-
Notifications
You must be signed in to change notification settings - Fork 48
Description
Is your feature related to a problem? Please describe.
In multi-tenant RabbitMQ setups, granting management API access to individual tenants is not acceptable from a security standpoint. ServiceControl currently performs broker requirement checks that depend on management API access, but there is no way to disable these checks via ServiceControl's own configuration.
Describe the requested feature
Add a configuration option in ServiceControl to disable broker requirement checks. This would allow operators running multi-tenant RabbitMQ deployments to suppress the checks for tenants that must not be granted management API permissions.
The RabbitMQ transport already supports DisableBrokerRequirementChecks at the code level (v10.1+), but ServiceControl should expose an equivalent option through its own config.
Reference: Disabling broker requirement checks
Describe alternatives you've considered
No viable alternative — granting management API access to tenants is a security risk and is not an option in a multi-tenant environment.