WPB-23942 prevent rabbit mq queues creation for client notifications

Makefile

@@ -691,6 +691,10 @@ diff-live-manifest: clean-charts charts-integration
 	OUTPUT_FILE="/tmp/wire-server.yaml" ./hack/bin/render-manifest.sh "$(LIVE_VALUES_FILE)"; \
 	DIFF_OUTPUT_FILE="$(DIFF_OUTPUT_FILE)" ./hack/bin/diff-wire-server-manifests.sh "$(LIVE_MANIFEST_FILE)" /tmp/wire-server.yaml
 
+render-ci-manifest: clean-charts charts-integration
+	./hack/bin/helm-render-ci-values.sh
+	./hack/bin/render-manifest.sh /tmp/wire-server-test-a.yaml
+
 sbom.json:
 	nix -Lv build '.#wireServer.bomDependencies' && \
 	nix run 'github:wireapp/tom-bombadil#create-sbom' -- --root-package-name "wire-server"

changelog.d/0-release-notes/WPB-23942

@@ -0,0 +1 @@
+A new root-level Helm value `consumableNotifications` was added to control whether RabbitMQ queues are created and used for clients with the `consumable-notifications` capability. The value is provided via the `wire-server` Helm chart defaults and defaults to `false`.

changelog.d/5-internal/WPB-23942

@@ -0,0 +1 @@
+Make consumable notifications configurable and disable them by default

charts/wire-server/templates/brig/configmap.yaml

@@ -394,5 +394,6 @@ data:
       {{- if hasKey . "setNomadProfiles" }}
       setNomadProfiles: {{ index . "setNomadProfiles" }}
       {{- end }}
+      setConsumableNotifications: {{ $.Values.consumableNotifications }}
     {{- end }}
   {{- end }}

charts/wire-server/templates/gundeck/configmap.yaml

@@ -96,5 +96,6 @@ data:
       {{- if hasKey . "cellsEventQueue" }}
       cellsEventQueue: {{ .cellsEventQueue }}
       {{- end }}
+      consumableNotifications: {{ $.Values.consumableNotifications }}
 
   {{- end }}

charts/wire-server/values.yaml

@@ -12,6 +12,8 @@ tags:
   mlsstats: false
   integration: false
 
+consumableNotifications: false
+
 galley:
   replicaCount: 3
   image:

docs/src/developer/reference/config-options.md

@@ -2000,6 +2000,23 @@ gundeck:
   settings:
     cellsEventQueue: "cells_events"
 ```
+
+## Configure consumable notifications
+
+The `consumableNotifications` flag controls whether the RabbitMQ-backed Events
+API for clients with the `consumable-notifications` capability is operational.
+When disabled, the legacy notification flow remains active.
+
+This is a root-level Helm `values.yaml` setting. It is rendered into both the
+`brig` and `gundeck` service configs:
+
+```yaml
+consumableNotifications: false
+```
+
+- In `brig`, it is rendered as `optSettings.setConsumableNotifications`.
+- In `gundeck`, it is rendered as `settings.consumableNotifications`.
+
 ## Background worker: Background jobs
 
 The background worker processes asynchronous jobs (conversation migrations, backend notifications). Configuration is supplied via Helm under `background-worker.config` and rendered into `background-worker.yaml`.

hack/bin/helm-render-ci-values.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# best run via make render-wire-server-resources
+# otherwise run make clean-charts and make charts-integration before
+
+set -euo pipefail
+
+# from repo root
+export NAMESPACE_1="${NAMESPACE_1:-test-a}"
+export NAMESPACE_2="${NAMESPACE_2:-test-b}"
+export FEDERATION_DOMAIN_1="${FEDERATION_DOMAIN_1:-integration.example.com}"
+export FEDERATION_DOMAIN_2="${FEDERATION_DOMAIN_2:-integration2.example.com}"
+export FEDERATION_DOMAIN_BASE_1="${FEDERATION_DOMAIN_BASE_1:-example.com}"
+export FEDERATION_DOMAIN_BASE_2="${FEDERATION_DOMAIN_BASE_2:-example.com}"
+export FEDERATION_CA_CERTIFICATE="${FEDERATION_CA_CERTIFICATE:-$(cat services/nginz/integration-test/conf/nginz/integration-ca.pem)}"
+export ENTERPRISE_IMAGE_PULL_SECRET="${ENTERPRISE_IMAGE_PULL_SECRET:-{}}"
+
+helmfile -f hack/helmfile.yaml.gotmpl \
+  -e default \
+  --skip-deps \
+  -l name=wire-server \
+  write-values \
+  --output-file-template '/tmp/{{ .Release.Name }}-{{ .Release.Namespace }}.yaml'
+
+VALUES_FILE="/tmp/wire-server-${NAMESPACE_1}.yaml"
+
+echo "Rendered values:   $VALUES_FILE"

hack/helm_vars/wire-server/values.yaml.gotmpl

@@ -6,6 +6,8 @@ tags:
   sftd: false
   integration: true
 
+consumableNotifications: false
+
 cassandra-migrations:
   imagePullPolicy: {{ .Values.imagePullPolicy }}
   cassandra: