Add the credentials and configs for the Fedora public vhosts

Add credentials and configurations for both the staging and production
virtual hosts provided by Fedora. Document their usage.

Signed-off-by: Jeremy Cline <jcline@redhat.com>

MANIFEST.in

@@ -1,4 +1,5 @@
 include LICENSE README.rst config.toml.example dev-requirements.txt requirements.txt tox.ini fm-consumer@.service
+include configs/*
 graft docs
 prune docs/_build
 graft fedora_messaging/tests/fixtures

configs/cacert.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

configs/fedora-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

configs/fedora-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/fedora.stg-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

configs/fedora.stg-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/fedora.stg.toml

@@ -0,0 +1,77 @@
+# A basic configuration for Fedora's staging message broker, using the example
+# callback which simply prints messages to standard output.
+#
+# This file is in the TOML format.
+amqp_url = "amqps://fedora.stg:@rabbitmq.stg.fedoraproject.org/%2Fpublic_pubsub"
+callback = "fedora_messaging.example:printer"
+
+[tls]
+ca_cert = "/etc/fedora-messaging/stg-cacert.pem"
+keyfile = "/etc/fedora-messaging/fedora.stg-key.pem"
+certfile = "/etc/fedora-messaging/fedora.stg-cert.pem"
+
+[client_properties]
+app = "Example Application"
+
+[exchanges."amq.topic"]
+type = "topic"
+durable = true
+auto_delete = false
+arguments = {}
+
+# Queue names *must* be in the normal UUID format: run "uuidgen" and use the
+# output as your queue name. If your queue is not exclusive, anyone can connect
+# and consume from it, causing you to miss messages, so do not share your queue
+# name. Any queues that are not auto-deleted on disconnect are garbage-collected
+# after approximately one hour.
+#
+# If you require a stronger guarantee about delivery, please talk to Fedora's
+# Infrastructure team.
+[queues.00000000-0000-0000-0000-000000000000]
+durable = false
+auto_delete = true
+exclusive = true
+arguments = {}
+
+[[bindings]]
+queue = "00000000-0000-0000-0000-000000000000"
+exchange = "amq.topic"
+routing_keys = ["#"]  # Set this to the specific topics you are interested in.
+
+[consumer_config]
+example_key = "for my consumer"
+
+[qos]
+prefetch_size = 0
+prefetch_count = 25
+
+[log_config]
+version = 1
+disable_existing_loggers = true
+
+[log_config.formatters.simple]
+format = "[%(levelname)s %(name)s] %(message)s"
+
+[log_config.handlers.console]
+class = "logging.StreamHandler"
+formatter = "simple"
+stream = "ext://sys.stdout"
+
+[log_config.loggers.fedora_messaging]
+level = "INFO"
+propagate = false
+handlers = ["console"]
+
+[log_config.loggers.twisted]
+level = "INFO"
+propagate = false
+handlers = ["console"]
+
+[log_config.loggers.pika]
+level = "WARNING"
+propagate = false
+handlers = ["console"]
+
+[log_config.root]
+level = "ERROR"
+handlers = ["console"]

