Skip to content

Files

Latest commit

ansdansd
Create README.md
Sep 27, 2021
7122449 · Sep 27, 2021

History

History
14 lines (10 loc) · 1007 Bytes

README.md

File metadata and controls

14 lines (10 loc) · 1007 Bytes

default-user-credential-updater

This is a program that watches a RabbitMQ config file containing default_user and default_pass for changes. If the file changes, it updates the password in RabbitMQ.

It is meant to be deployed as a sidecar container by https://github.com/rabbitmq/cluster-operator when HashiCorp Vault is enabled.

The use case is as-follows:

  1. Default user password changes in Vault server.
  2. Vault agent sidecar places new password into /etc/rabbitmq/conf.d/11-default_user.conf.
  3. This sidecar (default-user-credential-updater) updates the password RabbitMQ server side by doing an HTTP PUT against the RabbitMQ Management API. This allows for default user password rotation without the need to restart RabbitMQ server.
  4. This sidecar copies new password to /var/lib/rabbitmq/.rabbitmqadmin.conf to be used by rabbitmqadmin CLI.

See vault-default-user for an end-to-end example.