…oor soul to have to do it

Co-authored-by: Julia Longtin <julia.longtin@wire.com>

Add shell script linter to CI (SQPIT-279)

* general improvements, add workaround for deb archive key expiry, and add more routing information.

* add initial kvm-hetzner howto. how to deploy wire on a single hetzner physical machine.

* make the easier path the default.

* add old debian key workaround.
`
`

* general improvements, add workaround for deb archive key expiry, and add more routing information.

* add initial kvm-hetzner howto. how to deploy wire on a single hetzner physical machine.

* make the easier path the default.

* add old debian key workaround.

* add notes about old inventory file name, and make updating the inventory a bit clearer.

as per jct-113, bump elastisearch version from 6.8.21 to 6.8.23

…to-build

add federator to the charts to build for the CI script

)

…gs when running setup-offline-sources. (#575)

… untrusted repos. (#577)

…#579)

Add comment about ES version alignment

This is broken, because the nixpkgs update bumps ansible to a version
that our kubespray doesn't work with anymore.

#559 is tracking that.
While this is stil broken, let's remove it, and include the revert in
that PR.

GH actions: remove chore/update-dependencies GH action schedule for now

* clarify cert manager instructions, and harden our deployments.

* Update offline/docs.md

* update inline comments in hosts.ini file

Co-authored-by: Amit Sagtani <asagtani06@gmail.com>

This is more convenient (and, hopefully more stable) than relying on
database schemas and access.

Feat: Generate QR codes via teams API (SQPIT-1369)

This includes fetching the federator chart via wire-server, disabling
the federator for the deployment (it would need certificates we cannot
provide here) and circumventing some strange JVM behaviour of nodetool.

For the nodetool hack/fix see:
https://stackoverflow.com/questions/72258217/cassandra-nodetool-urisyntaxexception-malformed-ipv6-address-at-index-7

…p/wire-builds/233246049498d9d0d512654237fd5e8feff69a53/build.json

…p/wire-builds/194455041ea967059ae27fdeb52e464fbe127b00/build.json

…p/wire-builds/9f52a346537d8e14b2a2606e88282e564f9865e3/build.json

…p/wire-builds/60bd0374c031aba00b99b08b73be7562a151a69d/build.json

…p/wire-builds/38a419b95fa938e34d8118c2e14609bbfe4d63b8/build.json

* add retry while doing skopeo copy

* remove retry while copying from assethost

* replace cx11 with cx22 machines

* try cpx series resources for hetzner machines

* change interface

* undo net interface change

* add verbosity and eth0 interface

* update CX21 to CS22

* temp: disable tf destroy to debug cassandra

* add iptable rules

* remove firewall from external services

* set rabbitmq secrets for background-worker

* remove temp firewall rules

* add rabbitmq secrets to ci

* remove debugging steps

…p/wire-builds/0f517395867cb9cea86a066a6cf39da436f54331/build.json

…p/wire-builds/3a2c11f08da4365250c39d4b6994bfb0dd47566f/build.json

…p/wire-builds/fac93131fc9966f956a49d19cd601e3f869c46d8/build.json

…p/wire-builds/5971394690d148880cc57ff31257ff3ec79ffeb1/build.json

…p/wire-builds/5dcc99aa4e182672030ae38c5f94604dcefa51d1/build.json

…p/wire-builds/3902aa7621df0aa1dae269821801427d98d930e6/build.json

* remove ansible-restund submodules

* remove ansible.yml playbook

* remove restund references and code

* update docs.md

* update docs

* remove restund calling network config from docs

* update docs

…p/wire-builds/1b0bee044ed90c1d3e16ed38c20dba9ce7c887dd/build.json

…p/wire-builds/c0a2bc4ca1ff320527bb758ab5f5f22eb58ef0c6/build.json

…p/wire-builds/f2f363f30eb8bc62df33b106238abfc37b1f6711/build.json

…p/wire-builds/8aca2270ac9294ec8adb07b983d52158ab017aa2/build.json

…p/wire-builds/624934ebe8d2545d5b3f1dac87c056aed6989504/build.json

…p/wire-builds/ad9de20d4aa3a9a27d9f7eba7c949f9c464f8760/build.json

…p/wire-builds/991e280a114701209d0ba3c1847e4e1ac7d05a43/build.json

* install terraform using hashicorp/setupterraform action actions/runner-images#10796

* missing values/secrets for `helm install`

* fix exclusion logic in ci.sh, add wire-server-enterprise repo to exclusion list

* uncomment rabbitmq from `wire-server/secrets.yaml`

* more logging in offline-helm.sh

* add missing values to cannon and background-worker, remove additional logs

* coturn docs update [skip ci]

* Update offline/coturn.md

* Update offline/coturn.md

---------

Co-authored-by: Julia Longtin <julia.longtin@wire.com>

* adding ansible-playbook to setup initial node configuration

* adding helm chart script to ensure charts are setup correctly, adding readme and offline-env.sh

* feat(stackit wiab): fix suggestions from sonarqube for shell scripts [skip ci]

* feat(stackit wiab): fix documentation and file name for inventory [skip ci]

* feat(stackit wiab): fix suggestions from sonarqube for directory ownership [skip ci]

* feat(stackit wiab): WPB-14388 fix the instructions in readme.md [skip ci]

* feat(stackit wiab): WPB-14388 fix docker image for VM containers and connection reset after docker group change[skip ci]

* feat(stackit wiab): WPB-14388 add ssh params in host.ini, comments in setting-values.sh[skip ci]

* feat(stackit wiab): change for coturn and ingress node IP calculation for IPtables rules[skip ci]

* feat(stackit wiab): update Readme to have more precise documentation, offline-env.sh making it non-interative with wsd[skip ci]

* feat(stackit wiab): WPB-14388 add support to configure target domain for minio deeplink,fix for empty label tasks when tasks are skipped [skip ci]

* feat(stackit wiab): WPB-14388 standaridize the domain from mydomain.com to example.com [skip ci]

* feat(stackit wiab): WPB-14388 fix host.ini to have standard domain and have better documentation about cert and domain replacements [skip ci]

* feat(stackit wiab): WPB-14388 fix readme.md [skip ci]

…fline directory [skip ci] (#755)

#757)

* feat(stackit wiab): WPB-14388 improving stackIT-wiab documentation for end user[skip_ci]

---------

Co-authored-by: Julia Longtin <julia.longtin@wire.com>

* fix(autodeploy.sh): fix for standard sftd dns record [skip ci]

* fix(autodeploy.sh): WPB-15487 fix for global sed for target domain replacements in webapp, team-settings and account pages helm chart values [skip ci]

* fix(docs_ubuntu_22): WPB-15487 fix for global sed for target domain replacements in the documentation [skip ci]

* fix(offline-cluster.sh): WPB-15487 removed commands to deploy restund [skip ci]

* fix(coturn): WPB-15487 update coturn document for port split with sft and iptables rules [skip ci]

* fix(coturn): WPB-15487 update demo-smtp values according to the cluster podCIDR [skip ci]

* fix(coturn): WPB-15487 update coturn document to improve SFT/COTURN labeling and nftable changes [skip ci]

* Update offline/coturn.md

---------

Co-authored-by: Julia Longtin <julia.longtin@wire.com>

* bump etcd to 3.5.10

* bump minio client to RELEASE.2023-10-24T05-18-28Z

* bump coredns to v1.11.4

* bump ingress nginx controller to v1.10.6

* bump metrics-server to v0.7.2

* bump kube-webhook-certgen, add image to bundle

* bump cert-manager to v1.16.3

* bump nginx to 1.25.4-alpine

* bump etcd to v3.5.10

* bump bats to 1.11.1

* remove sig-storage images

* remove cilium images

* remove metallb images

* remove kubernetes ui images

* remove ldap-scim-bridge from system-containers images, it should come from wire helm charts

* remove openebs from containers-system images, it should come from wire helm charts

* remove k8ssandra from containers-system images, it should come from wire helm charts