Skip to content

Add configuration option to disable broker requirement checks #5352

@ejfn

Description

@ejfn

Is your feature related to a problem? Please describe.

In multi-tenant RabbitMQ setups, granting management API access to individual tenants is not acceptable from a security standpoint. ServiceControl currently performs broker requirement checks that depend on management API access, but there is no way to disable these checks via ServiceControl's own configuration.

Describe the requested feature

Add a configuration option in ServiceControl to disable broker requirement checks. This would allow operators running multi-tenant RabbitMQ deployments to suppress the checks for tenants that must not be granted management API permissions.

The RabbitMQ transport already supports DisableBrokerRequirementChecks at the code level (v10.1+), but ServiceControl should expose an equivalent option through its own config.

Reference: Disabling broker requirement checks

Describe alternatives you've considered

No viable alternative — granting management API access to tenants is a security risk and is not an option in a multi-tenant environment.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions