--- apiVersion: rabbitmq.com/v1beta1 items: - apiVersion: rabbitmq.com/v1beta1 kind: RabbitmqCluster metadata: creationTimestamp: "2026-02-24T05:50:30Z" finalizers: - deletion.finalizers.rabbitmqclusters.rabbitmq.com generation: 1 managedFields: - apiVersion: rabbitmq.com/v1beta1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:finalizers: .: {} v:"deletion.finalizers.rabbitmqclusters.rabbitmq.com": {} f:ownerReferences: .: {} k:{"uid":"cf4bbbc0-dd1c-42a0-a4ae-9b5d9ca1a7a8"}: {} f:spec: .: {} f:affinity: .: {} f:podAntiAffinity: .: {} f:preferredDuringSchedulingIgnoredDuringExecution: {} f:delayStartSeconds: {} f:image: {} f:override: .: {} f:service: .: {} f:metadata: .: {} f:annotations: .: {} f:dnsmasq.network.openstack.org/hostname: {} f:metallb.universe.tf/address-pool: {} f:metallb.universe.tf/loadBalancerIPs: {} f:spec: .: {} f:type: {} f:statefulSet: .: {} f:spec: .: {} f:template: .: {} f:metadata: {} f:spec: .: {} f:containers: .: {} k:{"name":"rabbitmq"}: .: {} f:args: {} f:env: .: {} k:{"name":"HOME"}: .: {} f:name: {} f:value: {} k:{"name":"PATH"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_CTL_ERL_ARGS"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_UPGRADE_LOG"}: .: {} f:name: {} f:value: {} f:image: {} f:name: {} f:resources: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} f:initContainers: .: {} k:{"name":"setup-container"}: .: {} f:name: {} f:resources: {} f:securityContext: {} f:securityContext: {} f:volumes: .: {} k:{"name":"config-data"}: .: {} f:configMap: {} f:name: {} f:persistence: .: {} f:storage: {} f:storageClassName: {} f:rabbitmq: .: {} f:additionalConfig: {} f:advancedConfig: {} f:erlangInetConfig: {} f:replicas: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:secretBackend: .: {} f:externalSecret: {} f:service: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tls: .: {} f:caSecretName: {} f:disableNonTLSListeners: {} f:secretName: {} manager: manager operation: Update time: "2026-02-24T05:50:30Z" - apiVersion: rabbitmq.com/v1beta1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:binding: {} f:conditions: {} f:defaultUser: .: {} f:secretReference: .: {} f:keys: .: {} f:password: {} f:username: {} f:name: {} f:namespace: {} f:serviceReference: .: {} f:name: {} f:namespace: {} f:observedGeneration: {} manager: manager operation: Update subresource: status time: "2026-02-24T05:51:58Z" name: rabbitmq namespace: openstack ownerReferences: - apiVersion: rabbitmq.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: RabbitMq name: rabbitmq uid: cf4bbbc0-dd1c-42a0-a4ae-9b5d9ca1a7a8 resourceVersion: "30300" uid: 05b9c2a4-deb7-4fad-a9bc-04e9b0802e44 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: app.kubernetes.io/name operator: In values: - rabbitmq topologyKey: kubernetes.io/hostname weight: 100 delayStartSeconds: 30 image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:ea8869786571e9ad2388af89ff4d38d887e32bc9340186598c63fe61a561eb20 override: service: metadata: annotations: dnsmasq.network.openstack.org/hostname: rabbitmq.openstack.svc metallb.universe.tf/address-pool: internalapi metallb.universe.tf/loadBalancerIPs: 172.17.0.85 spec: type: LoadBalancer statefulSet: spec: template: metadata: {} spec: containers: - args: - /usr/lib/rabbitmq/bin/rabbitmq-server env: - name: RABBITMQ_UPGRADE_LOG value: /var/lib/rabbitmq/rabbitmq_upgrade.log - name: HOME value: /var/lib/rabbitmq - name: PATH value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config ' - name: RABBITMQ_CTL_ERL_ARGS value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:ea8869786571e9ad2388af89ff4d38d887e32bc9340186598c63fe61a561eb20 name: rabbitmq resources: {} volumeMounts: - mountPath: /etc/rabbitmq/inter-node-tls.config name: config-data readOnly: true subPath: inter_node_tls.config initContainers: - name: setup-container resources: {} securityContext: {} securityContext: {} volumes: - configMap: defaultMode: 272 items: - key: inter_node_tls.config path: inter_node_tls.config name: rabbitmq-config-data name: config-data persistence: storage: 10Gi storageClassName: lvms-local-storage rabbitmq: additionalConfig: |- log.console = true