apiVersion: v1
data:
  advanced.config: |
    [
    {ssl, [{protocol_version, ['tlsv1.2','tlsv1.3']}]},
    {rabbit, [
    {ssl_options, [
      {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
      {certfile,"/etc/rabbitmq-tls/tls.crt"},
      {keyfile,"/etc/rabbitmq-tls/tls.key"},
      {depth,1},
      {secure_renegotiate,true},
      {reuse_sessions,true},
      {honor_cipher_order,false},
      {honor_ecc_order,false},
      {verify,verify_none},
      {fail_if_no_peer_cert,false},
      {versions, ['tlsv1.2','tlsv1.3']}
    ]}
    ]},
    {rabbitmq_management, [
    {ssl_config, [
      {ip,"::"},
      {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
      {certfile,"/etc/rabbitmq-tls/tls.crt"},
      {keyfile,"/etc/rabbitmq-tls/tls.key"},
      {depth,1},
      {secure_renegotiate,true},
      {reuse_sessions,true},
      {honor_cipher_order,false},
      {honor_ecc_order,false},
      {verify,verify_none},
      {fail_if_no_peer_cert,false},
      {versions, ['tlsv1.2','tlsv1.3']}
    ]}
    ]},
    {client, [
    {cacertfile, "/etc/rabbitmq-tls/ca.crt"},
    {verify,verify_peer},
    {secure_renegotiate,true},
    {versions, ['tlsv1.2','tlsv1.3']}
    ]}
    ].
  operatorDefaults.conf: |
    disk_free_limit.absolute                   = 2GB
    cluster_partition_handling                 = pause_minority
    cluster_formation.peer_discovery_backend   = rabbit_peer_discovery_k8s
    cluster_formation.k8s.host                 = kubernetes.default
    cluster_formation.k8s.address_type         = hostname
    cluster_formation.k8s.service_name         = rabbitmq-cell1-nodes
    queue_leader_locator                       = balanced
    cluster_formation.target_cluster_size_hint = 1
    cluster_name                               = rabbitmq-cell1
    auth_mechanisms.1                          = PLAIN
    auth_mechanisms.2                          = AMQPLAIN
    log.console                                = true
    log.console.level                          = info
    prometheus.tcp.ip                          = ::
    management.tcp.ip                          = ::
    vm_memory_high_watermark.relative           = 0.6
    listeners.ssl.default                      = 5671
    management.ssl.port                        = 15671
    prometheus.ssl.port                        = 15691
    listeners.tcp                              = none
  userDefinedConfiguration.conf: ''
kind: ConfigMap
metadata:
  creationTimestamp: '2026-04-02T13:58:13Z'
  name: rabbitmq-cell1-server-conf
  namespace: openstack
  ownerReferences:
  - apiVersion: rabbitmq.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: RabbitMq
    name: rabbitmq-cell1
    uid: 72b9570b-8be0-4ba3-a43b-aa9788338f23
  resourceVersion: '39941'
  uid: a7577f3b-220d-4516-8ef8-f7195e285e80