I want to imagine that separate vhosts with different usernames and
appropriate permissions would be sufficient. Just like we don't run
separate MySQL instances for a different database, we just make users with

But, I haven't played with Murano at all, what do I know.

On Friday, September 16, 2016, Joe Topjian <j...@topjian.net> wrote:

> Hi all,
> We're planning to deploy Murano to one of our OpenStack clouds and I'm
> debating the RabbitMQ setup.
> For background: the Murano agent that runs on instances requires access to
> RabbitMQ. Murano is able to be configured with two RabbitMQ services: one
> for traditional OpenStack communication and one for the Murano/Agent
> communication.
> From a security/segregation point of view, would vhost separation on our
> existing RabbitMQ cluster be sufficient? Or is it recommended to have an
> entirely separate cluster?
> As you can imagine, I'd like to avoid having to manage *two* RabbitMQ
> clusters. :)
> Thanks,
> Joe
OpenStack-operators mailing list

Reply via email to