rabbitmq-secrets-engine
devops-rob/rabbitmq-secrets-engine/vault
This module enables and configures the RabbitMQ secrets engine.
RabbitMQ Secrets Engine with tags example Overview This module enables and configures the RabbitMQ secrets engine. Example use case In cases where engineers require Just-In-Time management access to RabbitMQ to administer the platform, configuring the RabbitMQ secrets engine with this example will allow authenticated and authorised Vault users to obtain temporary RabbitMQ credentials. Also for cases where applications require read-only access to resources in a specific virtual host. RabbitMQ Requirements Vault will require a RabbitMQ user with the Administrator management plugin tag. No other permissions are required. For more information about RabbitMQ Access and Permissions, refer to the rabbitmqctl documentation. Usage ``hcl provider "vault" { address = "http://localhost:8200" token = v
| Name | Type | Description | Default |
|---|---|---|---|
| rabbitmq_backend_role_name | string | (Required) Name of RabbitMQ backend role. | required |
| rabbitmq_tags | string | (Optional) Comma separated list of RabbitMQ tags to assign to generated user. | required |
| rabbitmq_password | string | (Required) Password for RabbitMQ instance. | required |
| rabbitmq_username | string | (Required) Username for RabbitMQ instance. | required |
| rabbitmq_read_permissions | string | (Optional) List of resources to grant read permissions to. | "" |
| rabbitmq_write_permissions | string | (Optional) List of resources to grant write permissions to. | "" |
| path | string | (Required) The path that the secrets engine will be mounted to. | "rabbitmq" |
| rabbitmq_verify_connection | bool | (Optional) Specifies whether to verify connection URI, username, and password. | false |
| rabbitmq_vhost | string | (Optional) RabbitMQ vhost that generated credentials will have access to. | "/" |
| rabbitmq_default_ttl | number | (Optional) Default TTL for RabbitMQ. | 3600 |
| rabbitmq_maximum_ttl | number | (Optional) Max TTL for RabbitMQ. | 3600 |
| rabbitmq_configure_permissions | string | (Optional) List of resources to grant configure permissions to. | "" |
| rabbitmq_uri | string | (Optional) Connection URI for RabbitMQ instance. | "http://localhost:15672" |