WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-02 14:30:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

The fail_if_no_peer_cert option is a server-only value, it now fails

Browse Source 
https://groups.google.com/g/rabbitmq-users/c/qAwG0zHI53o

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard
2025-06-26 16:35:09 +02:00
parent 37269263ff
commit 06d83032c4
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/rabbitmq_cluster/tasks/main.yml
View File

@@ -445,7 +445,7 @@
vhost: /public_pubsub
vars:
federation_upstream_value:
uri: "amqps://pubsub_federation:@rabbitmq01{{env_suffix}}.{{datacenter}}.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&fail_if_no_peer_cert=true&server_name_indication=rabbitmq{{env_suffix}}.fedoraproject.org&auth_mechanism=external"
uri: "amqps://pubsub_federation:@rabbitmq01{{env_suffix}}.{{datacenter}}.fedoraproject.org/%2Fpubsub?cacertfile=%2Fetc%2Frabbitmq%2Fca.crt&certfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_cert.pem&keyfile=%2Fetc%2Frabbitmq%2Fpubsub_federation%2Fclient_key.pem&verify=verify_peer&server_name_indication=rabbitmq{{env_suffix}}.fedoraproject.org&auth_mechanism=external"
ack-mode: "on-confirm"
- name: Configure a policy to federate the pubsub topic exchange to public_pubsub

1
roles/rabbitmq_cluster/templates/rabbitmq.conf.j2
View File

@@ -66,6 +66,7 @@ default_user_tags.administrator = true
## Clustering
## =====================
##
cluster_name = {{env_prefix}}{{datacenter}}.fedoraproject.org
cluster_partition_handling = autoheal
## Make clustering happen *automatically* at startup. Only applied