Add "rabbit-rescue" script

This script was created to fix a broken/blank RabbitMQ install.
It was found useful to some other OSA operators and is being added here.

Change-Id: Ibd81a839e9cba1de6980d46a01f0df0ea68eb77d
This commit is contained in:
Henry Bonath 2020-03-18 18:35:20 -04:00
parent 4851e29e9c
commit 479288fccf
2 changed files with 91 additions and 0 deletions

30
rabbit-rescue/README.md Normal file
View File

@ -0,0 +1,30 @@
# Rabbit-Rescue
Use this script to rebuild the vhosts and permissions in Rabbitmq in case it gets borked. <br>*(Don't even ask how I managed to do this...)*
This script is loosely based on informatoin gleaned from [this RedHat article](https://access.redhat.com/articles/1167113), and was added to this repo based on [this conversation](http://eavesdrop.openstack.org/irclogs/%23openstack-ansible/%23openstack-ansible.2020-03-11.log.html). <br>Apparently I'm not the only one who has inadvertently destroyed their RabbitMQ installation, so this may be helpful to others in the future.
Note: For clustered installations, this needs to run only on a single node.
## Usage:
- Clone this repo into /opt on your deployment host.
- Edit the Bash array `all_services` and populate with the services you were using in RabbitMQ.
- Populate the service secrets with the information found in your `/etc/openstack_deploy/user_secrets.yml` file.
- _(this is quite possibly something we could try to do automatically in a future update)_
- Execute this from the deployment host, targeting one of your RabbitMQ containers:
- ```
# cd /opt/openstack-ansible
# ansible rabbit_mq_container -m copy -a 'src=/opt/openstack-ops/rabbit-rescue/rabbit-rescue.sh dest=/tmp/rabbit-rescue.sh mode=preserve'
# ansible rabbit_mq_container -m shell -a '/tmp/rabbit-rescue.sh'
```
- Profit!
## Alternative Usage:
- Copy the script file down to one of your RabbitMQ Containers.
- Edit the contents per the above instructions, and execute it.

61
rabbit-rescue/rabbit-rescue.sh Executable file
View File

@ -0,0 +1,61 @@
#!/usr/bin/env bash
#
# Copyright 2020 Henry Bonath <henry@thebonaths.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# **Use this script at your own risk - we do our best to not do any damage but YMMV!**
# All Services - populate this array with the names of the services you are running in your cluster
# some defaults are provided below
all_services=( cinder nova neutron heat glance ceilometer )
# Rabbit Secrets - populate the vars below with information found in /etc/openstack_deploy/user_secrets.yml
# These will be used when re-creating the vhosts and *must* be named based on the service names above
cinder_oslomsg_rpc_password=MYSECRETcinderPassw0rd
nova_oslomsg_rpc_password=MYSECRETnovaPassw0rd
neutron_oslomsg_rpc_password=MYSECRETneutronPassw0rd
heat_oslomsg_rpc_password=MYSECRETheatPassw0rd
glance_oslomsg_rpc_password=MYSECRETglancePassw0rd
ceilometer_oslomsg_rpc_password=MYSECRETceilopmeterPassw0rd
for service in "${all_services[@]}"; do
if ($(rabbitmqctl list_vhosts | grep "/$service" > /dev/null)); then
echo "/$service vhost already exists, skipping."
else
echo "Creating /$service vhost:"
rabbitmqctl add_vhost /$service
fi
if ($(rabbitmqctl list_users | grep "$service" > /dev/null)); then
echo "$service user already exists, skipping."
else
echo "Creating $service user:"
secret=$(printf \$"$service"_oslomsg_rpc_password)
eval $(echo rabbitmqctl add_user $service $secret)
fi
if ($(rabbitmqctl list_permissions --vhost /$service | grep 'does not exist' > /dev/null)); then
echo "Setting $service permissions:"
rabbitmqctl set_permissions $service -p /$service ".*" ".*" ".*"
else
echo "$service permissions already set, skipping."
fi
done
exit 0