wpb-22439 7 docs wiab staging by mohitrajain · Pull Request #851 · wireapp/wire-server-deploy

mohitrajain · 2025-12-31T17:18:38Z

Summary of changes :

Adding awiab-staging documetation to wire-server-deploy and fix coturn port ranges
small change for bin/offline-vm-setup.sh

This ticket is part of cascading PRs:
#852 - clean old wiab staging script and workflows
#853 - Testing wiab-staging solution for wire-server-5.14

No labels:
The changes in the PR will be verified in #853

Change type

Fix
Feature
Documentation
Security / Upgrade

Basic information

THIS CHANGE REQUIRES A DEPLOYMENT PACKAGE RELEASE
THIS CHANGE REQUIRES A WIRE-DOCS RELEASE

Testing

I ran/applied the changes myself, in a test environment.
The CI job attached to this repo will test it for me.

Offline Build CI (label-based)

Add one or more labels to trigger offline builds:

build-default - Full production build (ansible, terraform, all packages)
build-demo - Demo/WIAB build
build-min - Minimal build (fastest, essential charts only)
build-all - Run all three builds

Note: No builds run by default. Add a label to trigger CI.

Tracking

I added a new entry in an appropriate subdirectory of changelog.d
I mentioned this PR in Jira, OR I mentioned the Jira ticket in this PR.
I mentioned this PR in one of the issues attached to one of our repositories.

Knowledge Transfer

An Asciinema session is attached to the Jira ticket.

Motivation

Objective

Reason

Use case

Veki301 · 2026-01-28T07:28:05Z

changelog.d/3-deploy-builds/wiab-staging

 Added: terraform resources for wiab-staging
 Added: cd_staging script to verify the default build bundle
 Changed: changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build
+Added: wiab-staging documetation to wire-server-deploy and fix coturn port ranges


Veki301 · 2026-01-28T07:29:21Z

offline/wiab-staging.md

+- One physical machine with hypervisor support:
+  - **Memory:** 55 GiB RAM
+  - **Compute:** 29 vCPUs  
+  - **Storage:** 550 GB disk space (thin-provisioned)


inconsistent requirements #1

Veki301 · 2026-01-28T07:29:35Z

offline/wiab-staging.md

+| assethost | Asset/Storage Server | 4 GiB | 2 | 100 GB |
+| kubenode1 | Kubernetes Node 1 | 9 GiB | 5 | 150 GB |
+| kubenode2 | Kubernetes Node 2 | 9 GiB | 5 | 150 GB |
+| kubenode3 | Kubernetes Node 3 | 9 GiB | 5 | 150 GB |


inconsistent requirements #2

Veki301 · 2026-01-28T07:40:01Z

offline/wiab-staging.md

+  - Source the `bin/offline-env.sh` shell script to set up a `d` alias that runs commands inside a Docker container with all necessary tools for offline deployment.
+
+- **[Generating secrets](docs_ubuntu_22.04.md#generating-secrets)**
+  - Run `./bin/offline-secrets.sh` to generate fresh secrets for Minio and coturn services. This creates two secret files: `ansible/inventory/group_vars/all/secrets.yaml` and `values/wire-server/secrets.yaml`.


values/wire-server/secrets.yaml does not get generated anymore, now its prod-secrets.example.yaml, which also brings the question, why ?

#858 - it is generated here and this PR came post creating this documentation, and the idea is to create a copy first from prod-secrets.example.yaml to secrets.yaml for each chart and make changes directly to this secrets.yaml and values.yaml, so that an admin can understand what changes has been done by our scripts. As of now, the changes are going to prod-secrets.example.yaml in #858 I will patch it to make offline-secrets run post creating the copies.

Veki301 · 2026-01-28T07:40:55Z

offline/wiab-staging.md

+- **Deploying Helm charts**
+  - **[Deploying stateless services and other dependencies](docs_ubuntu_22.04.md#deploying-stateless-dependencies)**
+    - Deploy cassandra-external, elasticsearch-external, minio-external, and databases-ephemeral helm charts to set up connections to external data services and stateless database dependencies.
+


you are missing rabbitmq here, which causes the deployment to fail

rabbitmq is coming from the helm chart, In the recent failure, i was trying to enable it again. As of this PR, rabbitmq is getting deployed using helm chart.
https://github.com/wireapp/wire-server-deploy/blob/master/bin/offline-cluster.sh#L55

Veki301 · 2026-01-28T07:41:46Z

offline/wiab-staging.md

+
+- **Deploying Helm charts**
+  - **[Deploying stateless services and other dependencies](docs_ubuntu_22.04.md#deploying-stateless-dependencies)**
+    - Deploy cassandra-external, elasticsearch-external, minio-external, and databases-ephemeral helm charts to set up connections to external data services and stateless database dependencies.


reaper does not deploy

Failed to pull image "docker.io/bitnamilegacy/kubectl:1.32.9": rpc error: code = NotFound desc = failed to pull and unpack image "docker.io/bitnamilegacy/kubectl:1.32.9": failed to resolve reference "docker.io/bitnamilegacy/kubectl:1.32.9": docker.io/bitnamilegacy/kubectl:1.32.9: not found

Where is it happening, can you please share the run?

Veki301 · 2026-01-28T07:43:01Z

offline/wiab-staging.md

+### Network & Security
+
+- **[Enabling emails for wire](smtp.md)**
+  - Configure SMTP for user onboarding via email. Deploy either a temporary SMTP service included in the bundle or integrate with your existing SMTP relay, and ensure proper network configuration for email delivery.


you can remove this, I dont see why anybody would be bothering with setting up DKIM for a test environment

smtp can be deployed without setting up DKIM and we would need some kind of mail service to enable user creation and testing

Veki301

documentation incomplete

Veki301 · 2026-01-28T13:25:05Z

offline/wiab-staging.md

@@ -0,0 +1,220 @@
+# Scope
+


documentation is incomplete, as we have discussed in our meeting

…gle_hetzner_machine_installation

* fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation

sonarqubecloud · 2026-02-18T10:33:16Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

* fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

* build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

* build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

* fix: wpb-21356 fix node types for assethost and adminhost * build: wpb-21356 add changelog for terraform wiab-staging resources * fix: wpb-22439 fix wiab-staging hetzner setup_nodes playbook to handle connection issue * build: wpb-22439 add cd_staging script (#849) * build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

…nventory (#847) * fix: wpb-21356 rebase from wpb-21356-ansible-VM-provisioning * fix: wpb-21356 offline-deploy.sh for SSH_AUTH_SOCK handling * fix: wpb-21356 remove defunct passwords for postgresql * fix: wpb-22439 add terraform resources for wiab-staging (#848) * fix: wpb-21356 fix node types for assethost and adminhost * build: wpb-21356 add changelog for terraform wiab-staging resources * fix: wpb-22439 fix wiab-staging hetzner setup_nodes playbook to handle connection issue * build: wpb-22439 add cd_staging script (#849) * build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

* fix: wpb-21356 rename ansible templates for wiab-staging to make them generic * build: wpb-21356 wiab-staging VMs ansible inventory template to be populated by wiab-staging-provision.yml playbook * build: wpb-21356 ansible playbook for wiab-staging VM provisioning * build: wpb-21356 add ansible inventory for playbook wiab-staging-provision.yml * fix: wpb-21356 rebase from wpb-21356-update-vm-management * fix: wpb-21356 remove vars specific to Hetzner CI process * fix: wpb-22439 remove screen package from wiab-staging-provision.yml ansible playbook * fix: wpb-22439 simplify the wiab-staging inventory to use ansible children instead of creating unique nodes * fix: wpb-22439 ansible playbook wiab-staging-provision.yml to consider the inventory changes * fix: wpb-22439 postgresql_rw and ro group inventory * fix: wpb-22439 fix wiab-staging inventory elasticsearch group name * fix: wpb-22439 fix wiab-staging inventory elasticsearch group names * fix: wpb-22439 remove sshd config template as it is not functionally required * fix: wpb-22439 moved artifact hash to wiab-staging inventory * fix: wpb-22439 fix secondary inventory creation, organize playbook using tags and separate out wiab-staging-nftables playbook * fix: wpb-22439 allow for load balancing for ingress-controller, variable usage to define each k8s node and calling node and add comments * fix: wpb-22439 add wiab-staging-nftables.yaml playbook to manage nftables rules * fix: wpb-22439 allow rabbitmq ansible inventory for wiab-staging * wpb-22439 minor fixes for bin/offline-deploy.sh and cd.sh terraform inventory (#847) * fix: wpb-21356 rebase from wpb-21356-ansible-VM-provisioning * fix: wpb-21356 offline-deploy.sh for SSH_AUTH_SOCK handling * fix: wpb-21356 remove defunct passwords for postgresql * fix: wpb-22439 add terraform resources for wiab-staging (#848) * fix: wpb-21356 fix node types for assethost and adminhost * build: wpb-21356 add changelog for terraform wiab-staging resources * fix: wpb-22439 fix wiab-staging hetzner setup_nodes playbook to handle connection issue * build: wpb-22439 add cd_staging script (#849) * build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation

