configure rabbitmq for openstack

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 554966b..a198495 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -44,6 +44,9 @@ roles:
     - kaufmann.debian.org
   keystone:
     - oyens.debian.org
+  keystone_rabbitmq:
+    - rainier.debian.org
+    - rapoport.debian.org
   memcached:
     - oyens.debian.org
   lists:

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index e6176ea..a4ef596 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -205,6 +205,9 @@ class roles {
        if has_role('keystone') {
                include roles::keystone
        }
+       if has_role('keystone_rabbitmq') {
+               include roles::keystone::rabbitmq
+       }
 
        if has_role('memcached') {
                include roles::memcached

diff --git a/modules/roles/manifests/keystone/rabbitmq.pp b/modules/roles/manifests/keystone/rabbitmq.pp
new file mode 100644 (file)
index 0000000..65d6b29
--- /dev/null
+++ b/modules/roles/manifests/keystone/rabbitmq.pp
@@ -0,0 +1,21 @@
+class roles::keystone::rabbitmq {
+
+       include roles::openstack::params
+
+       $rabbit_pass     = $roles::openstack::params::rabbit_pass
+
+       rabbitmq_vhost { 'keystone':
+               ensure   => present,
+       }
+
+       rabbitmq_user { 'openstack':
+               admin    => false,
+               password => $rabbit_pass,
+       }
+
+       rabbitmq_user_permissions { 'openstack@keystone':
+               configure_permission => '.*',
+               read_permission      => '.*',
+               write_permission     => '.*',
+       }
+}