Certificate Revocation List

[lordigon]

Is it possible to configure a Certificate Revocation List via Artemis CRD?
I saw a possible solution from here but I don't know how to add crlPath=other-client-crl.pem via Artemis CRD.
Is it feasible?
TIA.

[brusdev]

The brokerProperties can be used to set acceptor params not defined in ActiveMQArtemis CRD, and the other-client-crl.pem file can be included in a secret and mounted using extraMounts, i.e.

kubectl create secret generic my-crl-secret --from-file=other-client-crl.pem=./other-client-crl.pem

apiVersion: broker.amq.io/v1beta1
kind: ActiveMQArtemis
metadata:
  name: artemis-mqtt-ssl-crl
spec:
  deploymentPlan:
    size: 1
    image: placeholder
    extraMounts:
      secrets:
        - my-crl-secret
  acceptors:
  - name: my-mqtt-acceptor
    protocols: MQTT
    port: 8883
    sslEnabled: true
  brokerProperties:
    - "acceptorConfigurations.my-mqtt-acceptor.params.crlPath=/amq/extra/secretes/my-crl-secret/other-client-crl.pem"

[lordigon]

Thx for your answer. Is there a manual page/documentation where I can find all brokerProperties I can configure in this way or there is a naming convention for these properties that must be followed? I would like to know every config param that can be used.

[brusdev]

The brokerProperties are an ActiveMQ Artemis feature, they are low level, lower level than xml, any accessible attribute of the internal org.apache.activemq.artemis.core.config.impl.ConfigurationImp, for further details see https://activemq.apache.org/components/artemis/documentation/latest/configuration-index.html#broker-properties

[gtully]

I added a similar reference in the operator doc at: https://github.com/artemiscloud/activemq-artemis-operator/blob/main/docs/help/operator.md#configuring-brokerproperties