About RabbitMQ users

mrtmm · September 18, 2020, 11:27am

Hi All!

I’ve run into some questions in regards of the RabbitMQ users and I would appreciate some help understanding what are all of the users for and how are they being used exactly.

So, edx-configuration defines the following users for RabbitMQ:

github.com

edx/configuration/blob/master/playbooks/roles/rabbitmq/defaults/main.yml#L26


rabbitmq_log_dir: "{{ COMMON_LOG_DIR }}/rabbitmq"
rabbitmq_cfg_dir: "{{ COMMON_CFG_DIR }}/rabbitmq"

rabbitmq_user: "rabbitmq"
rabbitmq_group: "rabbitmq"

RABBIT_ADMIN_PASSWORD: 'the example admin password'

# Environment specific vars
RABBIT_ERLANG_COOKIE: 'DEFAULT_COOKIE'
RABBIT_USERS:
  - name: 'admin'
    password: "{{ RABBIT_ADMIN_PASSWORD }}"
  - name: 'edx'
    password: 'edx'
  - name: 'celery'
    password: 'celery'

RABBITMQ_VHOSTS:
  - '/'

We override RABBIT_USERS to set EDXAPP_CELERY_PASSWORD as the celery user’s password. So here’s what I do know about those users:

The admin user is for administrative interactions with RabbitMQ
The celery user is for Celery running on edX app servers.

And here’s what I don’t know but would really like to find out:

What is the edx user for exactly?

In addition, It seems that all of the users that are defined in RABBIT_USERS, become admin users, not just the user named admin:

github.com

edx/configuration/blob/master/playbooks/roles/rabbitmq/tasks/main.yml#L271


- set_fact:
    permissions: "{{ permissions|default([])+[{'vhost':item,'configure_priv':'.*','read_priv':'.*','write_priv':'.*'}] }}"
  with_items:
    - "{{ RABBITMQ_VHOSTS }}"
  tags:
    - users
    - maintenance
    - "manage"
    - "manage:app-users"

- name: Add admin users
  rabbitmq_user:
    user: "{{ item.name }}"
    password: "{{ item.password }}"
    tags: "administrator"
    state: "{{ item.state | default('present') }}"
    permissions: "{{ permissions }}"
  with_items:
    - "{{rabbitmq_auth_config.admins}}"
  when: "'admins' in rabbitmq_auth_config"
  tags:

So I would also like to understand why is that?

Thanks in advance to anyone willing to take a moment and help me understand this!

Topic		Replies	Views
Error send bulk email with ironwood Site Operations Help	0	534	November 20, 2020
5 ADRs: Adding User Groups to the platform Architecture	12	296	July 28, 2025
CMS not auto-reloading Site Operations Help	5	403	February 8, 2021
RabbitMQ long running tasks Site Operators	2	74	September 26, 2024
RabbitMQ config & compute_all_grades_for_course ETA are unable to work together, causing unrecoverable error on celery Development	0	206	July 21, 2023

About RabbitMQ users

Related topics