites a user to Temporal Cloud by email and optionally assigns account-level roles and namespace-level access permissions. Account roles are: owner, admin, developer, finance-admin, read, metrics-read. Namespace access format is 'namespace=permission' where permission is one of: admin, write, read. Flags: --account-role (string, optional, valid values: owner, admin, developer, finance-admin, read, metrics-read), --api-key (string, optional), --async (bool, optional), --async-operation-id (string, optional), --custom-role (string[], optional, repeatable), --email (string, required), --idempotent (bool, optional), --namespace-access (string[], optional, repeatable, format namespace=permission), --poll-interval (duration, optional, max 10 minutes, supports m and s), --server (string, optional).
temporal cloud user get command flags
The 'temporal cloud user get' command retrieves the configuration and status of a Temporal Cloud user. Specify the user with either --user-id or --user-email (not both). Flags: --api-key (string, optional), --server (string, optional), --user-email (string, optional, mutually exclusive with --user-id), --user-id (string, optional, mutually exclusive with --user-email).
temporal cloud user edit command flags
The 'temporal cloud user edit' command opens a user configuration in your default editor for interactive modification. The editor is determined by the EDITOR environment variable, falling back to 'vi' if not set. Specify the user with either --user-id or --user-email (not both). Flags: --api-key (string, optional), --async (bool, optional), --async-operation-id (string, optional), --idempotent (bool, optional), --poll-interval (duration, optional, max 10 minutes, supports m and s), --resource-version/-v (string, optional), --server (string, optional), --user-email (string, optional, mutually exclusive with --user-id), --user-id (string, optional, mutually exclusive with --user-email), --verbose-diff (bool, optional).
temporal cloud user delete command flags
The 'temporal cloud user delete' command deletes a Temporal Cloud user irreversibly. Specify the user with either --user-id or --user-email (not both). Flags: --api-key (string, optional), --async (bool, optional), --async-operation-id (string, optional), --idempotent (bool, optional), --poll-interval (duration, optional, max 10 minutes, supports m and s), --resource-version/-v (string, optional), --server (string, optional), --user-email (string, optional, mutually exclusive with --user-id), --user-id (string, optional, mutually exclusive with --user-email).
temporal cloud user apply command flags
The 'temporal cloud user apply' command applies a user configuration to Temporal Cloud, creating a new user invitation if the email does not exist, or updating an existing user to match the specification. The specification can be provided as inline JSON or loaded from a file by prefixing the path with '@'. Flags: --api-key (string, optional), --async (bool, optional), --async-operation-id (string, optional), --idempotent (bool, optional), --poll-interval (duration, optional, max 10 minutes, supports m and s), --resource-version/-v (string, optional), --server (string, optional), --spec (string, required, JSON format or @path/to/file.json), --verbose-diff (bool, optional).
temporal cloud user delete example by email
temporal cloud user delete --user-email alice@example.com
temporal cloud user set-account-role example by email
temporal cloud user set-account-role --user-email alice@example.com --account-role admin
temporal cloud user edit example by user ID
temporal cloud user edit --user-id my-user-id
temporal cloud user set-custom-roles example
temporal cloud user set-custom-roles --user-email alice@example.com --custom-role role-id-1 --custom-role role-id-2
temporal cloud user set-namespace-permissions example remove access
temporal cloud user set-namespace-permissions --user-id my-user-id --namespace-access my-namespace.my-account=