On Tue, 2019-06-18 at 14:06 +0000, Jeremy Cline wrote:
the problems we hit were things like not knowing you had to add some extra Ansible steps to create your queue in the first place (and then asking the obvious question of why you have to repeat yourself in the config in Ansible and then separate roles), accidentally delegating the creation of the queue (but not the user) to the production broker instead of the staging broker, forgetting to set passive_declares = true, and so on.
Every single one of these issues happened to me too, and I also had to interrupt jcline to get help. I don't think the permissions model we are using is actually preventing a real problem, but it certainly is causing one.