apiVersion: rabbitmq.com/v1beta1
kind: RabbitmqCluster
metadata:
  creationTimestamp: "2025-10-11T10:52:50Z"
  finalizers:
  - deletion.finalizers.rabbitmqclusters.rabbitmq.com
  generation: 1
  name: rabbitmq-cell1
  namespace: openstack
  ownerReferences:
  - apiVersion: rabbitmq.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: RabbitMq
    name: rabbitmq-cell1
    uid: c5d94842-6593-4a50-9ea3-04c869a4179c
  resourceVersion: "38060"
  uid: e5d855b6-1fab-4759-8723-8bb1a22edd64
spec:
  affinity:
    podAntiAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
      - podAffinityTerm:
          labelSelector:
            matchExpressions:
            - key: app.kubernetes.io/name
              operator: In
              values:
              - rabbitmq-cell1
          topologyKey: kubernetes.io/hostname
        weight: 100
  delayStartSeconds: 30
  image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:adcdeb8ecd601fb03c3b0901d5b5111af2ca48f7dd443e22224db6daaf08f5d0
  override:
    service:
      metadata:
        annotations:
          dnsmasq.network.openstack.org/hostname: rabbitmq-cell1.openstack.svc
          metallb.universe.tf/address-pool: internalapi
          metallb.universe.tf/loadBalancerIPs: 172.17.0.86
      spec:
        type: LoadBalancer
    statefulSet:
      spec:
        template:
          metadata: {}
          spec:
            containers:
            - args:
              - /usr/lib/rabbitmq/bin/rabbitmq-server
              env:
              - name: RABBITMQ_UPGRADE_LOG
                value: /var/lib/rabbitmq/rabbitmq_upgrade.log
              - name: HOME
                value: /var/lib/rabbitmq
              - name: PATH
                value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
              - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
                value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
                  -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
              - name: RABBITMQ_CTL_ERL_ARGS
                value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
              image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:adcdeb8ecd601fb03c3b0901d5b5111af2ca48f7dd443e22224db6daaf08f5d0
              name: rabbitmq
              resources: {}
              volumeMounts:
              - mountPath: /etc/rabbitmq/inter-node-tls.config
                name: config-data
                readOnly: true
                subPath: inter_node_tls.config
            initContainers:
            - name: setup-container
              resources: {}
              securityContext: {}
            securityContext: {}
            volumes:
            - configMap:
                defaultMode: 272
                items:
                - key: inter_node_tls.config
                  path: inter_node_tls.config
                name: rabbitmq-cell1-config-data
              name: config-data
  persistence:
    storage: 10Gi
    storageClassName: lvms-local-storage
  rabbitmq:
    additionalConfig: |-
      log.console = true
      prometheus.tcp.ip = ::
      management.tcp.ip = ::
      ssl_options.verify = verify_none
      prometheus.ssl.ip = ::
    advancedConfig: |
      [
      {ssl, [{protocol_version, ['tlsv1.2']}]},
      {rabbit, [
      {ssl_options, [
        {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
        {certfile,"/etc/rabbitmq-tls/tls.crt"},
        {keyfile,"/etc/rabbitmq-tls/tls.key"},
        {depth,1},
        {secure_renegotiate,true},
        {reuse_sessions,true},
        {honor_cipher_order,false},
        {honor_ecc_order,false},
        {verify,verify_none},
        {fail_if_no_peer_cert,false},
        {versions, ['tlsv1.2']}
      ]}
      ]},
      {rabbitmq_management, [
      {ssl_config, [
        {ip,"::"},
        {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
        {certfile,"/etc/rabbitmq-tls/tls.crt"},
        {keyfile,"/etc/rabbitmq-tls/tls.key"},
        {depth,1},
        {secure_renegotiate,true},
        {reuse_sessions,true},
        {honor_cipher_order,false},
        {honor_ecc_order,false},
        {verify,verify_none},
        {fail_if_no_peer_cert,false},
        {versions, ['tlsv1.2']}
      ]}
      ]},
      {client, [
      {cacertfile, "/etc/rabbitmq-tls/ca.crt"},
      {verify,verify_peer},
      {secure_renegotiate,true},
      {versions, ['tlsv1.2']}
      ]}
      ].
    erlangInetConfig: |
      {inet,true}.
  replicas: 3
  resources:
    limits:
      cpu: "2"
      memory: 2Gi
    requests:
      cpu: "1"
      memory: 2Gi
  secretBackend:
    externalSecret:
      name: ""
  service:
    type: ClusterIP
  terminationGracePeriodSeconds: 604800
  tls:
    caSecretName: cert-rabbitmq-cell1-svc
    disableNonTLSListeners: true
    secretName: cert-rabbitmq-cell1-svc
status:
  binding:
    name: rabbitmq-cell1-default-user
  conditions:
  - lastTransitionTime: "2025-10-11T10:54:06Z"
    reason: AllPodsAreReady
    status: "True"
    type: AllReplicasReady
  - lastTransitionTime: "2025-10-11T10:54:04Z"
    reason: AtLeastOneEndpointAvailable
    status: "True"
    type: ClusterAvailable
  - lastTransitionTime: "2025-10-11T10:52:51Z"
    reason: NoWarnings
    status: "True"
    type: NoWarnings
  - lastTransitionTime: "2025-10-11T10:54:08Z"
    message: Finish reconciling
    reason: Success
    status: "True"
    type: ReconcileSuccess
  defaultUser:
    secretReference:
      keys:
        password: password
        username: username
      name: rabbitmq-cell1-default-user
      namespace: openstack
    serviceReference:
      name: rabbitmq-cell1
      namespace: openstack
  observedGeneration: 1