1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
# File 'modules/profile/manifests/openstack/base/rabbitmq.pp', line 1
class profile::openstack::base::rabbitmq(
Array[Stdlib::Fqdn] $prometheus_nodes = lookup('prometheus_nodes'),
Array[Stdlib::Fqdn] $openstack_controllers = lookup('profile::openstack::base::openstack_controllers'),
$monitor_user = hiera('profile::openstack::base::rabbit_monitor_user'),
$monitor_password = hiera('profile::openstack::base::rabbit_monitor_pass'),
$cleanup_password = hiera('profile::openstack::base::rabbit_cleanup_pass'),
$file_handles = hiera('profile::openstack::base::rabbit_file_handles'),
Array[Stdlib::Fqdn] $designate_hosts = lookup('profile::openstack::base::designate_hosts'),
$labs_hosts_range = hiera('profile::openstack::base::labs_hosts_range'),
$labs_hosts_range_v6 = hiera('profile::openstack::base::labs_hosts_range_v6'),
$nova_rabbit_user = hiera('profile::openstack::base::nova::rabbit_user'),
$nova_rabbit_password = hiera('profile::openstack::base::nova::rabbit_pass'),
$rabbit_erlang_cookie = hiera('profile::openstack::base::rabbit_erlang_cookie'),
){
class { '::rabbitmq':
file_handles => $file_handles,
erlang_cookie => $rabbit_erlang_cookie,
}
contain '::rabbitmq'
class{'::rabbitmq::plugins':}
contain '::rabbitmq::plugins'
# We want this job to run on only one host; it doesn't matter which.
class {'::rabbitmq::cleanup':
password => $cleanup_password,
enabled => $::fqdn == $openstack_controllers[0],
}
contain '::rabbitmq::cleanup'
class {'::openstack::nova::rabbit':
username => $nova_rabbit_user,
password => $nova_rabbit_password,
require => Class['::rabbitmq'],
}
contain '::openstack::nova::rabbit'
rabbitmq::user{"${monitor_user}-rabbituser":
username => $monitor_user,
password => $monitor_password,
administrator => true,
require => Class['::rabbitmq'],
}
class { '::profile::prometheus::rabbitmq_exporter':
prometheus_nodes => $prometheus_nodes,
rabbit_monitor_username => $monitor_user,
rabbit_monitor_password => $monitor_password,
}
contain '::profile::prometheus::rabbitmq_exporter'
ferm::rule{'rabbit_for_designate':
ensure => 'present',
rule => "saddr (@resolve((${join($designate_hosts,' ')})) @resolve((${join($designate_hosts,' ')}), AAAA))
proto tcp dport 5672 ACCEPT;",
}
ferm::rule{'beam_nova':
ensure => 'present',
rule => "saddr (${labs_hosts_range} ${labs_hosts_range_v6}) proto tcp dport (5672 56918) ACCEPT;",
}
ferm::rule { 'rabbit_for_standby_node':
ensure => 'present',
rule => "saddr (@resolve((${join($openstack_controllers,' ')}))
@resolve((${join($openstack_controllers,' ')}), AAAA))
proto tcp dport 5672 ACCEPT;",
}
# Rabbit uses epmd for clustering
ferm::rule { 'epmd_for_rabbit':
ensure => 'present',
rule => "saddr (@resolve((${join($openstack_controllers,' ')}))
@resolve((${join($openstack_controllers,' ')}), AAAA))
proto tcp dport 4369 ACCEPT;",
}
ferm::rule { 'rabbit_internode':
ensure => 'present',
rule => "saddr (@resolve((${join($openstack_controllers,' ')}))
@resolve((${join($openstack_controllers,' ')}), AAAA))
proto tcp dport 25672 ACCEPT;",
}
}
|