Missing a necessary firewall rule for rabbitmqctl command.

[Keigo Noha]

Current T-H-T doesn't have a firewall rule for rabbitmqctl.

Recent rabbitmq requires following port listed at https://www.rabbitmq.com/networking.html#ports.
In the list, T-H-T doesn't contain the following ports.

~~~
35672-35682: used by CLI tools (Erlang distribution client ports) for communication with nodes and is allocated from a dynamic range (computed as server distribution port + 10000 through server distribution port + 10010). See networking guide for details.
~~~

Because of this, 'rabbitmqctl list_queues' command cannot get all queues' information.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/712249

[OpenStack Infra (hudson-openstack)]

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.opendev.org/712249
Reason: Hi Keigo, this is taken care in https://review.opendev.org/#/c/711975/. Thanks for your patch.

[Emilien Macchi (emilienm)]

Taken care by https://review.opendev.org/#/c/711975/

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/711975
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=a2bc2e10b0de522a81faca62b7b620432b267fbb
Submitter: Zuul
Branch: master

commit a2bc2e10b0de522a81faca62b7b620432b267fbb
Author: John Eckersberg <email address hidden>
Date: Mon Mar 9 11:44:50 2020 -0400

    rabbitmq: Open ports 25673-25683 for CLI tools

    Since RabbitMQ 3.7.4, the CLI tools (rabbitmqctl and friends)
    parallelize the querying of information from cluster members. In
    order to receive stream data back, the cli instance binds and
    registers itself on an available port (default between 35672 and
    35682, inclusive). If these ports are firewalled off, then
    rabbitmqctl commands such as list_queues will hang waiting for data
    from remote cluster members.

    This patch does two things:

    1) Reconfigures rabbitmqctl to bind to 25673-25683 instead of the
    default range of 35672-35682. This ensures the ports are not in the
    ephemeral port range and avoids unintended collisions.

    2) Opens the firewall on 25673-25683 to enable communication.

    Resolves: rhbz#1811680
    Closes-Bug: #1866958
    Change-Id: If5caa51cd9a3aef97d06d491dde1d5129cc1a569

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 12.2.0 release.