community.rabbitmq icon indicating copy to clipboard operation
community.rabbitmq copied to clipboard

Add ability to specify 'ca_cert' when using API for user management

Open bcroxton opened this issue 10 months ago • 0 comments

SUMMARY

Feature request related to recent changes from issues #76 /171; Add a choice for allowing specification of 'ca_cert' when using API for user management.

ISSUE TYPE
  • Feature need: Managing other resources using rabbitmq API allow the specification of 'ca_cert', this specification is also required for managing users on internal clusters if they're using internal certs.
COMPONENT NAME

.../main/plugins/modules/rabbitmq_user.py

ADDITIONAL INFORMATION

Specifying a custom CA cert is required when working with some clusters, especially internal clusters, and specifying ca_cert is not currently possible with the community.rabbitmq.rabbitmq_user plugin.

- name: Add application user and assign default permissions
  community.rabbitmq.rabbitmq_user:
    vhost: /test
    login_host: rmqbroker.fqdn.com
    login_port: 15671
    login_protocol: https
    login_user: user
    login_password: secret
    **ca_cert: certs/some.internalCA.com.crt**
    user: testuser
    password: "{{ lookup('ansible.builtin.password', '/dev/null', chars=['ascii_lowercase', 'ascii_uppercase', 'digits'], length=12) }}"
    permissions: 
      - vhost: /test
        configure_priv: 
        read_priv: .*
        write_priv: .*
    topic_permissions:
      - vhost: /test
        exchange: '(AMQP default)'
        read_priv: .*
        write_priv: .*
    state: present

bcroxton avatar Jan 21 '25 16:01 bcroxton