[Openstack-operators] Murano in Production

Abel Lopez alopgeek at gmail.com
Sat Sep 17 06:01:57 UTC 2016


I want to imagine that separate vhosts with different usernames and
appropriate permissions would be sufficient. Just like we don't run
separate MySQL instances for a different database, we just make users with
permissions.

But, I haven't played with Murano at all, what do I know.

On Friday, September 16, 2016, Joe Topjian <joe at topjian.net> wrote:

> Hi all,
>
> We're planning to deploy Murano to one of our OpenStack clouds and I'm
> debating the RabbitMQ setup.
>
> For background: the Murano agent that runs on instances requires access to
> RabbitMQ. Murano is able to be configured with two RabbitMQ services: one
> for traditional OpenStack communication and one for the Murano/Agent
> communication.
>
> From a security/segregation point of view, would vhost separation on our
> existing RabbitMQ cluster be sufficient? Or is it recommended to have an
> entirely separate cluster?
>
> As you can imagine, I'd like to avoid having to manage *two* RabbitMQ
> clusters. :)
>
> Thanks,
> Joe
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160916/c1648ca0/attachment.html>


More information about the OpenStack-operators mailing list