From 13f4b3b63c8ae3b08f7155f9db64d40c85a9c3ea Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 18 May 2020 21:35:19 -0700 Subject: [PATCH] rabbitmq / server: almost worked, need to hard code vaules however Signed-off-by: Kevin Fenzi --- roles/rabbitmq_cluster/tasks/main.yml | 19 +++++++++++++++---- 1 file changed, 15 insertions(+), 4 deletions(-) diff --git a/roles/rabbitmq_cluster/tasks/main.yml b/roles/rabbitmq_cluster/tasks/main.yml index 3043488627..58d2647531 100644 --- a/roles/rabbitmq_cluster/tasks/main.yml +++ b/roles/rabbitmq_cluster/tasks/main.yml @@ -379,18 +379,29 @@ rabbitmq_parameter: component: "federation-upstream" name: "pubsub-to-public_pubsub" - value: '{"uri": "amqps://pubsub_federation:@rabbitmq01.stg.{{ datacenter }}.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq.stg.fedoraproject.org&auth_mechanism=external", "ack-mode": "on-confirm"}' + value: '{"uri": "amqps://pubsub_federation:@rabbitmq01.stg.phx2.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq.stg.fedoraproject.org&auth_mechanism=external", "ack-mode": "on-confirm"}' state: present vhost: /public_pubsub -- name: Configure federation upstream from pubsub to the public_pubsub vhost +- name: Configure federation upstream from pubsub to the public_pubsub vhost (phx2) run_once: true delegate_to: "rabbitmq01{{ env_suffix }}.{{ datacenter }}.fedoraproject.org" - when: "env == 'production'" + when: "env == 'production' and datacenter == 'phx2" rabbitmq_parameter: component: "federation-upstream" name: "pubsub-to-public_pubsub" - value: '{"uri": "amqps://pubsub_federation:@rabbitmq01.{{ datacenter }}.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq.fedoraproject.org&auth_mechanism=external", "ack-mode": "on-confirm"}' + value: '{"uri": "amqps://pubsub_federation:@rabbitmq01.phx2.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq.fedoraproject.org&auth_mechanism=external", "ack-mode": "on-confirm"}' + state: present + vhost: /public_pubsub + +- name: Configure federation upstream from pubsub to the public_pubsub vhost (iad2) + run_once: true + delegate_to: "rabbitmq01{{ env_suffix }}.{{ datacenter }}.fedoraproject.org" + when: "env == 'production' and datacenter == 'iad2" + rabbitmq_parameter: + component: "federation-upstream" + name: "pubsub-to-public_pubsub" + value: '{"uri": "amqps://pubsub_federation:@rabbitmq01.iad2.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq.fedoraproject.org&auth_mechanism=external", "ack-mode": "on-confirm"}' state: present vhost: /public_pubsub