diff --git a/apps/taiga/rabbitmq.tf b/apps/taiga/rabbitmq.tf index 79aec63..4d3a827 100644 --- a/apps/taiga/rabbitmq.tf +++ b/apps/taiga/rabbitmq.tf @@ -71,3 +71,24 @@ resource "kubectl_manifest" "rabbit_perm" { name: ${kubectl_manifest.rabbit.name} EOF } + +resource "random_password" "rabbit" { + length = 32 + special = false +} + +resource "kubectl_manifest" "rabbit_user_secret" { + yaml_body = <<-EOF + apiVersion: v1 + kind: Secret + metadata: + name: "${var.instance}-${var.component}-rabbitmq-taiga" + labels: ${jsonencode(local.common_labels)} + namespace: ${var.namespace} + ownerReferences: ${jsonencode(var.install_owner)} + type: Opaque + stringData: + username: taiga + password: "${random_password.rabbit.result}" +EOF +} diff --git a/apps/taiga/taiga_ConfigMap.tf b/apps/taiga/taiga_ConfigMap.tf index 417c3b9..8dc5e77 100644 --- a/apps/taiga/taiga_ConfigMap.tf +++ b/apps/taiga/taiga_ConfigMap.tf @@ -119,6 +119,9 @@ resource "kubectl_manifest" "cm_nginx" { } # Api + location /api/v1/auth/register { + deny all; + } location /api { proxy_pass http://${kubectl_manifest.svc_back.name}:8000/api; proxy_pass_header Server; diff --git a/apps/taiga/taiga_Secret.tf b/apps/taiga/taiga_Secret.tf index 7d250ac..ed37a54 100644 --- a/apps/taiga/taiga_Secret.tf +++ b/apps/taiga/taiga_Secret.tf @@ -7,11 +7,6 @@ resource "random_password" "admin" { length = 16 special = false } -resource "random_password" "rabbit" { - length = 32 - special = false -} - resource "kubectl_manifest" "secret" { yaml_body = <<-EOF apiVersion: v1 @@ -28,18 +23,3 @@ resource "kubectl_manifest" "secret" { EOF } -resource "kubectl_manifest" "rabbit_user_secret" { - yaml_body = <<-EOF - apiVersion: v1 - kind: Secret - metadata: - name: "${var.instance}-${var.component}-rabbitmq-taiga" - labels: ${jsonencode(local.common_labels)} - namespace: ${var.namespace} - ownerReferences: ${jsonencode(var.install_owner)} - type: Opaque - stringData: - username: taiga - password: "${random_password.rabbit.result}" -EOF -}