Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RabbitMQ Bindings: Support for mTLS and external authentication with SASL #2656

Merged

Conversation

abossard
Copy link
Contributor

@abossard abossard commented Mar 9, 2023

Description

This is a port of #2515 to enable mTLS and External SASL based auth also in the Dapr bindings for RabbitMQ.

This is based on the EXTERNAL mechanism described here:
https://www.rabbitmq.com/access-control.html#mechanisms

Issue reference

#2514 but this time for the bindings

Checklist

Please make sure you've completed the relevant tasks for this PR, out of the following list:

  • Code compiles correctly
  • Created/updated tests
  • Extended the documentation / Created issue in the https://github.com/dapr/docs/ repo: dapr/docs#[issue number]

@abossard abossard requested review from a team as code owners March 9, 2023 09:53
@abossard
Copy link
Contributor Author

abossard commented Mar 9, 2023

Please ignore until #2515 is merged.

@abossard abossard marked this pull request as draft March 15, 2023 19:53
@ItalyPaleAle ItalyPaleAle added this to the v1.11 milestone Mar 15, 2023
@abossard abossard force-pushed the feature/rabbitmq_bindings_mtls_external_sasl branch from 72907aa to c693ee6 Compare March 23, 2023 09:11
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
@abossard abossard force-pushed the feature/rabbitmq_bindings_mtls_external_sasl branch from c693ee6 to 2e9c849 Compare March 23, 2023 10:29
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
@ItalyPaleAle
Copy link
Contributor

@abossard now that #2515 has been merged, is this ready for review? Could you please address the merge conflicts?

@abossard
Copy link
Contributor Author

I'll take a peek later today and complete it. Thanks for the patience.

abossard and others added 5 commits April 26, 2023 09:03
Signed-off-by: Andre Bossard <abossard@users.noreply.github.com>
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
Signed-off-by: Andre Bossard <anbossar@microsoft.com>
@abossard abossard force-pushed the feature/rabbitmq_bindings_mtls_external_sasl branch from 90dd61c to 2ffc590 Compare April 26, 2023 11:06
@abossard abossard marked this pull request as ready for review April 26, 2023 20:06
Copy link
Member

@berndverst berndverst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Something about the certification test changes is still wrong. Maybe the Docker file paths? I remember that being an issue with the pubsub component.

Also please note we have code freeze very very soon, so if you can get the tests to pass we can include this in 1.11.

To run certification tests locally navigate to tests/certification/bindings/rabbitmq and run:

export GOLANG_PROTOBUF_REGISTRATION_CONFLICT=ignore
go test -v --count=1 .
=== FAIL: bindings/rabbitmq TestRabbitMQExtAuth/rabbitmq_certification (1.03s)
    flow.go:220: Running step: rabbitmqcertification
    dockercompose.go:57: build path /home/runner/work/components-contrib/components-contrib/tests/certification/bindings/rabbitmq/mtls_sasl_external/mtls_sasl_external/docker_sasl_external either does not exist, is not accessible, or is not a valid URL.
        
    flow.go:228: Completed step: rabbitmqcertification
    flow.go:230: Fatal error in step rabbitmqcertification: exit status 1
    dockercompose.go:72: build path /home/runner/work/components-contrib/components-contrib/tests/certification/bindings/rabbitmq/mtls_sasl_external/mtls_sasl_external/docker_sasl_external either does not exist, is not accessible, or is not a valid URL.

berndverst and others added 2 commits May 1, 2023 14:06
@abossard
Copy link
Contributor Author

abossard commented May 1, 2023

Hi @berndverst thank, yeah again it was in the docker-compose.yaml a wrong path. Funnily enough it works with Docker Desktop on Mac, but not with Docker on Linux. Fixed and pushed it.

@berndverst berndverst added this pull request to the merge queue May 3, 2023
Merged via the queue into dapr:master with commit 9f4086f May 3, 2023
83 checks passed
aaguilartablada pushed a commit to aaguilartablada/dapr-components-contrib that referenced this pull request Jun 1, 2023
…SASL (dapr#2656)

Signed-off-by: Andre Bossard <anbossar@microsoft.com>
Signed-off-by: Andre Bossard <abossard@users.noreply.github.com>
Co-authored-by: Andre Bossard <anbossar@microsoft.com>
Co-authored-by: Deepanshu Agarwal <deepanshu.agarwal1984@gmail.com>
Co-authored-by: Bernd Verst <github@bernd.dev>
Signed-off-by: Alvaro Aguilar <alvaro.aguilar@scrm.lidl>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants