There is a bit confusing part in the TLS configuration example:

4.12.2.3.1. Configuring one-way TLS

6. Create a secret to store the TLS credentials. For example:

$ oc create secret generic my-tls-secret \
--from-file=broker.ks=~/broker.ks \
--from-file=client.ts=~/client.ks \
--from-literal=keyStorePassword=<password> \
--from-literal=trustStorePassword=<password>

Link:
https://docs.redhat.com/en/documentation/red_hat_amq_broker/7.12/html-single/deploying_amq_broker_on_openshift/index#proc-br-configuring-one-way-tls_broker-ocp

There is no client.ks created in previous steps. Shouldn't it be a bit different, e.g.:

--from-file=client.ts=~/broker.ks

Or (perhaps a bit confusingly):

--from-file=client.ts=~/client.ts