fix

apps/taiga/common.tf

@@ -45,11 +45,11 @@ locals {
   pg_labels = merge(local.common_labels, {
     "app.kubernetes.io/component" = "pg"
   })
-  async_rabbitmq_labels = merge(local.common_labels, {
+  rabbitmq_labels = merge(local.common_labels, {
-    "app.kubernetes.io/component" = "async-rabbitmq"
+    "app.kubernetes.io/component" = "rabbitmq"
-  })
-  events_rabbitmq_labels = merge(local.common_labels, {
-    "app.kubernetes.io/component" = "events-rabbitmq"
   })
+  postcfg_all_labels = merge({
+    "app.kubernetes.io/componant" = "postconfig"
+  },local.common_labels)
 }
 

apps/taiga/index.yaml

@@ -127,64 +127,82 @@ options:
     examples:
     - your-company.com
     type: string
-  hpa:
-    default:
-      avg-cpu: 50
-      max-replicas: 5
-      min-replicas: 1
-    examples:
-    - avg-cpu: 50
-      max-replicas: 5
-      min-replicas: 1
-    properties:
-      avg-cpu:
-        default: 50
-        type: integer
-      max-replicas:
-        default: 5
-        type: integer
-      min-replicas:
-        default: 1
-        type: integer
-    type: object
   images:
     default:
-      app:
+      back:
         pull_policy: IfNotPresent
         registry: docker.io
-        repository: to-be/defined
+        repository: taigaio/taiga-back
-        tag: v1.0.0
+        tag: 6.7.3
+      events:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-events
+        tag: 6.7.0
+      front:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-front
+        tag: 6.7.7
+      nginx:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: nginx
+        tag: 1.26.0-alpine3.19
       postgresql:
         registry: ghcr.io
         repository: cloudnative-pg/postgresql
         tag: 15.3
-      rabbit:
+      protected:
         pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-protected
+        tag: 6.7.0
+      rabbit:
         registry: docker.io
         repository: rabbitmq
         tag: 3.10.2-management
     examples:
-    - app:
+    - back:
         pull_policy: IfNotPresent
         registry: docker.io
-        repository: to-be/defined
+        repository: taigaio/taiga-back
-        tag: v1.0.0
+        tag: 6.7.3
+      events:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-events
+        tag: 6.7.0
+      front:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-front
+        tag: 6.7.7
+      nginx:
+        pull_policy: IfNotPresent
+        registry: docker.io
+        repository: nginx
+        tag: 1.26.0-alpine3.19
       postgresql:
         registry: ghcr.io
         repository: cloudnative-pg/postgresql
         tag: 15.3
-      rabbit:
+      protected:
         pull_policy: IfNotPresent
+        registry: docker.io
+        repository: taigaio/taiga-protected
+        tag: 6.7.0
+      rabbit:
         registry: docker.io
         repository: rabbitmq
         tag: 3.10.2-management
     properties:
-      app:
+      back:
         default:
           pull_policy: IfNotPresent
           registry: docker.io
-          repository: to-be/defined
+          repository: taigaio/taiga-back
-          tag: v1.0.0
+          tag: 6.7.3
         properties:
           pull_policy:
             default: IfNotPresent
@@ -197,10 +215,82 @@ options:
             default: docker.io
             type: string
           repository:
-            default: to-be/defined
+            default: taigaio/taiga-back
             type: string
           tag:
-            default: v1.0.0
+            default: 6.7.3
+            type: string
+        type: object
+      events:
+        default:
+          pull_policy: IfNotPresent
+          registry: docker.io
+          repository: taigaio/taiga-events
+          tag: 6.7.0
+        properties:
+          pull_policy:
+            default: IfNotPresent
+            enum:
+            - Always
+            - Never
+            - IfNotPresent
+            type: string
+          registry:
+            default: docker.io
+            type: string
+          repository:
+            default: taigaio/taiga-events
+            type: string
+          tag:
+            default: 6.7.0
+            type: string
+        type: object
+      front:
+        default:
+          pull_policy: IfNotPresent
+          registry: docker.io
+          repository: taigaio/taiga-front
+          tag: 6.7.7
+        properties:
+          pull_policy:
+            default: IfNotPresent
+            enum:
+            - Always
