From: Stephen Gran Date: Mon, 26 Aug 2013 09:25:53 +0000 (+0100) Subject: add management modules and rules X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;ds=sidebyside;h=f292e24e42abb551bfdea2b29c2ee407291ca8cb;p=dsa-puppet.git add management modules and rules Signed-off-by: Stephen Gran --- diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp index 1ebd2ea6..2b4abf94 100644 --- a/modules/roles/manifests/pubsub.pp +++ b/modules/roles/manifests/pubsub.pp @@ -82,6 +82,31 @@ class roles::pubsub { require => Rabbitmq_vhost['packages'] } + rabbitmq_plugin { 'rabbitmq_management': + ensure => present, + provider => 'rabbitmqplugins', + require => Package['rabbitmq-server'], + notify => Service['rabbitmq-server'] + } + rabbitmq_plugin { 'rabbitmq_management_agent': + ensure => present, + provider => 'rabbitmqplugins', + require => Package['rabbitmq-server'], + notify => Service['rabbitmq-server'] + } + rabbitmq_plugin { 'rabbitmq_tracing': + ensure => present, + provider => 'rabbitmqplugins', + require => Package['rabbitmq-server'], + notify => Service['rabbitmq-server'] + } + rabbitmq_plugin { 'rabbitmq_management_visualiser': + ensure => present, + provider => 'rabbitmqplugins', + require => Package['rabbitmq-server'], + notify => Service['rabbitmq-server'] + } + @ferm::rule { 'rabbitmq': description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V4)' @@ -104,4 +129,13 @@ class roles::pubsub { description => 'rabbitmq cluster connections', rule => "proto tcp mod state state (NEW) saddr (${you}) ACCEPT" } + @ferm::rule { 'rabbitmq_mgmt': + description => 'rabbitmq cluster connections', + rule => '&SERVICE_RANGE(tcp, 15672, $DSA_IPS)' + } + @ferm::rule { 'rabbitmq_mgmt_v6': + domain => '(ip6)', + description => 'rabbitmq cluster connections', + rule => '&SERVICE_RANGE(tcp, 15672, $DSA_V6_IPS)' + } }