Hi,
I got a question regarding a change which was made, quite some time ago in kolla-ansible. The change in question is: https://review.opendev.org/#/c/584427/
specifically the following diff, the file was moved to a new format and name, but the possibility to configure the used interface for rabbitmq/erlang was removed.
May I ask if this was maybe by accident, or what the reason for the removal of these parameters was?
I'm asking because I'm currently deploying Openstack and am in the process of hardening the configuration.
It stood out to me, that the beam vm from rabbitmq listens on all interfaces[1], so I wanted to change that.
If there is another way to change this via kolla-ansible, it would be very kind to let me know.
Notice, I do not try to configure "ERL_EPMD_ADDRESS" (which we already do), but to control the TCP Port 25672, which, as far as I understood the rabbitmq docs, is controlled via the erlang/beam vm "inet_dist_use_interface" parameter, which was removed in this changeset.
But I might be totally wrong, I find the RabbitMQ docs a little hard to parse at times.
This is currently a deployment with 3 rabbitmq nodes, if that matters.
Thank you very much for your time in advance!
See here the relevant diff, for convenience:
commit b163cb02d1486f8844ac52e619de7b62321e42b0 Author: Paul Bourke paul.bourke@oracle.com Date: Fri Jul 20 16:35:25 2018 +0100
Update rabbitmq to use new conf & clustering
Depends-On: I75e00312b36e1678b90a42cf58d24652323eff27 Change-Id: Ia716fabffca41eff816e59bbf9f4cab79ee8b72f
diff --git a/ansible/roles/rabbitmq/templates/rabbitmq.config.j2 b/ansible/roles/rabbitmq/templates/rabbitmq.config. j2 deleted file mode 100644 index 960f9fb8a..000000000 --- a/ansible/roles/rabbitmq/templates/rabbitmq.config.j2 +++ /dev/null @@ -1,24 +0,0 @@ -[ - {kernel, [ - {inet_dist_use_interface, {% raw %}{{% endraw %}{{ api_interface_address | regex_replace('.', ',') }}}}, - {inet_dist_listen_min, {{ role_rabbitmq_cluster_port }}}, - {inet_dist_listen_max, {{ role_rabbitmq_cluster_port }}}
[1]: ss -tulpn | awk '$5 ~ /0.0.0.0:|[::]:/ && /beam/' tcp LISTEN 0 128 0.0.0.0:25672 0.0.0.0:* users:(("beam.smp",pid=194345,fd=63))