* fix: wpb-21356 offline-vm-setup script to use ubuntu cloud image, local seed iso and VM verification process * fix: wpb-21356 linting issues and push changelog * fix: wpb-22439 memory requirements for VMs in offline-vm-setup.sh * fix: wpb-22439 fix kubenode disk size * Update changelog.d/3-deploy-builds/wiab-staging * fix: wpb-22439 fix offline-vm-setup.sh * fix: wpb-22439 BASE_IMAGE_DIR value * wpb-22439 wiab-staging: ansible prepare host for vm provisioning (#846) * fix: wpb-21356 rename ansible templates for wiab-staging to make them generic * build: wpb-21356 wiab-staging VMs ansible inventory template to be populated by wiab-staging-provision.yml playbook * build: wpb-21356 ansible playbook for wiab-staging VM provisioning * build: wpb-21356 add ansible inventory for playbook wiab-staging-provision.yml * fix: wpb-21356 rebase from wpb-21356-update-vm-management * fix: wpb-21356 remove vars specific to Hetzner CI process * fix: wpb-22439 remove screen package from wiab-staging-provision.yml ansible playbook * fix: wpb-22439 simplify the wiab-staging inventory to use ansible children instead of creating unique nodes * fix: wpb-22439 ansible playbook wiab-staging-provision.yml to consider the inventory changes * fix: wpb-22439 postgresql_rw and ro group inventory * fix: wpb-22439 fix wiab-staging inventory elasticsearch group name * fix: wpb-22439 fix wiab-staging inventory elasticsearch group names * fix: wpb-22439 remove sshd config template as it is not functionally required * fix: wpb-22439 moved artifact hash to wiab-staging inventory * fix: wpb-22439 fix secondary inventory creation, organize playbook using tags and separate out wiab-staging-nftables playbook * fix: wpb-22439 allow for load balancing for ingress-controller, variable usage to define each k8s node and calling node and add comments * fix: wpb-22439 add wiab-staging-nftables.yaml playbook to manage nftables rules * fix: wpb-22439 allow rabbitmq ansible inventory for wiab-staging * wpb-22439 minor fixes for bin/offline-deploy.sh and cd.sh terraform inventory (#847) * fix: wpb-21356 rebase from wpb-21356-ansible-VM-provisioning * fix: wpb-21356 offline-deploy.sh for SSH_AUTH_SOCK handling * fix: wpb-21356 remove defunct passwords for postgresql * fix: wpb-22439 add terraform resources for wiab-staging (#848) * fix: wpb-21356 fix node types for assethost and adminhost * build: wpb-21356 add changelog for terraform wiab-staging resources * fix: wpb-22439 fix wiab-staging hetzner setup_nodes playbook to handle connection issue * build: wpb-22439 add cd_staging script (#849) * build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation --------- Co-authored-by: Julia Longtin <julia.longtin@wire.com>

