apiVersion: v1
data:
  advanced.config: |
    [
    {ssl, [{protocol_version, ['tlsv1.2']}]},
    {rabbit, [
    {ssl_options, [
      {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
      {certfile,"/etc/rabbitmq-tls/tls.crt"},
      {keyfile,"/etc/rabbitmq-tls/tls.key"},
      {depth,1},
      {secure_renegotiate,true},
      {reuse_sessions,true},
      {honor_cipher_order,false},
      {honor_ecc_order,false},
      {verify,verify_none},
      {fail_if_no_peer_cert,false},
      {versions, ['tlsv1.2']}
    ]}
    ]},
    {rabbitmq_management, [
    {ssl_config, [
      {ip,"::"},
      {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
      {certfile,"/etc/rabbitmq-tls/tls.crt"},
      {keyfile,"/etc/rabbitmq-tls/tls.key"},
      {depth,1},
      {secure_renegotiate,true},
      {reuse_sessions,true},
      {honor_cipher_order,false},
      {honor_ecc_order,false},
      {verify,verify_none},
      {fail_if_no_peer_cert,false},
      {versions, ['tlsv1.2']}
    ]}
    ]},
    {client, [
    {cacertfile, "/etc/rabbitmq-tls/ca.crt"},
    {verify,verify_peer},
    {secure_renegotiate,true},
    {versions, ['tlsv1.2']}
    ]}
    ].
  erl_inetrc: |
    {inet,true}.
  operatorDefaults.conf: |
    queue_master_locator                       = min-masters
    disk_free_limit.absolute                   = 2GB
    cluster_partition_handling                 = pause_minority
    cluster_formation.peer_discovery_backend   = rabbit_peer_discovery_k8s
    cluster_formation.k8s.host                 = kubernetes.default
    cluster_formation.k8s.address_type         = hostname
    cluster_formation.target_cluster_size_hint = 3
    cluster_name                               = rabbitmq
    auth_mechanisms.1                          = PLAIN
    auth_mechanisms.2                          = AMQPLAIN
  userDefinedConfiguration.conf: |
    ssl_options.certfile                  = /etc/rabbitmq-tls/tls.crt
    ssl_options.keyfile                   = /etc/rabbitmq-tls/tls.key
    listeners.ssl.default                 = 5671
    management.ssl.certfile               = /etc/rabbitmq-tls/tls.crt
    management.ssl.keyfile                = /etc/rabbitmq-tls/tls.key
    management.ssl.port                   = 15671
    prometheus.ssl.certfile               = /etc/rabbitmq-tls/tls.crt
    prometheus.ssl.keyfile                = /etc/rabbitmq-tls/tls.key
    prometheus.ssl.port                   = 15691
    listeners.tcp                         = none
    ssl_options.cacertfile                = /etc/rabbitmq-tls/ca.crt
    ssl_options.verify                    = verify_none
    management.ssl.cacertfile             = /etc/rabbitmq-tls/ca.crt
    prometheus.ssl.cacertfile             = /etc/rabbitmq-tls/ca.crt
    total_memory_available_override_value = 1717986919
    log.console                           = true
    prometheus.tcp.ip                     = ::
    management.tcp.ip                     = ::
    prometheus.ssl.ip                     = ::
kind: ConfigMap
metadata:
  creationTimestamp: "2025-10-11T10:52:50Z"
  labels:
    app.kubernetes.io/component: rabbitmq
    app.kubernetes.io/name: rabbitmq
    app.kubernetes.io/part-of: rabbitmq
  name: rabbitmq-server-conf
  namespace: openstack
  ownerReferences:
  - apiVersion: rabbitmq.com/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: RabbitmqCluster
    name: rabbitmq
    uid: d558a721-8bb5-46fd-9163-612fcc507b35
  resourceVersion: "34109"
  uid: bd16207f-8356-4b37-9514-ad2870e5ffc7