104 lines
3.0 KiB
Ruby
104 lines
3.0 KiB
Ruby
# encoding: UTF-8
|
|
#
|
|
# Cookbook Name:: openstack-ops-messaging
|
|
# Recipe:: rabbitmq-server
|
|
#
|
|
# Copyright 2013, Opscode, Inc.
|
|
# Copyright 2013, AT&T Services, Inc.
|
|
# Copyright 2013, Craig Tracey <craigtracey@gmail.com>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the 'License');
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an 'AS IS' BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
class ::Chef::Recipe
|
|
include ::Openstack
|
|
end
|
|
|
|
user = node['openstack']['mq']['user']
|
|
pass = get_password 'user', user
|
|
vhost = node['openstack']['mq']['vhost']
|
|
rabbit_endpoint = node['openstack']['endpoints']['mq']
|
|
bind_interface = rabbit_endpoint.bind_interface
|
|
if bind_interface
|
|
listen_address = address_for bind_interface
|
|
else
|
|
listen_address = rabbit_endpoint.host
|
|
end
|
|
|
|
# Used by OpenStack#rabbit_servers/#rabbit_server
|
|
node.set['openstack']['mq']['listen'] = listen_address
|
|
if node['openstack']['mq']['rabbitmq']['use_ssl']
|
|
if node['rabbitmq']['ssl_port'] != rabbit_endpoint.port
|
|
node.override['rabbitmq']['ssl_port'] = rabbit_endpoint.port
|
|
else
|
|
Chef::Log.error 'Unable to listen on the port #{rabbit_endpoint.port} for RabbitMQ TCP, which is listened on by SSL!'
|
|
end
|
|
else
|
|
node.override['rabbitmq']['port'] = rabbit_endpoint.port
|
|
end
|
|
node.override['rabbitmq']['address'] = listen_address
|
|
|
|
# Clustering
|
|
if node['openstack']['mq']['cluster']
|
|
node.override['rabbitmq']['cluster'] = node['openstack']['mq']['cluster']
|
|
node.override['rabbitmq']['erlang_cookie'] = get_password 'service', 'rabbit_cookie'
|
|
if node['openstack']['mq']['search_for_cluster_disk_nodes']
|
|
qs = "roles:#{node['openstack']['mq']['server_role']} AND chef_environment:#{node.chef_environment}"
|
|
node.override['rabbitmq']['cluster_disk_nodes'] = search(:node, qs).map do |n|
|
|
"#{user}@#{n['hostname']}"
|
|
end.sort
|
|
end
|
|
end
|
|
|
|
include_recipe 'rabbitmq'
|
|
include_recipe 'rabbitmq::mgmt_console'
|
|
|
|
# TODO(mrv) This could be removed once support for this is added to the rabbitmq cookbook.
|
|
# Issue: https://github.com/kennonkwok/rabbitmq/issues/136
|
|
rabbitmq_user 'remove rabbit guest user' do
|
|
user 'guest'
|
|
action :delete
|
|
not_if { user == 'guest' }
|
|
end
|
|
|
|
rabbitmq_user 'add openstack rabbit user' do
|
|
user user
|
|
password pass
|
|
action :add
|
|
end
|
|
|
|
rabbitmq_user 'change openstack rabbit user password' do
|
|
user user
|
|
password pass
|
|
action :change_password
|
|
end
|
|
|
|
rabbitmq_vhost 'add openstack rabbit vhost' do
|
|
vhost vhost
|
|
action :add
|
|
end
|
|
|
|
rabbitmq_user 'set openstack user permissions' do
|
|
user user
|
|
vhost vhost
|
|
permissions '.* .* .*'
|
|
action :set_permissions
|
|
end
|
|
|
|
# Necessary for graphing.
|
|
rabbitmq_user 'set rabbit administrator tag' do
|
|
user user
|
|
tag 'administrator'
|
|
action :set_tags
|
|
end
|