+            - Never
+            - IfNotPresent
+            type: string
+          registry:
+            default: docker.io
+            type: string
+          repository:
+            default: taigaio/taiga-front
+            type: string
+          tag:
+            default: 6.7.7
+            type: string
+        type: object
+      nginx:
+        default:
+          pull_policy: IfNotPresent
+          registry: docker.io
+          repository: nginx
+          tag: 1.26.0-alpine3.19
+        properties:
+          pull_policy:
+            default: IfNotPresent
+            enum:
+            - Always
+            - Never
+            - IfNotPresent
+            type: string
+          registry:
+            default: docker.io
+            type: string
+          repository:
+            default: nginx
+            type: string
+          tag:
+            default: 1.26.0-alpine3.19
             type: string
         type: object
       postgresql:
@@ -219,12 +309,12 @@ options:
             default: 15.3
             type: number
         type: object
-      rabbit:
+      protected:
         default:
           pull_policy: IfNotPresent
           registry: docker.io
-          repository: rabbitmq
+          repository: taigaio/taiga-protected
-          tag: 3.10.2-management
+          tag: 6.7.0
         properties:
           pull_policy:
             default: IfNotPresent
@@ -233,6 +323,22 @@ options:
             - Never
             - IfNotPresent
             type: string
+          registry:
+            default: docker.io
+            type: string
+          repository:
+            default: taigaio/taiga-protected
+            type: string
+          tag:
+            default: 6.7.0
+            type: string
+        type: object
+      rabbit:
+        default:
+          registry: docker.io
+          repository: rabbitmq
+          tag: 3.10.2-management
+        properties:
           registry:
             default: docker.io
             type: string
@@ -254,11 +360,6 @@ options:
     examples:
     - letsencrypt-prod
     type: string
-  language:
-    default: fr_FR
-    examples:
-    - fr_FR
-    type: string
   postgres:
     default:
       replicas: 1
@@ -315,41 +416,29 @@ options:
             type: string
         type: object
     type: object
-  replicas:
-    default: 1
-    examples:
-    - 1
-    type: integer
-  sso_vynil:
-    default: true
-    examples:
-    - true
-    type: boolean
   storage:
     default:
       postgres:
         size: 10Gi
-      rabbitmq_async:
+      rabbitmq:
-        size: 2Gi
-      rabbitmq_events:
         size: 2Gi
       volume:
         accessMode: ReadWriteOnce
         class: ''
-        size: 1Gi
+        maxSize: 100Gi
+        size: 10Gi
         type: Filesystem
     description: Configure this app storage
     examples:
     - postgres:
         size: 10Gi
-      rabbitmq_async:
+      rabbitmq:
-        size: 2Gi
-      rabbitmq_events:
         size: 2Gi
       volume:
         accessMode: ReadWriteOnce
         class: ''
-        size: 1Gi
+        maxSize: 100Gi
+        size: 10Gi
         type: Filesystem
     properties:
       postgres:
@@ -360,15 +449,7 @@ options:
             default: 10Gi
             type: string
         type: object
-      rabbitmq_async:
+      rabbitmq:
-        default:
-          size: 2Gi
-        properties:
-          size:
-            default: 2Gi
-            type: string
-        type: object
-      rabbitmq_events:
         default:
           size: 2Gi
         properties:
@@ -380,7 +461,8 @@ options:
         default:
           accessMode: ReadWriteOnce
           class: ''
-          size: 1Gi
+          maxSize: 100Gi
+          size: 10Gi
           type: Filesystem
         properties:
           accessMode:
@@ -393,8 +475,11 @@ options:
           class:
             default: ''
             type: string
+          maxSize:
+            default: 100Gi
+            type: string
           size:
-            default: 1Gi
+            default: 10Gi
             type: string
           type:
             default: Filesystem
@@ -409,15 +494,13 @@ options:
     examples:
     - to-be-set
     type: string
-  timezone:
-    default: Europe/Paris
-    examples:
-    - Europe/Paris
-    type: string
 dependencies:
 - dist: null
   category: dbo
   component: pg
+- dist: null
+  category: dbo
+  component: rabbitmq
 providers:
   kubernetes: true
   authentik: true

