fix

apps/taiga/rabbitmq.tf

@@ -71,3 +71,24 @@ resource "kubectl_manifest" "rabbit_perm" {
         name: ${kubectl_manifest.rabbit.name}
   EOF
 }
+
+resource "random_password" "rabbit" {
+  length           = 32
+  special          = false
+}
+
+resource "kubectl_manifest" "rabbit_user_secret" {
+  yaml_body  = <<-EOF
+    apiVersion: v1
+    kind: Secret
+    metadata:
+      name: "${var.instance}-${var.component}-rabbitmq-taiga"
+      labels: ${jsonencode(local.common_labels)}
+      namespace: ${var.namespace}
+      ownerReferences: ${jsonencode(var.install_owner)}
+    type: Opaque
+    stringData:
+      username: taiga
+      password: "${random_password.rabbit.result}"
+EOF
+}

apps/taiga/taiga_ConfigMap.tf

@@ -119,6 +119,9 @@ resource "kubectl_manifest" "cm_nginx" {
             }
 
             # Api
+            location /api/v1/auth/register {
+                deny all;
+            }
             location /api {
                 proxy_pass http://${kubectl_manifest.svc_back.name}:8000/api;
                 proxy_pass_header Server;

apps/taiga/taiga_Secret.tf

@@ -7,11 +7,6 @@ resource "random_password" "admin" {
   length           = 16
   special          = false
 }
-resource "random_password" "rabbit" {
-  length           = 32
-  special          = false
-}
-
 resource "kubectl_manifest" "secret" {
   yaml_body  = <<-EOF
     apiVersion: v1
@@ -28,18 +23,3 @@ resource "kubectl_manifest" "secret" {
 EOF
 }
 
-resource "kubectl_manifest" "rabbit_user_secret" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Secret
-    metadata:
-      name: "${var.instance}-${var.component}-rabbitmq-taiga"
-      labels: ${jsonencode(local.common_labels)}
-      namespace: ${var.namespace}
-      ownerReferences: ${jsonencode(var.install_owner)}
-    type: Opaque
-    stringData:
-      username: taiga
-      password: "${random_password.rabbit.result}"
-EOF
-}