StatefulSet 与 RabbitMQ 仲裁队列 Hands-on

export RABBIT_OPERATOR_VERSION='vREPLACE_VERSION'
curl -fsSL "https://github.com/rabbitmq/cluster-operator/releases/download/$RABBIT_OPERATOR_VERSION/cluster-operator.yml" -o rabbit-operator.yaml
# 审阅 CRD、RBAC、镜像，按供应商兼容表选择 RabbitMQ 版本。
kubectl apply --server-side -f rabbit-operator.yaml
kubectl -n rabbitmq-system rollout status deployment/rabbitmq-cluster-operator --timeout=5m
kubectl create namespace messaging --dry-run=client -o yaml | kubectl apply -f -

apiVersion: cert-manager.io/v1
kind: Issuer
metadata: {name: enterprise-ca, namespace: messaging}
spec:
  ca:
    secretName: messaging-intermediate-ca

kubectl -n messaging create secret tls messaging-intermediate-ca --cert=/secure/pki/intermediate-chain.crt --key=/secure/pki/intermediate.key
kubectl apply -f rabbit-issuer.yaml
kubectl -n messaging wait --for=condition=Ready issuer/enterprise-ca --timeout=2m

apiVersion: cert-manager.io/v1
kind: Certificate
metadata: {name: orders-rabbit, namespace: messaging}
spec:
  secretName: orders-rabbit-tls
  duration: 2160h
  renewBefore: 720h
  privateKey: {rotationPolicy: Always}
  issuerRef: {name: enterprise-ca, kind: Issuer}
  dnsNames:
    - orders-rabbit.messaging.svc
    - orders-rabbit.messaging.svc.cluster.local
    - '*.orders-rabbit-nodes.messaging.svc.cluster.local'

kubectl apply -f rabbit-tls.yaml
kubectl -n messaging wait --for=condition=Ready certificate/orders-rabbit --timeout=5m

apiVersion: rabbitmq.com/v1beta1
kind: RabbitmqCluster
metadata: {name: orders-rabbit, namespace: messaging}
spec:
  replicas: 3
  image: REPLACE_RABBITMQ_IMAGE_AT_DIGEST
  resources:
    requests: {cpu: '1', memory: 2Gi}
    limits: {cpu: '2', memory: 2Gi}
  persistence:
    storageClassName: REPLACE_RETAIN_STORAGECLASS
    storage: 50Gi
  tls:
    secretName: orders-rabbit-tls
    disableNonTLSListeners: true
  rabbitmq:
    additionalConfig: |
      default_queue_type = quorum
      disk_free_limit.absolute = 5GB
  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchLabels: {app.kubernetes.io/name: orders-rabbit}
          topologyKey: kubernetes.io/hostname

kubectl apply --dry-run=server -f rabbit-cluster.yaml
kubectl apply -f rabbit-cluster.yaml
kubectl -n messaging get rabbitmqcluster,sts,pods,pvc,svc,pdb
kubectl -n messaging rollout status statefulset/orders-rabbit-server --timeout=15m
kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl cluster_status

apiVersion: policy/v1
kind: PodDisruptionBudget
metadata: {name: orders-rabbit, namespace: messaging}
spec:
  minAvailable: 2
  selector:
    matchLabels: {app.kubernetes.io/name: orders-rabbit}

kubectl apply -f rabbit-pdb.yaml
kubectl -n messaging get pdb orders-rabbit

kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl add_vhost orders
kubectl -n messaging exec -it orders-rabbit-server-0 -- rabbitmqctl add_user orders-app
kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl set_permissions -p orders orders-app '^orders[.].*' '^orders[.].*' '^orders[.].*'
kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl list_permissions -p orders

kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl list_vhosts
kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl list_queues -p orders name type messages_ready messages_unacknowledged

kubectl -n messaging exec orders-rabbit-server-0 -- rabbitmqctl set_policy -p orders --apply-to quorum_queues orders-reliable-dlx '^orders[.]tasks$' '{"dead-letter-exchange":"orders.dlx","dead-letter-routing-key":"orders.failed","dead-letter-strategy":"at-least-once","overflow":"reject-publish","max-length":100000}'