The request is to have multiple ActiveMQArtemisSecurity CRs that get merged into the same broker configuration .

This would allow to separate the elements associated with the different application components, which are the clients.

each app needs to be able to define (independently from the broker configuration)

• permissions on a queue:
• a user and its roles:

the ActiveMQArtemisSecurity for a particular app should be located in the app ns. so the applyToCrNames should be able to locate a broker in a particular ns (the broker will be in a different ns).

all ActiveMQArtemisSecurity CRs from each app should be merged and applied to the broker as one global config.

The applyToCrNames property should be a list of key/value pairs:

It needs to be working across namespace boundaries There is a similar issue for addresses as well.

At the moment addresses have to be located in the broker's namespace.

Addresses should be able to be defined into the app's namespace so the applyToCrNames should be reworked to allow a namespace to be specified as well.