apps/taiga/rabbitmq.tf

@@ -0,0 +1,22 @@
+resource "kubectl_manifest" "rabbit" {
+  yaml_body  = <<-EOF
+    apiVersion: rabbitmq.com/v1beta1
+    kind: RabbitmqCluster
+    metadata:
+      name: "${var.instance}-${var.component}-rabbitmq"
+      namespace: "${var.namespace}"
+      labels: ${jsonencode(local.rabbitmq_labels)}
+    spec:
+      image: "${var.images.rabbit.registry}/${var.images.rabbit.repository}:${var.images.rabbit.tag}"
+      persistence:
+        storage: "${var.storage.rabbitmq}"
+      replicas: ${var.rabbitmq.replicas}
+      resources:
+        limits:
+          cpu: "${var.rabbitmq.limits.cpu}"
+          memory: "${var.rabbitmq.limits.memory}"
+        requests:
+          cpu: "${var.rabbitmq.requests.cpu}"
+          memory: "${var.rabbitmq.requests.memory}"
+  EOF
+}

apps/taiga/rabbits.tf

@@ -1,45 +0,0 @@
-resource "kubectl_manifest" "async_rabbit" {
-  yaml_body  = <<-EOF
-    apiVersion: rabbitmq.com/v1beta1
-    kind: RabbitmqCluster
-    metadata:
-      name: "${var.component}-async-rabbitmq"
-      namespace: "${var.namespace}"
-      labels: ${jsonencode(local.async_rabbitmq_labels)}
-    spec:
-      image: "${var.images.rabbit.registry}/${var.images.rabbit.repository}:${var.images.rabbit.tag}"
-      persistence:
-        storage: "${var.storage.rabbitmq_async}"
-      replicas: ${var.rabbitmq.replicas}
-      resources:
-        limits:
-          cpu: "${var.rabbitmq.limits.cpu}"
-          memory: "${var.rabbitmq.limits.memory}"
-        requests:
-          cpu: "${var.rabbitmq.requests.cpu}"
-          memory: "${var.rabbitmq.requests.memory}"
-  EOF
-}
-
-resource "kubectl_manifest" "events_rabbit" {
-  yaml_body  = <<-EOF
-    apiVersion: rabbitmq.com/v1beta1
-    kind: RabbitmqCluster
-    metadata:
-      name: "${var.component}-events-rabbitmq"
-      namespace: "${var.namespace}"
-      labels: ${jsonencode(local.events_rabbitmq_labels)}
-    spec:
-      image: "${var.images.rabbit.registry}/${var.images.rabbit.repository}:${var.images.rabbit.tag}"
-      persistence:
-        storage: "${var.storage.rabbitmq_events}"
-      replicas: ${var.rabbitmq.replicas}
-      resources:
-        limits:
-          cpu: "${var.rabbitmq.limits.cpu}"
-          memory: "${var.rabbitmq.limits.memory}"
-        requests:
-          cpu: "${var.rabbitmq.requests.cpu}"
-          memory: "${var.rabbitmq.requests.memory}"
-  EOF
-}

apps/taiga/taiga_ConfigMap.tf

@@ -10,45 +10,20 @@ resource "kubectl_manifest" "cm_env" {
       POSTGRES_DB: ${var.component}
       POSTGRES_USER: ${var.component}
       POSTGRES_HOST: ${var.instance}-${var.component}-pg-rw.${var.namespace}.svc
+      TAIGA_URL: https://localhost:9000
       TAIGA_SITES_DOMAIN: localhost:9000
-      TAIGA_SITES_SCHEME: http
+      TAIGA_SITES_SCHEME: https
-      SESSION_COOKIE_SECURE: 'False'
+      SESSION_COOKIE_SECURE: "False"
-      CSRF_COOKIE_SECURE: 'False'
+      CSRF_COOKIE_SECURE: "False"
-      ENABLE_TELEMETRY: 'False'
+      ENABLE_TELEMETRY: "False"
-      PUBLIC_REGISTER_ENABLED: 'False'
+      PUBLIC_REGISTER_ENABLED: "False"
-      ENABLE_GITHUB_AUTH: 'False'
+      ENABLE_GITHUB_AUTH: "False"
-      ENABLE_GITLAB_AUTH: 'True'
+      ENABLE_GITLAB_AUTH: "True"
-      GITLAB_CLIENT_ID:
+      ENABLE_SLACK: "False"
-      GITLAB_API_CLIENT_ID: gitlab-api-client-id
+      ENABLE_GITHUB_IMPORTER: "False"
-      GITLAB_API_CLIENT_SECRET: gitlab-api-client-secret
+      ENABLE_JIRA_IMPORTER: "False"
-      GITLAB_URL: gitlab-url
+      ENABLE_TRELLO_IMPORTER: "False"
-      ENABLE_SLACK: 'False'
+      OPENID_CONNECT_SCOPES: "openid email profile"
-      ENABLE_GITHUB_IMPORTER: 'False'
-      ENABLE_JIRA_IMPORTER: 'False'
-      ENABLE_TRELLO_IMPORTER: 'False'
-      TRELLO_IMPORTER_API_KEY: api-key-from-trello
-      TRELLO_IMPORTER_SECRET_KEY: secret-key-from-trello
-
-            - name: TAIGA_URL
-              value: http://localhost:9000
-            - name: PUBLIC_REGISTER_ENABLED
-              value: 'false'
-            - name: ENABLE_GITHUB_AUTH
-              value: 'false'
-            - name: ENABLE_GITLAB_AUTH
-              value: 'true'
-            - name: GITLAB_CLIENT_ID
-              value: gitlab-api-client-id
-            - name: GITLAB_URL
-              value: gitlab-url
-            - name: ENABLE_SLACK
-              value: 'false'
-            - name: ENABLE_GITHUB_IMPORTER
-              value: 'false'
-            - name: ENABLE_JIRA_IMPORTER
-              value: 'false'
-            - name: ENABLE_TRELLO_IMPORTER
-              value: 'false'
 
 EOF
 }
@@ -58,66 +33,48 @@ resource "kubectl_manifest" "cm_scripts" {
     apiVersion: v1
     kind: ConfigMap
     metadata:
-      name: taiga-createinitialtemplates
+      name: "${var.instance}-${var.component}-scripts"
-      labels: ${jsonencode(local.common_labels)}
+      labels: ${jsonencode(local.postcfg_all_labels)}
       namespace: ${var.namespace}
     data:
-      createinitialtemplates.sh: |-
+      postconfig.py: |-
-        #!/bin/sh
+        #!/usr/bin/env python
-        echo """
         import time
         import requests
         import subprocess
 
         print('Waiting for backend ...')
-        while requests.get('http://taiga-back/api/v1/').status_code != 200:
+        while requests.get('http://${kubectl_manifest.svc_back.name}/api/v1/').status_code != 200:
             print('...')
             time.sleep(2)
 
         if len(str(subprocess.check_output(['python', 'manage.py', 'dumpdata', 'projects.projecttemplate']))) < 5:
             print(subprocess.check_output(['python', 'manage.py', 'loaddata', 'initial_project_templates']))
-        """ > /tmp/create_initial_project_templates.py
-        python /tmp/create_initial_project_templates.py
-      createinitialuser.sh: |-
-        #!/bin/sh
-        echo """
-        import time
-        import requests
-        import subprocess
-
-        print('Waiting for backend ...')
-        while requests.get('http://taiga-back/api/v1/').status_code != 200:
-            print('...')
-            time.sleep(2)
 
         if str(subprocess.check_output(['python', 'manage.py', 'dumpdata', 'users.user'], cwd='/taiga-back')).find('\"is_superuser\": true') == -1:
             print(subprocess.check_output(['python', 'manage.py', 'loaddata', 'initial_user'], cwd='/taiga-back'))
-        else:
-            print('Admin user yet created.')
-            """ > /tmp/create_superuser.py
-            python /tmp/create_superuser.py
 EOF
 }
 
-resource "kubectl_manifest" "ConfigMap_taiga-gateway" {
+resource "kubectl_manifest" "cm_nginx" {
   yaml_body  = <<-EOF
     apiVersion: v1
     kind: ConfigMap
     metadata:
-      name: taiga-gateway
+      name: "${var.instance}-${var.component}-nginx"
       namespace: ${var.namespace}
       labels: ${jsonencode(local.common_labels)}
     data:
       default.conf: |-
         server {
-            listen 80 default_server;
+            listen 8080 default_server;
 
             client_max_body_size 100M;
             charset utf-8;
 
             # Frontend
             location / {
-                proxy_pass http://taiga-front/;
+                proxy_pass http://${kubectl_manifest.svc_front.name}/;
                 proxy_pass_header Server;
                 proxy_set_header Host $http_host;
                 proxy_redirect off;
@@ -127,7 +84,7 @@ resource "kubectl_manifest" "ConfigMap_taiga-gateway" {
 
             # Api
             location /api {
-                proxy_pass http://taiga-back:8000/api;
+                proxy_pass http://${kubectl_manifest.svc_back.name}:8000/api;
                 proxy_pass_header Server;
                 proxy_set_header Host $http_host;
                 proxy_redirect off;
@@ -137,7 +94,7 @@ resource "kubectl_manifest" "ConfigMap_taiga-gateway" {
 
             # Admin
             location /admin {
-                proxy_pass http://taiga-back:8000/admin;
+                proxy_pass http://${kubectl_manifest.svc_back.name}:8000/admin;
                 proxy_pass_header Server;
                 proxy_set_header Host $http_host;
                 proxy_redirect off;
@@ -169,13 +126,13 @@ resource "kubectl_manifest" "ConfigMap_taiga-gateway" {
                 proxy_set_header X-Scheme $scheme;
                 proxy_set_header X-Forwarded-Proto $scheme;
                 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-                proxy_pass http://taiga-protected:8003/;
+                proxy_pass http://${kubectl_manifest.svc_protected.name}:8003/;
                 proxy_redirect off;
             }
 
             # Events
             location /events {
-                proxy_pass http://taiga-events:8888/events;
+                proxy_pass http://${kubectl_manifest.svc_events.name}:8888/events;
                 proxy_http_version 1.1;
                 proxy_set_header Upgrade $http_upgrade;
                 proxy_set_header Connection "upgrade";

apps/taiga/taiga_Job.tf

@@ -3,18 +3,18 @@ resource "kubectl_manifest" "Job_taiga-createinitialtemplates" {
     apiVersion: batch/v1
     kind: Job
     metadata:
-      name: taiga-createinitialtemplates
+      name: "${var.instance}-${var.component}-post-config"
-      namespace: ${var.namespace}
+      namespace: "${var.namespace}"
-      labels: ${jsonencode(local.common_labels)}
+      labels: ${jsonencode(local.postcfg_all_labels)}
     spec:
       template:
         spec:
+          restartPolicy: OnFailure
           containers:
-          - name: createinitialtemplates
+          - name: postconfig
-            image: docker.io/taigaio/taiga-back:latest
+            image: "${var.images.back.registry}/${var.images.back.repository}:${var.images.back.tag}"
-            command:
+            imagePullPolicy: ${var.images.back.pull_policy}
-            - sh
+            command: ["/scripts/postconfig.py"]
-            - /scripts/createinitialtemplates.sh
             env:
             - name: POSTGRES_PASSWORD
               valueFrom:
@@ -27,56 +27,13 @@ resource "kubectl_manifest" "Job_taiga-createinitialtemplates" {
             - configMapRef:
                 name: ${kubectl_manifest.cm_env.name}
             volumeMounts:
-            - name: createinitialtemplates
+            - name: scripts
               mountPath: /scripts
-          restartPolicy: Never
           volumes:
-          - name: createinitialtemplates
+          - name: scripts
             configMap:
-              name: taiga-createinitialtemplates
+              name: ${kubectl_manifest.cm_scripts.name}
-              defaultMode: '0744'
+              defaultMode: '0755'
       backoffLimit: 4
 EOF
 }
-
-resource "kubectl_manifest" "Job_taiga-createinitialuser" {
-  yaml_body  = <<-EOF
-    apiVersion: batch/v1
-    kind: Job
-    metadata:
-      name: taiga-createinitialuser
-      namespace: ${var.namespace}
-      labels: ${jsonencode(local.common_labels)}
-    spec:
-      template:
-        spec:
-          containers:
-          - name: createinitialuser
-            image: docker.io/taigaio/taiga-back:latest
-            command:
-            - sh
-            - /scripts/createinitialuser.sh
-            volumeMounts:
-            - name: createinitialuser
-              mountPath: /scripts
-            env:
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: ${var.instance}-${var.component}-pg-app
-                  key: password
-            envFrom:
-            - secretRef:
-                name: ${kubectl_manifest.secret.name}
-            - configMapRef:
-                name: ${kubectl_manifest.cm_env.name}
-          restartPolicy: Never
-          volumes:
-          - name: createinitialuser
-            configMap:
-              name: taiga-createinitialuser
-              defaultMode: '0744'
-      backoffLimit: 4
-EOF
-}
-

apps/taiga/taiga_PersistentVolumeClaim.tf

@@ -1,34 +1,28 @@
-resource "kubectl_manifest" "PersistentVolumeClaim_taiga-media" {
+locals {
-  yaml_body  = <<-EOF
+  pvc_spec = merge({
-    kind: PersistentVolumeClaim
+    "accessModes" = [var.storage.volume.accessMode]
-    apiVersion: v1
+    "volumeMode" = var.storage.volume.type
-    metadata:
+    "resources" = {
-      name: taiga-media
+      "requests" = {
-      labels: ${jsonencode(local.common_labels)}
+        "storage" = "${var.storage.volume.size}"
-      namespace: ${var.namespace}
+      }
-    spec:
+    }
-      accessModes:
+  }, var.storage.volume.class != "" ?{
-      - ReadWriteOnce
+    "storageClassName" = var.storage.volume.class
-      resources:
+  }:{})
-        requests:
-          storage: 5Gi
-EOF
 }
 
-resource "kubectl_manifest" "PersistentVolumeClaim_taiga-static" {
+resource "kubectl_manifest" "pvc" {
+  ignore_fields = ["spec.resources.requests.storage"]
   yaml_body  = <<-EOF
-    kind: PersistentVolumeClaim
     apiVersion: v1
+    kind: PersistentVolumeClaim
     metadata:
-      name: taiga-static
+      name: "${var.component}-${var.instance}"
+      namespace: "${var.namespace}"
       labels: ${jsonencode(local.common_labels)}
-      namespace: ${var.namespace}
+      annotations:
-    spec:
+        resize.kubesphere.io/storage_limit: "${var.storage.volume.maxSize}"
-      accessModes:
+    spec: ${jsonencode(local.pvc_spec)}
-      - ReadWriteOnce
+  EOF
-      resources:
-        requests:
-          storage: 5Gi
-EOF
 }
-

apps/taiga/taiga_Service.tf

@@ -1,10 +1,76 @@
-resource "kubectl_manifest" "Service_taiga-back" {
+locals {
+  dns_name  = "${var.sub_domain}.${var.domain_name}"
+  dns_names = [local.dns_name]
+  app_name  = (var.component == var.instance || var.component=="") ? var.instance : format("%s-%s", var.component, var.instance)
+  icon      = "favicon.ico"
+}
+
+module "service" {
+  source = "git::https://git.solidite.fr/vynil/kydah-modules.git//service?ref=0.3.0"
+  component         = var.component
+  instance          = var.instance
+  namespace         = var.namespace
+  labels            = local.common_labels
+  selector          = local.back_labels
+  targets           = ["http"]
+  providers = {
+    kubectl = kubectl
+  }
+}
+
+module "ingress" {
+  source = "git::https://git.solidite.fr/vynil/kydah-modules.git//ingress?ref=0.3.0"
+  component         = ""
+  instance          = var.instance
+  namespace         = var.namespace
+  issuer            = var.issuer
+  ingress_class     = var.ingress_class
+  labels            = local.common_labels
+  dns_names         = local.dns_names
+  services          = [module.service.default_definition]
+  providers = {
+    kubectl = kubectl
+  }
+}
+
+module "application" {
+  source = "git::https://git.solidite.fr/vynil/kydah-modules.git//application?ref=0.3.0"
+  component         = var.component
+  instance          = var.instance
+  app_group         = var.app_group
+  dns_name          = local.dns_name
+  icon              = local.icon
+  sub_groups        = ["admin"]
+  protocol_provider = module.oauth2.provider-id
+  providers = {
+    authentik = authentik
+  }
+}
+
+module "oauth2" {
+  source = "git::https://git.solidite.fr/vynil/kydah-modules.git//oauth2?ref=0.3.0"
+  component         = var.component
+  instance          = var.instance
+  namespace         = var.namespace
+  domain            = var.domain
+  labels            = local.common_labels
+  dns_name          = "${local.dns_name}/"
+  redirect_path     = ""
+  providers = {
+    kubernetes = kubernetes
+    kubectl = kubectl
+    authentik = authentik
+  }
+}
+
+
+resource "kubectl_manifest" "svc_back" {
   yaml_body  = <<-EOF
     apiVersion: v1
     kind: Service
     metadata:
-      name: taiga-back
+      name: "${var.instance}-${var.component}-back"
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.back_all_labels)}
       namespace: ${var.namespace}
     spec:
       type: ClusterIP
@@ -12,146 +78,20 @@ resource "kubectl_manifest" "Service_taiga-back" {
       - name: taiga-back
         port: 8000
         targetPort: taiga-back
-      - name: taiga-gateway
+      - name: http
         port: 80
-        targetPort: taiga-gateway
+        targetPort: http
-      selector:
+      selector: ${jsonencode(local.back_labels)}
-        app.kubernetes.io/name: taiga-back
-        app.kubernetes.io/instance: taiga
 EOF
 }
 
