Take some precautions against misuse of the rabbit roles
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
parent
f6a71cf48d
commit
449b5988d0
2 changed files with 19 additions and 0 deletions
|
@ -28,6 +28,15 @@
|
||||||
fail_msg: "Your queue name must be prefixed with your username"
|
fail_msg: "Your queue name must be prefixed with your username"
|
||||||
tags: fedora-messaging
|
tags: fedora-messaging
|
||||||
|
|
||||||
|
- name: Validate the user parameter
|
||||||
|
assert:
|
||||||
|
that:
|
||||||
|
- username != "admin"
|
||||||
|
- username != "guest"
|
||||||
|
- username != "nagios-monitoring"
|
||||||
|
fail_msg: "This user name is reserved"
|
||||||
|
tags: fedora-messaging
|
||||||
|
|
||||||
# See https://www.rabbitmq.com/access-control.html#permissions for details on
|
# See https://www.rabbitmq.com/access-control.html#permissions for details on
|
||||||
# the RabbitMQ permissions configuration.
|
# the RabbitMQ permissions configuration.
|
||||||
- name: Create the {{ username }} user in RabbitMQ
|
- name: Create the {{ username }} user in RabbitMQ
|
||||||
|
|
|
@ -11,6 +11,16 @@
|
||||||
|
|
||||||
# See https://www.rabbitmq.com/access-control.html#permissions for details on
|
# See https://www.rabbitmq.com/access-control.html#permissions for details on
|
||||||
# the RabbitMQ permissions configuration.
|
# the RabbitMQ permissions configuration.
|
||||||
|
|
||||||
|
- name: Validate parameters
|
||||||
|
assert:
|
||||||
|
that:
|
||||||
|
- username != "admin"
|
||||||
|
- username != "guest"
|
||||||
|
- username != "nagios-monitoring"
|
||||||
|
fail_msg: "This user name is reserved"
|
||||||
|
tags: fedora-messaging
|
||||||
|
|
||||||
- name: Create the user in RabbitMQ
|
- name: Create the user in RabbitMQ
|
||||||
delegate_to: "{{ rabbitmq_server }}"
|
delegate_to: "{{ rabbitmq_server }}"
|
||||||
rabbitmq_user:
|
rabbitmq_user:
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue