initial commit

Author: stefvaessen

.gitignore

@@ -0,0 +1,3 @@
+.*.sw*
+.vagrant/
+.kitchen/

.kitchen.yml

@@ -0,0 +1,53 @@
+---
+
+driver                    :
+    name                  : <%= if ENV['TRAVIS'] then 'localhost' else 'vagrant' end  %>
+    box                   : "ubuntu/trusty64"
+    customize             :
+         cpus             : 2
+         memory           : 2048
+
+verifier                  :
+  name                    : serverspec
+  remote_exec             : false
+
+provisioner:
+    name                  : ansible_push
+    verbose               : "vvvv"
+    ansible_config        : "test/ansible.cfg"
+    ansible_playbook_bin  : "ansible-playbook"
+    idempotency_test      : True
+    diff                  : True
+    sudo                  : <%= if ENV['TRAVIS'] then 'True' else 'False' end  %>
+    raw_arguments         : <%= if ENV['TRAVIS'] then '-c local' else '' end %>
+    extra_vars            : { 'kitchen_connection': '<%= if ENV["TRAVIS"] then "local" else "smart" end %>', 'kitchen_hosts': '<%= if ENV["TRAVIS"] then "localhost" else "all" end %>' }
+    use_instance_name     : true
+    groups                :
+         rabbitmq-cluster :
+                            - "cluster-1-docker-u14"
+                            - "cluster-2-docker-u14"
+                            - "cluster-3-docker-u14"
+platforms:
+ - name                   : docker-u14
+   driver_config          :
+     image                : quay.io/hellofresh/kitchen-base
+     platform             : ubuntu
+   driver                 :
+    name                  : docker
+
+suites                    :
+  - name                  : standalone
+    provisioner           :
+        playbook          : "test/integration/standalone/standalone.yml"
+    verifier              :
+      patterns            : [ test/integration/standalone/serverspec/*_spec.rb ]
+    driver_config         :
+      run_options         : "-p 192.168.99.100:22:22"
+
+  - name                  : cluster_1
+    provisioner           :
+        playbook          : "test/integration/cluster_1/cluster_1.yml"
+    verifier              :
+      patterns            : [ test/integration/cluster_1/serverspec/*_spec.rb ]
+    driver_config         :
+      run_options         : --ip=172.17.0.11

.travis.yml

@@ -0,0 +1,17 @@
+---
+language: python
+python: "2.7"
+before_install:
+  - sudo apt-get update -qq
+install:
+  # Install Ansible.
+  - pip install ansible
+
+  # Create an inventory file for testing.
+  - "printf 'rabbit-standalone ansible_ssh_host=localhost' > inventory"
+script:
+  # Check the role/playbook's syntax.
+  - "ansible-playbook -i inventory vagrant/site.yml --syntax-check"
+
+  # NOTE(retr0h): Testing standalone until we can test a cluster with travis.
+  - "ansible-playbook -vvvv -i inventory vagrant/standalone.yml --connection=local --sudo"

Gemfile

@@ -0,0 +1,8 @@
+source 'https://rubygems.org'
+
+#gem 'net-ssh','~> 2.9'
+# Could
+gem 'kitchen-verifier-serverspec','~> 0.5.0'
+gem 'kitchen-ansiblepush'
+gem 'kitchen-docker'
+gem 'serverspec'

README.md

@@ -0,0 +1,211 @@
+# Announce
+
+Long time no update. I'm back on this playbook again, I'll be merging fixes (url,
+key checking,...) in master and releasing a working tagged version.
+
+Then I'll focus on creating a next branche that will be the version 2.0 of this
+playbook. The main things I plan to do with the version 2 is going to separate
+the installation steps from the pure configuration. I don't want to support a
+gazillion OS in one playbook. Thus, you'll be able to make a
+ansible-playbook-rabbitmq-install-my-little-snowflak-os yourself :)
+
+Thank you all for all the participation!
+
+# Rabbitmq Playbook
+
+Playbook to install and configure rabbitmq. Will come with various
+configuration tweaking later on.
+
+If you wish to discuss modifications, or help to support more platforms, open
+an issue.
+
+## Installation
+
+Use Ansible galaxy to install this playbook:
+
+    $ ansible-galaxy install Mayeu.RabbitMQ,1.4.0
+
+The `master` branch should currently be considered instable. Please avoid using
+it for something else than test purpose :)
+
+## Supported system
+
+Currently only Debian Jessie and Wheezy on amd64 are supported. Patch welcome
+to support other distribution or OS.
+
+## Semantic versioning 2.0.0
+
+Starting with the commit
+[67c608826a140868a71854ce3129b5f3d67ddcce](https://github.com/Mayeu/ansible-playbook-rabbitmq/commit/67c608826a140868a71854ce3129b5f3d67ddcce),
+this playbook use semantic versioning. Following the specification, and since
+the playbook is used in production and I want to avoid breaking the
+compatibility, the first version number is 1.0.0
+
+The public API defined in the semantic versioning correspond to the settings
+available to the user. Breaking the API (incrementing from `X.Y.Z` to
+`(X+1).Y.Z`) in this context mean that the user need to change variable name
+for its playbook to run.
+
+Any new feature added (from `X.Y.Z` to `X.(Y+1).Z`) should have a working
+default value that need no user interaction by default. If a feature addition
+require user interaction, then it is not a minor upgrade, but a major one.
+
+## Role Variables
+
+### Installation
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_os_package`|Bool|When true uses the default package proposed by the OS or distribution instead of the one distributed by RabbitMQ.|`false`|
+
+
+### Environment
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_conf_env`|Hash|Set environment variable|undef|
+
+Exemple:
+
+```yaml
+rabbitmq_conf_env:
+  RABBITMQ_ROCKS: correct
+```
+
+Will generate:
+
+```
+RABBITMQ_ROCKS="correct"
+```
+
+### Certificate
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_cacert`|String|Path of the CA certificate file.|`files/rabbitmq_cacert.pem`
+`rabbitmq_server_key`|String|Path of the SSL key file.|`files/rabbitmq_server_key.pem`
+`rabbitmq_server_cert`|String|Path of the SSL certificate file.|`files/rabbitmq_server_cert.pem`
+`rabbitmq_ssl`|Boolean|Define if we need to use SSL|`true`
+
+### Default configuration file
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_conf_tcp_listeners_address`|String|listening address for the tcp interface|`''`
+`rabbitmq_conf_tcp_listeners_port`|Integer|listening port for the tcp interface|`5672`
+`rabbitmq_conf_ssl_listeners_address`|String|listening address for the ssl interface|`'0.0.0.0'`
+`rabbitmq_conf_ssl_listeners_port`|Integer|listening port for the ssl interface|`5671`
+`rabbitmq_conf_ssl_options_cacertfile`|String|Path the CA certificate|`"/etc/rabbitmq/ssl/cacert.pem"`
+`rabbitmq_conf_ssl_options_certfile`|String|Path to the server certificate|`"/etc/rabbitmq/ssl/server_cert.pem"`
+`rabbitmq_conf_ssl_options_keyfile`|String|Path to the private key file|`"/etc/rabbitmq/ssl/server_key.pem"`
+`rabbitmq_conf_ssl_options_fail_if_no_peer_cert`|Boolean|Value of the `fail_if_no_peer_cert` SSL option|`"true"`
+
+### Plugins
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_new_only`|String|Add plugins as new, without deactivating other plugins|`'no'`
+`rabbitmq_plugins`|String|List|List of plugins to activate|`[]`
+
+### Vhost
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_vhost_definitions`|List|Define the list of vhost to create|`[]`
+`rabbitmq_users_definitions`|List of hash|Define the users, and associated vhost and password (see below)|`[]`
+
+Defining the vhosts configuration
+
+```yaml
+rabbitmq_vhost_definitions:
+  - name:    vhost1
+    node:    node_name #Optional, defaults to "rabbit"
+    tracing: yes       #Optional, defaults to "no"
+```
+
+Defining the users configuration:
+
+```yaml
+rabbitmq_users_definitions:
+  - vhost:    vhost1
+    user:     user1
+    password: password1
+    node:     node_name  # Optional, defaults to "rabbit"
+    configure_priv: "^resource.*" # Optional, defaults to ".*"
+    read_priv: "^$" # Disallow reading.
+    write_priv: "^$" # Disallow writing.
+  - vhost:    vhost1
+    user:     user2
+    password: password2
+    force:    no
+    tags:                # Optional, user tags
+    - administrator
+```
+
+## Cluster
+
+# Limitations
+If you remove a node from inventory and node is still running it will not be removed
+
+### Federation
+
+|Name|Type|Description|Default|
+|----|----|-----------|-------|
+`rabbitmq_federation`|Boolean|Define if we need to setup federation|`false`
+`rabbitmq_federation_configuration`|List of hashes|Define all the federation we need to setup|Not defined
+`rabbitmq_policy_configuration`|List of hashes|Define all the federation we need to setup|Not defined
+
+Defining the federation upstream configuration:
+
+```yaml
+rabbitmq_federation_upstream:
+  - name: upstream name
+    vhost: local vhost to federate
+    value: json description of the federation
+    local_username: the local username for the federation
+```
+
+See the [RabbitMQ documentation](http://www.rabbitmq.com/federation.html) for
+the possible JSON value.
+
+Defining the policy configuration:
+
+```yaml
+rabbitmq_policy_configuration:
+  - name: name of the policy
+    vhost: vhost where the policy will be applied
+    pattern: pattern of the policy
+    tags: description of the policy in dict form # exemple: "ha-mode=all"
+```
+
+## Files required
+
+You have to put the needed certificates in your `files/` folder, for example:
+
+    files/
+     |- cacert.crt
+     |- myserver_key.key
+     |- myserver_cert.crt
+
+And then configure the role:
+
+```yaml
+    rabbitmq_cacert: files/cacert.crt
+    rabbitmq_server_key: files/myserver_key.key
+    rabbitmq_server_cert: files/myserver_cert.crt
+```
+
+## Testing
+
+There is some tests that try to provision a VM using Vagrant. Just launch them
+with:
+
+    $ vagrant up # for test with Debian jessie
+    $ export VAGRANT_BOX_NAME='chef/centos-6.5' vagrant up # for test with Centos
+
+You can change the VM used during test by setting the `VAGRANT_BOX_NAME` env
+variable to something else than `deb/jessie`.
+
+## License
+
+BSD

defaults/main.yml

@@ -0,0 +1,76 @@
+---
+# ################
+# Playbook control
+# ################
+
+# Take the package given by the OS/distrib
+rabbitmq_os_package                           : false
+
+# Plugins
+rabbitmq_plugins                              : []
+rabbitmq_new_only                             : 'no'
+
+# VHOST
+rabbitmq_vhost_definitions                    : []
+rabbitmq_users_definitions                    : []
+
+# Avoid setting up federation
+rabbitmq_federation                           : false
+
+# defaults file for rabbitmq
+rabbitmq_cacert                               : "files/rabbitmq_cacert.pem"
+rabbitmq_server_key                           : "files/rabbitmq_server_key.pem"
+rabbitmq_server_cert                          : "files/rabbitmq_server_cert.pem"
+rabbitmq_ssl                                  : true
+
+## Optional logging
+##  none, error, warnings, info, debug
+# rabbitmq_log_level                           :
+#                                                  channel    : error
+#                                                  connection : error
+#                                                  federation : error
+#                                                  mirroring  : error
+
+# ######################
+# RabbitMQ Configuration
+# ######################
+
+# rabbitmq TCP configuration
+rabbitmq_conf_tcp_listeners_address           : '0.0.0.0'
+rabbitmq_conf_tcp_listeners_port              : 5672
+
+# rabbitmq SSL configuration
+rabbitmq_conf_ssl_listeners_address           : '0.0.0.0'
+rabbitmq_conf_ssl_listeners_port              : 5671
+rabbitmq_conf_ssl_options_cacertfile          : "/etc/rabbitmq/ssl/{{ rabbitmq_cacert | basename }}"
+rabbitmq_conf_ssl_options_certfile            : "/etc/rabbitmq/ssl/{{ rabbitmq_server_cert | basename }}"
+rabbitmq_conf_ssl_options_keyfile             : "/etc/rabbitmq/ssl/{{ rabbitmq_server_key | basename }}"
+rabbitmq_conf_ssl_options_fail_if_no_peer_cert: "true"
+
+rabbitmq_env                                  : false
+# Guest options
+remove_guest_user                             : true
+
+# Enable cluster
+rabbitmq_clustering                           : false
+## Erlang cookie
+rabbitmq_erlang_cookie_path                   : "/var/lib/rabbitmq/.erlang.cookie"
+rabbitmq_erlang_cookie                        : beKSqkmoLrtvVfjOytLOQpATbGVEGbVA #test cookie, override for production
+## Cluster options
+rabbitmq_cluster_instance_to_join_index       : 0
+rabbitmq_cluster_instance_to_join             : "{{ groups[rabbitmq_cluster_group][rabbitmq_cluster_instance_to_join_index].split('.')[0] }}"
+rabbitmq_cluster_group                        : rabbit_cluster
+rabbitmq_cluster_post_fix_domain              : "production.example.com"
+# Automation user for cluster. You should encrypt
+rabbitmq_cluster_api_user                     : "api-automation"
+rabbitmq_cluster_api_password                 : "api-password"
+
+# How to get the IPs of cluster
+rabbitmq_clustering_resolve_names             : "ansible" # ['ansible', dns]
+
+## Probably dont need to change that stuff
+### Construct a regex to match group before .
+rabbitmq_cluster_post_fix_domain_regex_replace: "([^.]*).*"
+# Print extra message related to inventory
+rabbitmq_cluster_debug                        : false
+

files/rabbitmq.list

@@ -0,0 +1,2 @@
+# Official repository of rabbitmq
+deb http://www.rabbitmq.com/debian/ testing main

handlers/main.yml

@@ -0,0 +1,10 @@
+---
+# handlers file for rabbitmq
+- name: restart rabbitmq-server
+  service: name=rabbitmq-server state=restarted enabled=yes
+
+- name: stop rabbitmq-server
+  service: name=rabbitmq-server state=stopped enabled=yes
+
+- name: start rabbitmq-server
+  service: name=rabbitmq-server state=started enabled=yes