apiVersion: rabbitmq.com/v1beta1
kind: RabbitmqCluster
metadata:
  creationTimestamp: '2025-12-04T12:19:16Z'
  finalizers:
  - deletion.finalizers.rabbitmqclusters.rabbitmq.com
  generation: 1
  name: rabbitmq
  namespace: openstack
  ownerReferences:
  - apiVersion: rabbitmq.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: RabbitMq
    name: rabbitmq
    uid: be4d5576-c41b-4e87-ab5b-41862daec19d
  resourceVersion: '32373'
  uid: baa3cb85-1ff9-4a3f-b479-0b9f374310b2
spec:
  affinity:
    podAntiAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
      - podAffinityTerm:
          labelSelector:
            matchExpressions:
            - key: app.kubernetes.io/name
              operator: In
              values:
              - rabbitmq
          topologyKey: kubernetes.io/hostname
        weight: 100
  delayStartSeconds: 30
  image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:c2e607504d3c90c201f29ca74f0ee51de1ef2c5444d597d2ff3160ab9b3ce84d
  override:
    service:
      metadata:
        annotations:
          dnsmasq.network.openstack.org/hostname: rabbitmq.openstack.svc
          metallb.universe.tf/address-pool: internalapi
          metallb.universe.tf/loadBalancerIPs: 172.17.0.85
      spec:
        type: LoadBalancer
    statefulSet:
      spec:
        template:
          metadata: {}
          spec:
            containers:
            - args:
              - /usr/lib/rabbitmq/bin/rabbitmq-server
              env:
              - name: RABBITMQ_UPGRADE_LOG
                value: /var/lib/rabbitmq/rabbitmq_upgrade.log
              - name: HOME
                value: /var/lib/rabbitmq
              - name: PATH
                value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
              - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
                value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
                  -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
              - name: RABBITMQ_CTL_ERL_ARGS
                value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
              image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:c2e607504d3c90c201f29ca74f0ee51de1ef2c5444d597d2ff3160ab9b3ce84d
              name: rabbitmq
              resources: {}
              volumeMounts:
              - mountPath: /etc/rabbitmq/inter-node-tls.config
                name: config-data
                readOnly: true
                subPath: inter_node_tls.config
            initContainers:
            - name: setup-container
              resources: {}
              securityContext: {}
            securityContext: {}
            volumes:
            - configMap:
                defaultMode: 272
                items:
                - key: inter_node_tls.config
                  path: inter_node_tls.config
                name: rabbitmq-config-data
              name: config-data
  persistence:
    storage: 10Gi
    storageClassName: lvms-local-storage
  rabbitmq:
    additionalConfig: |-
      log.console = true
      prometheus.tcp.ip = ::
      management.tcp.ip = ::
      ssl_options.verify = verify_none
      prometheus.ssl.ip = ::
    advancedConfig: |
      [
      {ssl, [{protocol_version, ['tlsv1.2']}]},
      {rabbit, [
      {ssl_options, [
        {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
        {certfile,"/etc/rabbitmq-tls/tls.crt"},
        {keyfile,"/etc/rabbitmq-tls/tls.key"},
        {depth,1},
        {secure_renegotiate,true},
        {reuse_sessions,true},
        {honor_cipher_order,false},
        {honor_ecc_order,false},
        {verify,verify_none},
        {fail_if_no_peer_cert,false},
        {versions, ['tlsv1.2']}
      ]}
      ]},
      {rabbitmq_management, [
      {ssl_config, [
        {ip,"::"},
        {cacertfile,"/etc/rabbitmq-tls/ca.crt"},
        {certfile,"/etc/rabbitmq-tls/tls.crt"},
        {keyfile,"/etc/rabbitmq-tls/tls.key"},
        {depth,1},
        {secure_renegotiate,true},
        {reuse_sessions,true},
        {honor_cipher_order,false},
        {honor_ecc_order,false},
        {verify,verify_none},
        {fail_if_no_peer_cert,false},
        {versions, ['tlsv1.2']}
      ]}
      ]},
      {client, [
      {cacertfile, "/etc/rabbitmq-tls/ca.crt"},
      {verify,verify_peer},
      {secure_renegotiate,true},
      {versions, ['tlsv1.2']}
      ]}
      ].
    erlangInetConfig: |
      {inet,true}.
  replicas: 1
  resources:
    limits:
      cpu: '2'
      memory: 2Gi
    requests:
      cpu: '1'
      memory: 2Gi
  secretBackend:
    externalSecret:
      name: ''
  service:
    type: ClusterIP
  terminationGracePeriodSeconds: 604800
  tls:
    caSecretName: cert-rabbitmq-svc
    disableNonTLSListeners: true
    secretName: cert-rabbitmq-svc
status:
  binding:
    name: rabbitmq-default-user
  conditions:
  - lastTransitionTime: '2025-12-04T12:20:51Z'
    reason: AllPodsAreReady
    status: 'True'
    type: AllReplicasReady
  - lastTransitionTime: '2025-12-04T12:20:51Z'
    reason: AtLeastOneEndpointAvailable
    status: 'True'
    type: ClusterAvailable
  - lastTransitionTime: '2025-12-04T12:19:17Z'
    reason: NoWarnings
    status: 'True'
    type: NoWarnings
  - lastTransitionTime: '2025-12-04T12:20:53Z'
    message: Finish reconciling
    reason: Success
    status: 'True'
    type: ReconcileSuccess
  defaultUser:
    secretReference:
      keys:
        password: '**********'
        username: '**********'
      name: rabbitmq-default-user
      namespace: openstack
    serviceReference:
      name: rabbitmq
      namespace: openstack
  observedGeneration: 1