prometheus.tcp.ip = :: management.tcp.ip = :: ssl_options.verify = verify_none prometheus.ssl.ip = :: advancedConfig: | [ {ssl, [{protocol_version, ['tlsv1.2']}]}, {rabbit, [ {ssl_options, [ {cacertfile,"/etc/rabbitmq-tls/ca.crt"}, {certfile,"/etc/rabbitmq-tls/tls.crt"}, {keyfile,"/etc/rabbitmq-tls/tls.key"}, {depth,1}, {secure_renegotiate,true}, {reuse_sessions,true}, {honor_cipher_order,false}, {honor_ecc_order,false}, {verify,verify_none}, {fail_if_no_peer_cert,false}, {versions, ['tlsv1.2']} ]} ]}, {rabbitmq_management, [ {ssl_config, [ {ip,"::"}, {cacertfile,"/etc/rabbitmq-tls/ca.crt"}, {certfile,"/etc/rabbitmq-tls/tls.crt"}, {keyfile,"/etc/rabbitmq-tls/tls.key"}, {depth,1}, {secure_renegotiate,true}, {reuse_sessions,true}, {honor_cipher_order,false}, {honor_ecc_order,false}, {verify,verify_none}, {fail_if_no_peer_cert,false}, {versions, ['tlsv1.2']} ]} ]}, {client, [ {cacertfile, "/etc/rabbitmq-tls/ca.crt"}, {verify,verify_peer}, {secure_renegotiate,true}, {versions, ['tlsv1.2']} ]} ]. erlangInetConfig: | {inet,true}. replicas: 1 resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi secretBackend: externalSecret: name: "" service: type: ClusterIP terminationGracePeriodSeconds: 604800 tls: caSecretName: cert-rabbitmq-svc disableNonTLSListeners: true secretName: cert-rabbitmq-svc status: binding: name: rabbitmq-default-user conditions: - lastTransitionTime: "2026-02-24T05:51:57Z" reason: AllPodsAreReady status: "True" type: AllReplicasReady - lastTransitionTime: "2026-02-24T05:51:57Z" reason: AtLeastOneEndpointAvailable status: "True" type: ClusterAvailable - lastTransitionTime: "2026-02-24T05:50:31Z" reason: NoWarnings status: "True" type: NoWarnings - lastTransitionTime: "2026-02-24T05:51:58Z" message: Finish reconciling reason: Success status: "True" type: ReconcileSuccess defaultUser: secretReference: keys: password: password username: username name: rabbitmq-default-user namespace: openstack serviceReference: name: rabbitmq namespace: openstack observedGeneration: 1 - apiVersion: rabbitmq.com/v1beta1 kind: RabbitmqCluster metadata: creationTimestamp: "2026-02-24T05:50:30Z" finalizers: - deletion.finalizers.rabbitmqclusters.rabbitmq.com generation: 1 managedFields: - apiVersion: rabbitmq.com/v1beta1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:finalizers: .: {} v:"deletion.finalizers.rabbitmqclusters.rabbitmq.com": {} f:ownerReferences: .: {} k:{"uid":"a2ef88c0-ac32-4e38-92a7-9c2976fc9b7b"}: {} f:spec: .: {} f:affinity: .: {} f:podAntiAffinity: .: {} f:preferredDuringSchedulingIgnoredDuringExecution: {} f:delayStartSeconds: {} f:image: {} f:override: .: {} f:service: .: {} f:metadata: .: {} f:annotations: .: {} f:dnsmasq.network.openstack.org/hostname: {} f:metallb.universe.tf/address-pool: {} f:metallb.universe.tf/loadBalancerIPs: {} f:spec: .: {} f:type: {} f:statefulSet: .: {} f:spec: .: {} f:template: .: {} f:metadata: {} f:spec: .: {} f:containers: .: {} k:{"name":"rabbitmq"}: .: {} f:args: {} f:env: .: {} k:{"name":"HOME"}: .: {} f:name: {} f:value: {} k:{"name":"PATH"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_CTL_ERL_ARGS"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}: .: {} f:name: {} f:value: {} k:{"name":"RABBITMQ_UPGRADE_LOG"}: .: {} f:name: {} f:value: {} f:image: {} f:name: {} f:resources: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} f:initContainers: .: {} k:{"name":"setup-container"}: .: {} f:name: {} f:resources: {} f:securityContext: {} f:securityContext: {} f:volumes: .: {} k:{"name":"config-data"}: .: {} f:configMap: {} f:name: {} f:persistence: .: {} f:storage: {} f:storageClassName: {} f:rabbitmq: .: {} f:additionalConfig: {} f:advancedConfig: {} f:erlangInetConfig: {} f:replicas: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:secretBackend: .: {} f:externalSecret: {} f:service: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tls: .: {} f:caSecretName: {} f:disableNonTLSListeners: {} f:secretName: {} manager: manager operation: Update time: "2026-02-24T05:50:30Z" - apiVersion: rabbitmq.com/v1beta1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:binding: {} f:conditions: {} f:defaultUser: .: {} f:secretReference: .: {} f:keys: .: {} f:password: {} f:username: {} f:name: {} f:namespace: {} f:serviceReference: .: {} f:name: {} f:namespace: {} f:observedGeneration: {} manager: manager operation: Update subresource: status time: "2026-02-24T05:52:00Z" name: rabbitmq-cell1 namespace: openstack ownerReferences: - apiVersion: rabbitmq.