Skip to content

Conversation

@bhumi46
Copy link
Member

@bhumi46 bhumi46 commented Dec 23, 2025

Summary by CodeRabbit

  • New Features

    • Added optional Observation Infrastructure (observ‑infra) deployment workflow and dedicated Keycloak–Rancher integration workflow.
  • Documentation

    • Added Helmsman Destroy guide and updated docs index.
    • Reworked Rancher–Keycloak docs to a CI/GitHub Actions‑driven Quick Start with secrets guidance, debug/manual mode, monitoring, verification, and troubleshooting.
    • Expanded deployment, post‑deployment UI setup, cleanup, and WireGuard/keycloak notes.
  • Chores

    • Set explicit container image override for the ClamAV component and minor config comment refinements.

✏️ Tip: You can customize this high-level summary in your review settings.

bhumi46 and others added 2 commits December 16, 2025 17:28
Signed-off-by: bhumi46 <111699703+bhumi46@users.noreply.github.com>
…ated clamav image

Signed-off-by: bhumi46 <thisisbn46@gmail.com>
@coderabbitai
Copy link

coderabbitai bot commented Dec 23, 2025

Walkthrough

Replaces commented ClamAV image overrides with explicit values in Helmsman/dsf/external-dsf.yaml and adds extensive documentation: an optional observability infra workflow and vars, a CI-driven Rancher↔Keycloak integration README, a Helmsman destroy guide, and minor tfvars comment formatting for observ-infra.

Changes

Cohort / File(s) Summary
Configuration
Helmsman/dsf/external-dsf.yaml
Replaces commented clamav image override lines with explicit overrides: image.repository: "mosipid/clamav" and image.tag: "1.2".
Observability / Terraform vars
terraform/implementations/aws/observ-infra/aws.tfvars
Adds inline comments/formatting to Rancher import variables (e.g., #dont enable for observ infra); values unchanged.
Core Deployment Documentation
README.md
Adds optional Observation Infrastructure (observ-infra) content, example aws.tfvars, reorganizes steps for observ-infra, updates prerequisites (TF_WG_CONFIG, WireGuard notes), and expands destruction/cleanup guidance.
Integration Documentation
Rancher-keycloak-integration/README.md
Reworks to a GitHub Actions–centric Quick Start and workflow; adds secrets guidance (KEYCLOAK_ADMIN_PASSWORD, RANCHER_TOKEN, TF_WG_CONFIG), workflow behavior, credential retrieval, debug/manual execution, and troubleshooting/security notes.
New Deployment Guide
docs/HELMSMAN_DESTROY_GUIDE.md
Adds a comprehensive Helmsman destroy/undeploy guide covering CI destroy workflows, destroy-resources core, destruction order/flow, usage examples, secrets, troubleshooting, verification, and cleanup.
Documentation Index
docs/README.md
Adds entries linking to the new Helmsman Destroy Guide in core and component documentation tables.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Suggested reviewers

  • ckm007

Poem

🐰 I hopped through YAML at dawn's first light,
I pinned ClamAV's image tidy and bright,
Wrote guides for observ-infra and destroy delights,
Tuned CI keys and secrets for smooth flights,
Carrots, docs, and deploys — all snug tonight. 🥕

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the main changes: documentation updates for Helmsman destroy and observ-infra deployment, plus a clamav image update. It directly corresponds to the changeset content.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

📜 Recent review details

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between bdd62d5 and f359046.

📒 Files selected for processing (1)
  • README.md
🧰 Additional context used
🪛 markdownlint-cli2 (0.18.1)
README.md

566-566: Emphasis used instead of a heading

(MD036, no-emphasis-as-heading)


588-588: Blank line inside blockquote

(MD028, no-blanks-blockquote)

🔇 Additional comments (3)
README.md (3)

475-600: ✓ New observ-infra documentation is well-structured and comprehensive.

The new Step 3ca and Step 3cb sections provide clear guidance on deploying observability infrastructure with good organization, detailed configuration examples, and helpful post-deployment instructions. The cross-reference to the Keycloak-Rancher integration guide and notes about optional nature of observ-infra are appropriate. However, the three previously flagged markdown linting issues (lines 72, 566, and 588) must be resolved before this section can be fully approved.

Verify that the fixes for the three flagged linting issues (link fragment, bold emphasis, blockquote spacing) resolve all markdownlint-cli2 violations related to the changes in this PR.


1256-1259: ✓ Destruction guidance is well-structured and addresses both layers.

The updated section clearly distinguishes between infrastructure destruction (Terraform) and service destruction (Helmsman), which is important for safe cleanup. References to both guides are appropriate and helpful.


230-241: ✓ WireGuard configuration notes are appropriately updated.

