As per discussion in the OSA docs summit session, clean up of installation guide. This fixes typos, minor RST mark up changes, and passive voice. This patch also merges a some of the sections into the larger chapter. This is in an effort to remove multiple smaller files. This patch is the first of many to avoid major conflicts. Change-Id: I5b6d540bfa691b36dbe9cf909de8e61affb0cd92
43 lines
1.4 KiB
ReStructuredText
43 lines
1.4 KiB
ReStructuredText
`Home <index.html>`_ OpenStack-Ansible Installation Guide
|
|
|
|
Configuring RabbitMQ (optional)
|
|
===============================
|
|
|
|
RabbitMQ provides the messaging broker for various OpenStack services. The
|
|
OpenStack-Ansible project configures a plaintext listener on port 5672 and
|
|
a SSL/TLS encrypted listener on port 5671.
|
|
|
|
Customize your RabbitMQ deployment in ``/etc/openstack_deploy/user_variables.yml``.
|
|
|
|
Add a TLS encrypted listener to RabbitMQ
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
The OpenStack-Ansible project provides the ability to secure RabbitMQ
|
|
communications with self-signed or user-provided SSL certificates. Refer to
|
|
`Securing services with SSL certificates`_ for available configuration
|
|
options.
|
|
|
|
.. _Securing services with SSL certificates: configure-sslcertificates.html
|
|
|
|
Enable encrypted connections to RabbitMQ
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
The control of SSL communication between various OpenStack services and
|
|
RabbitMQ is via the Ansible variable ``rabbitmq_use_ssl``:
|
|
|
|
.. code-block:: yaml
|
|
|
|
rabbitmq_use_ssl: true
|
|
|
|
Setting this variable to ``true`` adjusts the RabbitMQ port to 5671 (the
|
|
default SSL/TLS listener port) and enables SSL connectivity between each
|
|
OpenStack service and RabbitMQ.
|
|
|
|
Setting this variable to ``false`` disables SSL encryption between
|
|
OpenStack services and RabbitMQ. Use the plaintext port for RabbitMQ, 5672,
|
|
for all services.
|
|
|
|
--------------
|
|
|
|
.. include:: navigation.txt
|