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: RabbitMq name: rabbitmq-cell1 uid: a2ef88c0-ac32-4e38-92a7-9c2976fc9b7b resourceVersion: "30357" uid: 37f4d07b-e39d-4db0-85fe-92656d9343a8 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: app.kubernetes.io/name operator: In values: - rabbitmq-cell1 topologyKey: kubernetes.io/hostname weight: 100 delayStartSeconds: 30 image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:ea8869786571e9ad2388af89ff4d38d887e32bc9340186598c63fe61a561eb20 override: service: metadata: annotations: dnsmasq.network.openstack.org/hostname: rabbitmq-cell1.openstack.svc metallb.universe.tf/address-pool: internalapi metallb.universe.tf/loadBalancerIPs: 172.17.0.86 spec: type: LoadBalancer statefulSet: spec: template: metadata: {} spec: containers: - args: - /usr/lib/rabbitmq/bin/rabbitmq-server env: - name: RABBITMQ_UPGRADE_LOG value: /var/lib/rabbitmq/rabbitmq_upgrade.log - name: HOME value: /var/lib/rabbitmq - name: PATH value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config ' - name: RABBITMQ_CTL_ERL_ARGS value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:ea8869786571e9ad2388af89ff4d38d887e32bc9340186598c63fe61a561eb20 name: rabbitmq resources: {} volumeMounts: - mountPath: /etc/rabbitmq/inter-node-tls.config name: config-data readOnly: true subPath: inter_node_tls.config initContainers: - name: setup-container resources: {} securityContext: {} securityContext: {} volumes: - configMap: defaultMode: 272 items: - key: inter_node_tls.config path: inter_node_tls.config name: rabbitmq-cell1-config-data name: config-data persistence: storage: 10Gi storageClassName: lvms-local-storage rabbitmq: additionalConfig: |- log.console = true prometheus.tcp.ip = :: management.tcp.ip = :: ssl_options.verify = verify_none prometheus.ssl.ip = :: advancedConfig: | [ {ssl, [{protocol_version, ['tlsv1.2']}]}, {rabbit, [ {ssl_options, [ {cacertfile,"/etc/rabbitmq-tls/ca.crt"}, {certfile,"/etc/rabbitmq-tls/tls.crt"}, {keyfile,"/etc/rabbitmq-tls/tls.key"}, {depth,1}, {secure_renegotiate,true}, {reuse_sessions,true}, {honor_cipher_order,false}, {honor_ecc_order,false}, {verify,verify_none}, {fail_if_no_peer_cert,false}, {versions, ['tlsv1.2']} ]} ]}, {rabbitmq_management, [ {ssl_config, [ {ip,"::"}, {cacertfile,"/etc/rabbitmq-tls/ca.crt"}, {certfile,"/etc/rabbitmq-tls/tls.crt"}, {keyfile,"/etc/rabbitmq-tls/tls.key"}, {depth,1}, {secure_renegotiate,true}, {reuse_sessions,true}, {honor_cipher_order,false}, {honor_ecc_order,false}, {verify,verify_none}, {fail_if_no_peer_cert,false}, {versions, ['tlsv1.2']} ]} ]}, {client, [ {cacertfile, "/etc/rabbitmq-tls/ca.crt"}, {verify,verify_peer}, {secure_renegotiate,true}, {versions, ['tlsv1.2']} ]} ]. erlangInetConfig: | {inet,true}. replicas: 1 resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi secretBackend: externalSecret: name: "" service: type: ClusterIP terminationGracePeriodSeconds: 604800 tls: caSecretName: cert-rabbitmq-cell1-svc disableNonTLSListeners: true secretName: cert-rabbitmq-cell1-svc status: binding: name: rabbitmq-cell1-default-user conditions: - lastTransitionTime: "2026-02-24T05:51:58Z" reason: AllPodsAreReady status: "True" type: AllReplicasReady - lastTransitionTime: "2026-02-24T05:51:58Z" reason: AtLeastOneEndpointAvailable status: "True" type: ClusterAvailable - lastTransitionTime: "2026-02-24T05:50:31Z" reason: NoWarnings status: "True" type: NoWarnings - lastTransitionTime: "2026-02-24T05:52:00Z" message: Finish reconciling reason: Success status: "True" type: ReconcileSuccess defaultUser: secretReference: keys: password: password username: username name: rabbitmq-cell1-default-user namespace: openstack serviceReference: name: rabbitmq-cell1 namespace: openstack observedGeneration: 1 kind: RabbitmqClusterList metadata: continue: "" resourceVersion: "54508"