The clarification that TF_WG_CONFIG is required for the Keycloak-Rancher integration workflow is helpful and prevents configuration errors when deploying observ-infra. The note correctly explains this is needed to access private Keycloak and Rancher instances.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

…ated clamav image

Signed-off-by: bhumi46 <thisisbn46@gmail.com>
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🧹 Nitpick comments (2)
docs/HELMSMAN_DESTROY_GUIDE.md (1)

25-48: Consider adding language identifiers to fenced code blocks.

Several fenced code blocks lack language specifiers, which can improve rendering and accessibility. Consider:

  • ASCII diagrams (lines 25-48): Add text or leave as-is (acceptable for diagrams)
  • Plain text examples (lines 124-126, 138-140, 184-191, 346-352): Add text identifier
🔎 Example fixes

For plain text blocks:

-```
+```text
 destroy

For ASCII art diagrams, either add `text` or leave unmarked (both acceptable):

```diff
-```
+```text
 ┌─────────────────────────────────────────────────────────────────────────┐
 │                    Reusable Workflow (Core Engine)                      │
 ...

Based on static analysis hints.

Also applies to: 124-126, 138-140, 184-191, 346-352

README.md (1)

566-566: Use proper heading syntax instead of bold emphasis.

Line 566 uses bold text **Post-Deployment: Rancher UI Initial Setup** which should be a proper markdown heading for better document structure and navigation.

🔎 Proposed fix
-**Post-Deployment: Rancher UI Initial Setup**
+### Post-Deployment: Rancher UI Initial Setup

Based on static analysis hints.

📜 Review details

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 7d86562 and ba20bb8.

📒 Files selected for processing (5)
  • Helmsman/dsf/external-dsf.yaml
  • README.md
  • Rancher-keycloak-integration/README.md
  • docs/HELMSMAN_DESTROY_GUIDE.md
  • docs/README.md
🧰 Additional context used
🪛 markdownlint-cli2 (0.18.1)
README.md

72-72: Link fragments should be valid

(MD051, link-fragments)


566-566: Emphasis used instead of a heading

(MD036, no-emphasis-as-heading)


588-588: Blank line inside blockquote

(MD028, no-blanks-blockquote)

docs/HELMSMAN_DESTROY_GUIDE.md

25-25: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


124-124: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


138-138: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


184-184: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


346-346: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🔇 Additional comments (5)
docs/README.md (1)

63-63: LGTM!

The documentation entries for the Helmsman Destroy Guide are properly formatted and provide clear descriptions. The links correctly reference the new guide added in this PR.

Also applies to: 71-71

Rancher-keycloak-integration/README.md (1)

1-335: LGTM!

The restructuring effectively emphasizes the CI/CD workflow approach while maintaining comprehensive guidance. Key improvements include:

  • Clear Quick Start section with workflow-centric steps
  • Well-organized secrets configuration guidance
  • Proper code block formatting with language identifiers
  • Manual execution options preserved in collapsible section

The changes enhance usability while maintaining completeness.

README.md (3)

475-595: LGTM!

The new observ-infra section is comprehensive and well-structured, providing:

  • Complete tfvars configuration example with detailed explanations
  • Clear workflow execution steps
  • Post-deployment Rancher UI setup guidance
  • Important notes about optional deployment and node sizing recommendations

The content effectively guides users through the optional observability infrastructure deployment.


596-601: LGTM!

The Keycloak-Rancher integration section provides clear guidance with:

  • Proper timing context (after observ-infra, before MOSIP infra)
  • Reference to detailed integration guide
  • Clear explanation of the integration's purpose

The cross-reference to the detailed guide is appropriate and helpful.


1257-1260: LGTM!

The updated environment destruction section now clearly differentiates between:

  • Infrastructure destruction (Terraform-based, full cleanup)
  • Helmsman services destruction (Kubernetes-level, preserves infrastructure)

This distinction helps users choose the appropriate cleanup approach for their needs.

…ated clamav image

Signed-off-by: bhumi46 <thisisbn46@gmail.com>
…ated clamav image

Signed-off-by: bhumi46 <thisisbn46@gmail.com>
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

♻️ Duplicate comments (1)
README.md (1)

72-73: Fix broken internal link with correct anchor format.

The link at line 72 references #after-observ-infra-run-keycloak--rancher-integration-ci, which does not match the heading at line 596: #### Step 3cb: Keycloak ⇄ Rancher integration (CI) — If using observ-infra``. GitHub generates anchors by lowercasing, removing special characters and backticks, replacing spaces with hyphens, and collapsing consecutive hyphens to single hyphens. The correct anchor is #step-3cb-keycloak-rancher-integration-ci-if-using-observ-infra.

-See [After observ-infra: Run Keycloak ⇄ Rancher integration (CI)](#after-observ-infra-run-keycloak--rancher-integration-ci) section below
+See [After observ-infra: Run Keycloak ⇄ Rancher integration (CI)](#step-3cb-keycloak-rancher-integration-ci-if-using-observ-infra) section below
📜 Review details

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between ba20bb8 and bdd62d5.

📒 Files selected for processing (2)
  • README.md
  • terraform/implementations/aws/observ-infra/aws.tfvars
✅ Files skipped from review due to trivial changes (1)
  • terraform/implementations/aws/observ-infra/aws.tfvars
🧰 Additional context used
🪛 markdownlint-cli2 (0.18.1)
README.md

72-72: Link fragments should be valid

(MD051, link-fragments)


566-566: Emphasis used instead of a heading

(MD036, no-emphasis-as-heading)


588-588: Blank line inside blockquote

(MD028, no-blanks-blockquote)

🔇 Additional comments (3)
README.md (3)

475-600: New observ-infra section is well-structured and comprehensive.

The introduction of Step 3ca (observ-infra optional deployment) and Step 3cb (Keycloak–Rancher integration) is well-organized with clear configuration examples, prerequisites, and post-deployment guidance. References to external documentation (Rancher-keycloak-integration/README.md) are appropriate and contextually placed.


1256-1259: Helmsman destruction guide properly integrated into cleanup workflow.

The addition of references to both ENVIRONMENT_DESTRUCTION_GUIDE.md (Terraform-based) and HELMSMAN_DESTROY_GUIDE.md (Helmsman-based) provides clear guidance on the two distinct destruction paths, reducing user confusion about cleanup procedures.


230-241: WireGuard VPN requirement notes clarified for Keycloak–Rancher integration.

The updated note at lines 240–241 explicitly calls out that TF_WG_CONFIG is required for the keycloak-rancher-integration workflow, improving clarity around VPN configuration sequencing and dependencies.

- ✅ Green checkmark when complete
- ✅ Observation infrastructure created in AWS with Rancher and Keycloak

**Post-Deployment: Rancher UI Initial Setup**
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Replace bold emphasis with a proper markdown heading.

Line 566 uses **Post-Deployment: Rancher UI Initial Setup** (emphasis) instead of a heading. This violates markdown best practices and fails linting (MD036). Convert to a proper heading level (e.g., ##### Post-Deployment: Rancher UI Initial Setup).

🔎 Proposed fix
-**Post-Deployment: Rancher UI Initial Setup**
+##### Post-Deployment: Rancher UI Initial Setup
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
**Post-Deployment: Rancher UI Initial Setup**
##### Post-Deployment: Rancher UI Initial Setup
🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

566-566: Emphasis used instead of a heading

(MD036, no-emphasis-as-heading)

🤖 Prompt for AI Agents
In README.md around line 566, the text uses bold emphasis instead of a markdown
heading; replace the bold line "**Post-Deployment: Rancher UI Initial Setup**"
with a proper heading (e.g., "##### Post-Deployment: Rancher UI Initial Setup")
to satisfy markdown linting (MD036) and maintain semantic structure.

Comment on lines +587 to +589
> **Important:** Save this new password securely. This password is used for **local user login** to Rancher UI (the `admin` account). After Keycloak-Rancher SAML integration is configured, operators can also login via Keycloak authentication.
> **Important Notes:**
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Remove blank line inside blockquote at line 588.

A blank line exists within the blockquote structure that violates MD028 (no-blanks-blockquote). Blockquotes should not contain blank lines; if breaking content is needed, continue the blockquote on the next line without blank spacing.

🔎 Proposed fix

The blockquote at lines 587–589 contains a blank line. Restructure to eliminate it:

 > **Important:** Save this new password securely. This password is used for **local user login** to Rancher UI (the `admin` account). After Keycloak-Rancher SAML integration is configured, operators can also login via Keycloak authentication.
-
 > **Important Notes:**
 >
 > - `observ-infra` is optional and intended for production deployments requiring separate management/monitoring infrastructure
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
> **Important:** Save this new password securely. This password is used for **local user login** to Rancher UI (the `admin` account). After Keycloak-Rancher SAML integration is configured, operators can also login via Keycloak authentication.
> **Important Notes:**
> **Important:** Save this new password securely. This password is used for **local user login** to Rancher UI (the `admin` account). After Keycloak-Rancher SAML integration is configured, operators can also login via Keycloak authentication.
> **Important Notes:**
🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

588-588: Blank line inside blockquote

(MD028, no-blanks-blockquote)

🤖 Prompt for AI Agents
In README.md around lines 587 to 589, there is a blank line inside a blockquote
(MD028 violation) — remove the empty line at line 588 and merge the adjacent
lines so the blockquote text is continuous (keep both sentences as part of the
same blockquote without an intervening blank line).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant