Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

rabbitmq_cluster: Add the admin user to the public_pubsub vhost

Browse source 
It needs permissions to manage that vhost

Signed-off-by: Jeremy Cline <jeremy@jcline.org>
This commit is contained in:
Jeremy Cline 2019-03-22 20:48:30 +00:00
parent 36d43c5d55
commit 73240bc64e
1 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

13
roles/rabbitmq_cluster/tasks/main.yml
View file

@ -146,7 +146,12 @@
rabbitmq_user: rabbitmq_user:
user: admin user: admin
password: "{{ rabbitmq_admin_password_staging }}" password: "{{ rabbitmq_admin_password_staging }}"
vhost: /pubsub permissions:
- vhost: /pubsub
configure_priv: .*
read_priv: .*
write_priv: .*
- vhost: /public_pubsub
configure_priv: .* configure_priv: .*
read_priv: .* read_priv: .*
write_priv: .* write_priv: .*
@ -200,6 +205,9 @@
vhost: "/public_pubsub" vhost: "/public_pubsub"
login_user: admin login_user: admin
login_password: "{{ (env == 'production')|ternary(rabbitmq_admin_password_production, rabbitmq_admin_password_staging) }}" login_password: "{{ (env == 'production')|ternary(rabbitmq_admin_password_production, rabbitmq_admin_password_staging) }}"
tags:
- rabbitmq_cluster
- config
# We keep them separated in /pubsub so we can bridge messages back to zmq # We keep them separated in /pubsub so we can bridge messages back to zmq
- name: Forward all zmq.topic to amq.topic in the public_pubsub vhost - name: Forward all zmq.topic to amq.topic in the public_pubsub vhost
@ -213,6 +221,9 @@
vhost: "/public_pubsub" vhost: "/public_pubsub"
login_user: admin login_user: admin
login_password: "{{ (env == 'production')|ternary(rabbitmq_admin_password_production, rabbitmq_admin_password_staging) }}" login_password: "{{ (env == 'production')|ternary(rabbitmq_admin_password_production, rabbitmq_admin_password_staging) }}"
tags:
- rabbitmq_cluster
- config
- name: Configure a policy to ensure the public vhost stays swept up and tidy - name: Configure a policy to ensure the public vhost stays swept up and tidy
run_once: true run_once: true