I want to imagine that separate vhosts with different usernames and appropriate permissions would be sufficient. Just like we don't run separate MySQL instances for a different database, we just make users with permissions.
But, I haven't played with Murano at all, what do I know. On Friday, September 16, 2016, Joe Topjian <j...@topjian.net> wrote: > Hi all, > > We're planning to deploy Murano to one of our OpenStack clouds and I'm > debating the RabbitMQ setup. > > For background: the Murano agent that runs on instances requires access to > RabbitMQ. Murano is able to be configured with two RabbitMQ services: one > for traditional OpenStack communication and one for the Murano/Agent > communication. > > From a security/segregation point of view, would vhost separation on our > existing RabbitMQ cluster be sufficient? Or is it recommended to have an > entirely separate cluster? > > As you can imagine, I'd like to avoid having to manage *two* RabbitMQ > clusters. :) > > Thanks, > Joe >
_______________________________________________ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators