105 lines
3 KiB
YAML
105 lines
3 KiB
YAML
- name: Configure the centos-odcs virtual host
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_vhost:
|
|
name: /centos-odcs
|
|
state: present
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Configure the HA policy for the centos-odcs queues
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_policy:
|
|
name: HA
|
|
apply_to: queues
|
|
pattern: .*
|
|
tags:
|
|
ha-mode: all
|
|
ha-sync-mode: automatic # Auto sync queues to new cluster members
|
|
ha-sync-batch-size: 10000 # Larger is faster, but must finish in 1 net_ticktime
|
|
vhost: /centos-odcs
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Add a policy to limit queues to 1GB and remove after a month of no use
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_policy:
|
|
apply_to: queues
|
|
name: pubsub_sweeper
|
|
state: present
|
|
pattern: ".*"
|
|
tags:
|
|
# Unused queues are killed after 1000 * 60 * 60 * 31 milliseconds (~a month)
|
|
expires: 111600000
|
|
# Queues can use at most 1GB of storage
|
|
max-length-bytes: 1073741824
|
|
vhost: /centos-odcs
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Create the centos-odcs-admin user for the centos-odcs vhost (prod)
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_user:
|
|
user: centos-odcs-admin
|
|
password: "{{ (env == 'production')|ternary(rabbitmq_centos_odcs_admin_password_production, rabbitmq_centos_odcs_admin_password_staging) }}"
|
|
vhost: /centos-odcs
|
|
configure_priv: .*
|
|
read_priv: .*
|
|
write_priv: .*
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Dump the admin password in a file for administrative operations
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
copy:
|
|
dest: /root/.centos-odcs-rabbitmqpass
|
|
content: "{{ (env == 'production')|ternary(rabbitmq_centos_odcs_admin_password_production, rabbitmq_centos_odcs_admin_password_staging) }}"
|
|
mode: 0600
|
|
owner: root
|
|
group: root
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Grant the admin user access to the centos-odcs vhost
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_user:
|
|
user: admin
|
|
vhost: /centos-odcs
|
|
configure_priv: .*
|
|
read_priv: .*
|
|
write_priv: .*
|
|
tags: administrator
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Create a user for centos-odcs access
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_user:
|
|
user: "centos-odcs-private-queue{{ env_suffix }}"
|
|
vhost: /centos-odcs
|
|
configure_priv: .*
|
|
write_priv: .*
|
|
read_priv: .*
|
|
state: present
|
|
tags:
|
|
- centos-odcs
|
|
|
|
- name: Create the user in RabbitMQ
|
|
run_once: true
|
|
delegate_to: "rabbitmq01{{ env_suffix }}.iad2.fedoraproject.org"
|
|
rabbitmq_user:
|
|
user: centos-odcs
|
|
vhost: /centos-odcs
|
|
read_priv: "^$" # Publish only, no reading
|
|
write_priv: "amq\\.topic"
|
|
configure_priv: "^$" # No configuration permissions
|
|
state: present
|
|
tags:
|
|
- centos-odcs
|
|
|