configs/fedora.toml

@@ -0,0 +1,78 @@
+# A basic configuration for Fedora's message broker, using the example callback
+# which simply prints messages to standard output.
+#
+# This file is in the TOML format.
+amqp_url = "amqps://fedora:@rabbitmq.fedoraproject.org/%2Fpublic_pubsub"
+passive_declares = false
+callback = "fedora_messaging.example:printer"
+
+[tls]
+ca_cert = "/etc/fedora-messaging/cacert.pem"
+keyfile = "/etc/fedora-messaging/fedora-key.pem"
+certfile = "/etc/fedora-messaging/fedora-cert.pem"
+
+[client_properties]
+app = "Example Application"
+
+[exchanges."amq.topic"]
+type = "topic"
+durable = true
+auto_delete = false
+arguments = {}
+
+# Queue names *must* be in the normal UUID format: run "uuidgen" and use the
+# output as your queue name. If your queue is not exclusive, anyone can connect
+# and consume from it, causing you to miss messages, so do not share your queue
+# name. Any queues that are not auto-deleted on disconnect are garbage-collected
+# after approximately one hour.
+#
+# If you require a stronger guarantee about delivery, please talk to Fedora's
+# Infrastructure team.
+[queues.00000000-0000-0000-0000-000000000000]
+durable = false
+auto_delete = true
+exclusive = true
+arguments = {}
+
+[[bindings]]
+queue = "00000000-0000-0000-0000-000000000000"
+exchange = "amq.topic"
+routing_keys = ["#"]  # Set this to the specific topics you are interested in.
+
+[consumer_config]
+example_key = "for my consumer"
+
+[qos]
+prefetch_size = 0
+prefetch_count = 25
+
+[log_config]
+version = 1
+disable_existing_loggers = true
+
+[log_config.formatters.simple]
+format = "[%(levelname)s %(name)s] %(message)s"
+
+[log_config.handlers.console]
+class = "logging.StreamHandler"
+formatter = "simple"
+stream = "ext://sys.stdout"
+
+[log_config.loggers.fedora_messaging]
+level = "INFO"
+propagate = false
+handlers = ["console"]
+
+[log_config.loggers.twisted]
+level = "INFO"
+propagate = false
+handlers = ["console"]
+
+[log_config.loggers.pika]
+level = "WARNING"
+propagate = false
+handlers = ["console"]
+
+[log_config.root]
+level = "ERROR"
+handlers = ["console"]

configs/stg-cacert.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

docs/fedora-broker.rst

@@ -0,0 +1,50 @@
+
+.. _fedora-broker:
+
+=======================
+Fedora's Message Broker
+=======================
+
+Once you've got an application that publishes or consumes messages, you need to
+get it connected to Fedora's message broker. The message broker is located at
+``amqps://rabbitmq.fedoraproject.org/``.
+
+
+External Connections
+====================
+
+Fedora allows anyone on the Internet to create queues and consume from them in
+the public ``/public_pubsub`` AMQP virtual host. This virtual host mirrors all
+messages published to the restricted ``/pubsub`` virtual host.
+
+These public queues have some restrictions applied to them. Firstly, they are
+limited to about 50 megabytes in size, so if your application cannot handle the
+message throughput messages will be automatically discarded once you hit this
+limit. Secondly, queues that are set to be durable (in other words, not
+exclusive or auto-deleted) are automatically deleted after approximately an
+hour.
+
+If you need more robust guarantees about message delivery, or if you need to
+publish messages into Fedora's message broker, contact the Fedora
+Infrastructure team about getting access to the private virtual host.
+
+
+Getting Connected
+-----------------
+
+The public virtual host still requires users to authenticate when connecting,
+so a public user has been created and its private key and x509 certificate are
+distributed with fedora-messaging.
+
+If fedora-messaging was installed via RPM, they should be in
+``/etc/fedora-messaging/`` along with a configuration file called
+``fedora.toml``. If it's been installed via pip, it's easiest to get the
+`key`_, `certificate`_, and the `CA certificate`_ from the upstream git
+repository and start with the following configuration file:
+
+.. literalinclude:: ../configs/fedora.toml
+
+
+.. _key: https://raw.githubusercontent.com/fedora-infra/fedora-messaging/master/configs/fedora-key.pem
+.. _certificate: https://raw.githubusercontent.com/fedora-infra/fedora-messaging/master/configs/fedora-cert.pem
+.. _CA certificate: https://raw.githubusercontent.com/fedora-infra/fedora-messaging/master/configs/cacert.pem

docs/index.rst

@@ -24,6 +24,7 @@ User Guide
    consuming
    messages
    testing
+   fedora-broker
    changelog