b5b2bb9af4
Backgroud: Bug Requests ability to access RabbitMQ management UI through HAproxy Approach: --Add rabbitmq ui port 15672 to HAProxy --DO NOT Add monitoring user by default, instead key on existence of rabbitmw_monitoring_userid in user_variables.yml --ADD user_variables.yml update per above with explanation --Add "monitoring" user to rabbitmq for monitoring with "monitoring" user tag --Add monitoring user passwd var to user_secrets --Add features: release note Closes-Bug: 1446434 Change-Id: Idaf02cad6bb292d02f1cf6a733dbbc6ff4b4435e
86 lines
2.8 KiB
YAML
86 lines
2.8 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Create and configure rabbitmq container
|
|
hosts: rabbitmq_all
|
|
max_fail_percentage: 0
|
|
user: root
|
|
pre_tasks:
|
|
- name: Use the lxc-openstack aa profile
|
|
lxc_container:
|
|
name: "{{ container_name }}"
|
|
container_config:
|
|
- "lxc.aa_profile=lxc-openstack"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
register: container_config
|
|
tags:
|
|
- lxc-aa-profile
|
|
- name: Wait for container ssh
|
|
wait_for:
|
|
port: "22"
|
|
delay: "{{ ssh_delay }}"
|
|
search_regex: "OpenSSH"
|
|
host: "{{ ansible_ssh_host }}"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: container_config is defined and container_config | changed
|
|
register: ssh_wait_check
|
|
until: ssh_wait_check | success
|
|
retries: 3
|
|
tags:
|
|
- ssh-wait
|
|
roles:
|
|
- role: "pip_lock_down"
|
|
when: "(groups['repo_all'] | length) >= 1"
|
|
- role: "system_crontab_coordination"
|
|
tags:
|
|
- "system-crontab-coordination"
|
|
vars:
|
|
is_metal: "{{ properties.is_metal|default(false) }}"
|
|
|
|
# NOTE(mancdaz): rabbitmq cannot be upgraded in serial, so when
|
|
# rabbitmq_upgrade=True, serial is set to 0, else it is 1 for installs
|
|
- name: Install rabbitmq server
|
|
hosts: rabbitmq_all
|
|
serial: "{{ rabbitmq_upgrade|default(false) | bool | ternary(0, 1)}}"
|
|
max_fail_percentage: 20
|
|
user: root
|
|
roles:
|
|
- role: "rabbitmq_server"
|
|
tags:
|
|
- "rabbitmq-server"
|
|
- "upgrade-rabbitmq-server"
|
|
- role: "rsyslog_client"
|
|
rsyslog_client_log_rotate_file: rabbitmq_log_rotate
|
|
rsyslog_client_log_dir: "/var/log/rabbitmq"
|
|
rsyslog_client_config_name: "99-rabbitmq-rsyslog-client.conf"
|
|
tags:
|
|
- "rabbitmq-rsyslog-client"
|
|
- "rsyslog-client"
|
|
|
|
- name: Ensure rabbitmq user for monitoring GUI
|
|
hosts: rabbitmq_all[0]
|
|
user: root
|
|
tasks:
|
|
- name: Create rabbitmq user for monitoring GUI
|
|
rabbitmq_user:
|
|
user: "{{ rabbitmq_monitoring_userid|default('monitoring') }}"
|
|
password: "{{ rabbitmq_monitoring_password }}"
|
|
state: "present"
|
|
tags: "monitoring"
|
|
when: rabbitmq_monitoring_password is defined
|
|
tags:
|
|
- "rabbitmq_monitoring_user"
|