* fix: wpb-22439 enable rabbitmq deployment via ansible * fix: wpb-22439 fix static inventory for rabbitmq to remove nodename dependency * fix: wpb-22439 enable deploying rabbitmq-external and stop deploying rabbitmq chart * fix: wpb-22439 enable creating dedicated nodes for rabbitmq VMs * fix: wpb-22439 fix rmq-cluster inventory group name for rabbitmq terraform created nodes * fix: wpb-22439 include rmq-cluster nodes for networking fix * fix: wpb-22439 refactor node names in hetzner terraform for rabbitmq * fix: wpb-22439 offline-vm-setup script to manage VMs wiab-staging (#845) * fix: wpb-21356 offline-vm-setup script to use ubuntu cloud image, local seed iso and VM verification process * fix: wpb-21356 linting issues and push changelog * fix: wpb-22439 memory requirements for VMs in offline-vm-setup.sh * fix: wpb-22439 fix kubenode disk size * Update changelog.d/3-deploy-builds/wiab-staging * fix: wpb-22439 fix offline-vm-setup.sh * fix: wpb-22439 BASE_IMAGE_DIR value * wpb-22439 wiab-staging: ansible prepare host for vm provisioning (#846) * fix: wpb-21356 rename ansible templates for wiab-staging to make them generic * build: wpb-21356 wiab-staging VMs ansible inventory template to be populated by wiab-staging-provision.yml playbook * build: wpb-21356 ansible playbook for wiab-staging VM provisioning * build: wpb-21356 add ansible inventory for playbook wiab-staging-provision.yml * fix: wpb-21356 rebase from wpb-21356-update-vm-management * fix: wpb-21356 remove vars specific to Hetzner CI process * fix: wpb-22439 remove screen package from wiab-staging-provision.yml ansible playbook * fix: wpb-22439 simplify the wiab-staging inventory to use ansible children instead of creating unique nodes * fix: wpb-22439 ansible playbook wiab-staging-provision.yml to consider the inventory changes * fix: wpb-22439 postgresql_rw and ro group inventory * fix: wpb-22439 fix wiab-staging inventory elasticsearch group name * fix: wpb-22439 fix wiab-staging inventory elasticsearch group names * fix: wpb-22439 remove sshd config template as it is not functionally required * fix: wpb-22439 moved artifact hash to wiab-staging inventory * fix: wpb-22439 fix secondary inventory creation, organize playbook using tags and separate out wiab-staging-nftables playbook * fix: wpb-22439 allow for load balancing for ingress-controller, variable usage to define each k8s node and calling node and add comments * fix: wpb-22439 add wiab-staging-nftables.yaml playbook to manage nftables rules * fix: wpb-22439 allow rabbitmq ansible inventory for wiab-staging * wpb-22439 minor fixes for bin/offline-deploy.sh and cd.sh terraform inventory (#847) * fix: wpb-21356 rebase from wpb-21356-ansible-VM-provisioning * fix: wpb-21356 offline-deploy.sh for SSH_AUTH_SOCK handling * fix: wpb-21356 remove defunct passwords for postgresql * fix: wpb-22439 add terraform resources for wiab-staging (#848) * fix: wpb-21356 fix node types for assethost and adminhost * build: wpb-21356 add changelog for terraform wiab-staging resources * fix: wpb-22439 fix wiab-staging hetzner setup_nodes playbook to handle connection issue * build: wpb-22439 add cd_staging script (#849) * build: wpb-21356 add cd_staging script * build: wpb-21356 add changelog for cd_staging script * build: wpb-21356 enable creating secondary inventory for the VMs * fix: wpb-22439 cd_staging script as per wiab-staging inventory * fix: wpb-22439 fix secondary-inventory geenration logic to keep the original hostnames and bring SSH_OPTS * fix: wpb-22439 create a separate group for rabbitmq-hosts and keep other groups same * fix: wpb-22439 remove old children group for rmq-cluster before adding new one * fix: wpb-22439 fix postgresql_network_interface variable for postgresql * fix: wpb-22439 cd_staging.sh script to handle terrafrom nodenames for all the iventory groups * wpb-22439 6 GitHub workflow wiab staging (#850) * build: wpb-21356 changed the flow of offline.yml - introduced wiab-staging build and split bundle processing with default-build * build: wpb-21356 update pull_request_template and add new label for build-wiab-staging * fix: wpb-21356 offline/cd.sh for demo verification process as github workflow has been updated * fix: wpb-21356 add host key verification flags for scp commands * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * fix: wpb-22846 remove debug statements from cd.sh * fix: wpb-22439 remove new-line in cd_staging.sh * fix: wpb-22439 standardize SSH_OPTS in cd.sh * fix: wpb-22439 remove branch limitation for workflow * fix: wpb-22439 harden the ansible inventory params for default profile * Wpb 22439 postgresql repmgr node config (#856) * fix: wpb-22439 remove repmgr_node_config from group_vars * fix: wpb-22439 add repmgr_node_config to node specific inventory * fix: wpb-22439 add node specific repmgr_node_config to wiab-staging inventory * fix: wpb-22439 add changelog * fix: wpb-22439 add comment on hostname requirement directly for rmq-cluster group * wpb-22439 7 docs wiab staging (#851) * fix: wpb-21356 fix coturn port ranges * build: wpb-21356 add documentation for wiab-staging and clean old single_hetzner_machine_installation * build: wpb-21356 add changelog and small fix for offline-vm-setup.sh * fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc * fix: wpb-22846 update wiab-staging documentation for hairpin networking * fix: wpb-22439 fix documentation typo * fix: wpb-22439 fix documentation suggestions * fix: wpb-22439 update wiab-staging documentation * wpb-22439 8 clean old wiab staging script and workflows (#852) * fix: wpb-21356 debugging ssh banner issues * fix: wpb-21356 disable flows on push and removing the need for the default-build for verify steps * fix: wpb-21356 remove static build hashes and enabled bundle build verification in offline.yml workflow * refactor: wpb-21356 remove old deploy-wiab workflow as it has already been incorporated in offline.yml * refactor: wpb-21356 remove old autodeploy.sh as offline/cd_staging.sh will replace it * refactor: wpb-21356 remove references of old autodeploy.sh, wiab-hetzner playbook and documentation * fix: wpb-22439 ansible/wiab-staging-provision.yml for ssh_private_key update * fix: wpb-22439 update cert-manager & hairpin NAT documentation --------- Co-authored-by: Julia Longtin <julia.longtin@wire.com> * fix: wpb-23462: remove unused vars from cd.sh and cd_staging.sh * fix: wpb-23462: fix linting issues for cd_staging.sh * fix: wpb-22439 SSH_OPTS var in cd_staging.sh and ignore linting in shellcheck.sh * fix: wpb-22439 update the wiab-staging.yml with the latest artifact hash --------- Co-authored-by: Julia Longtin <julia.longtin@wire.com>

mohitrajain requested review from a team and julialongtin as code owners December 31, 2025 17:18

mohitrajain changed the title ~~Wpb 21356 7 docs wiab staging~~ wpb-22439 7 docs wiab staging Jan 5, 2026

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch from 594b922 to 28b9f70 Compare January 7, 2026 18:54

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch 2 times, most recently from ea69e50 to 6dea77e Compare January 9, 2026 10:37

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch from 7b39bdd to 9e1ee11 Compare January 9, 2026 14:07

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from 6dea77e to be20a6c Compare January 9, 2026 14:10

mohitrajain added build-wiab-staging and removed build-wiab-staging labels Jan 9, 2026

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch 2 times, most recently from 21281f9 to a9032df Compare January 12, 2026 16:29

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from be20a6c to 6ded955 Compare January 12, 2026 16:29

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch from a9032df to 7f9ddf0 Compare January 19, 2026 17:12

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch 2 times, most recently from 668a27c to 7c8f95f Compare January 19, 2026 17:46

Veki301 requested changes Jan 28, 2026

View reviewed changes

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch from d11d557 to d56c938 Compare January 29, 2026 17:25

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from 7c8f95f to a9e1137 Compare January 29, 2026 17:45

mohitrajain force-pushed the wpb-21356-6-github-workflow-wiab-staging branch from fdb2c12 to 0254dc9 Compare January 29, 2026 19:18

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch 2 times, most recently from 18d8d0c to 6350fce Compare January 29, 2026 19:21

mohitrajain changed the base branch from wpb-21356-6-github-workflow-wiab-staging to wpb-22439-postgresql-repmgr_node_config January 29, 2026 19:22

mohitrajain force-pushed the wpb-22439-postgresql-repmgr_node_config branch from 31d4a93 to de86aa0 Compare January 30, 2026 09:17

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from 6350fce to bddee18 Compare January 30, 2026 09:17

mohitrajain force-pushed the wpb-22439-postgresql-repmgr_node_config branch from de86aa0 to 425c518 Compare January 30, 2026 10:09

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from bddee18 to bafba56 Compare January 30, 2026 10:10

mohitrajain force-pushed the wpb-22439-postgresql-repmgr_node_config branch from 425c518 to 7728269 Compare January 30, 2026 16:54

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from bafba56 to e63a276 Compare January 30, 2026 16:56

Veki301 approved these changes Feb 17, 2026

View reviewed changes

mohitrajain force-pushed the wpb-22439-postgresql-repmgr_node_config branch from 7728269 to 84e6103 Compare February 17, 2026 16:22

mohitrajain added 8 commits February 17, 2026 17:23

fix: wpb-21356 fix coturn port ranges

3cd23b8

build: wpb-21356 add documentation for wiab-staging and clean old sin…

9edb593

…gle_hetzner_machine_installation

build: wpb-21356 add changelog and small fix for offline-vm-setup.sh

321a9ee

fix: wpb-22439 memory requirements for VMs in wiab-staging.md doc

3ce31cd

fix: wpb-22846 update wiab-staging documentation for hairpin networking

8540f52

fix: wpb-22439 fix documentation typo

77f35b6

fix: wpb-22439 fix documentation suggestions

519df2d

fix: wpb-22439 update wiab-staging documentation

a7b6ab6

mohitrajain force-pushed the wpb-21356-7-docs-wiab-staging branch from 9927886 to a7b6ab6 Compare February 17, 2026 16:23

mohitrajain merged commit c304abf into wpb-22439-postgresql-repmgr_node_config Feb 18, 2026
15 checks passed

mohitrajain deleted the wpb-21356-7-docs-wiab-staging branch February 18, 2026 10:50

Comments

Conversation

mohitrajain commented Dec 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Change type

Basic information

Testing

Offline Build CI (label-based)

Tracking

Knowledge Transfer

Motivation

Objective

Reason

Use case

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

mohitrajain Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

reaper does not deploy

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Veki301 left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud bot commented Feb 18, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

mohitrajain commented Dec 31, 2025 •

edited

Loading

mohitrajain Jan 28, 2026 •

edited

Loading