From a1c29df707e7ba646fc50361a3f8f7c84de5c705 Mon Sep 17 00:00:00 2001 From: kevin Date: Thu, 16 Jul 2015 14:55:47 -0500 Subject: [PATCH] Compartmentalizing RabbitMQ MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Presently all services use the single root virtual host within RabbitMQ and while this is “OK” for small to mid sized deployments however it would be better to divide services into logical resource groups within RabbitMQ which will bring with it additional security. This change set provides OSAD better compartmentalization of consumer services that use RabbitMQ. UpgradeImpact DocImpact Change-Id: I6f9d07522faf133f3c1c84a5b9046a55d5789e52 Implements: blueprint compartmentalize-rabbitmq --- templates/proxy-server.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/proxy-server.conf.j2 b/templates/proxy-server.conf.j2 index 518950df..45fe43bd 100644 --- a/templates/proxy-server.conf.j2 +++ b/templates/proxy-server.conf.j2 @@ -144,7 +144,7 @@ use = egg:swift#xprofile paste.filter_factory = ceilometermiddleware.swift:filter_factory control_exchange = swift driver = messagingv2 -url = rabbit://openstack:{{ rabbitmq_password }}@{{ groups['rabbitmq_all'][0] }} +url = rabbit://{{ ceilometer_rabbitmq_userid }}:{{ ceilometer_rabbitmq_password }}@{{ hostvars[groups['rabbitmq_all'][0]]['ansible_ssh_host'] }}:5672{{ ceilometer_rabbitmq_vhost }} topic = notifications log_level = WARN {% endif %}