-resource "kubectl_manifest" "Service_taiga-async-rabbitmq-headless" {
+resource "kubectl_manifest" "svc_front" {
   yaml_body  = <<-EOF
     apiVersion: v1
     kind: Service
     metadata:
-      name: taiga-async-rabbitmq-headless
+      name: "${var.instance}-${var.component}-front"
-      namespace: ${var.namespace}
+      labels: ${jsonencode(local.front_all_labels)}
-      labels: ${jsonencode(local.common-labels)}
-    spec:
-      clusterIP: None
-      ports:
-      - name: epmd
-        port: 4369
-        targetPort: epmd
-      - name: amqp
-        port: 5672
-        targetPort: amqp
-      - name: dist
-        port: 25672
-        targetPort: dist
-      - name: http-stats
-        port: 15672
-        targetPort: stats
-      selector:
-        app.kubernetes.io/name: async-rabbitmq
-        app.kubernetes.io/instance: taiga
-      publishNotReadyAddresses: true
-EOF
-}
-
-resource "kubectl_manifest" "Service_taiga-postgresql" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Service
-    metadata:
-      name: taiga-postgresql
-      namespace: ${var.namespace}
-      labels: ${jsonencode(local.common-labels)}
-      annotations: null
-    spec:
-      type: ClusterIP
-      sessionAffinity: None
-      ports:
-      - name: tcp-postgresql
-        port: 5432
-        targetPort: tcp-postgresql
-        nodePort: null
-      selector:
-        app.kubernetes.io/name: postgresql
-        app.kubernetes.io/instance: taiga
-        app.kubernetes.io/component: primary
-EOF
-}
-
-resource "kubectl_manifest" "Service_taiga-events" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Service
-    metadata:
-      name: taiga-events
-      labels: ${jsonencode(local.common-labels)}
-      namespace: ${var.namespace}
-    spec:
-      type: ClusterIP
-      ports:
-      - name: taiga-events
-        port: 8888
-        targetPort: taiga-events
-      selector:
-        app.kubernetes.io/name: taiga-events
-        app.kubernetes.io/instance: taiga
-EOF
-}
-
-resource "kubectl_manifest" "Service_taiga-protected" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Service
-    metadata:
-      name: taiga-protected
-      labels: ${jsonencode(local.common-labels)}
-      namespace: ${var.namespace}
-    spec:
-      type: ClusterIP
-      ports:
-      - name: taiga-protected
-        port: 8003
-        targetPort: taiga-protected
-      selector:
-        app.kubernetes.io/name: taiga-protected
-        app.kubernetes.io/instance: taiga
-EOF
-}
-
-resource "kubectl_manifest" "Service_taiga-events-rabbitmq-headless" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Service
-    metadata:
-      name: taiga-events-rabbitmq-headless
-      namespace: ${var.namespace}
-      labels: ${jsonencode(local.common-labels)}
-    spec:
-      clusterIP: None
-      ports:
-      - name: epmd
-        port: 4369
-        targetPort: epmd
-      - name: amqp
-        port: 5672
-        targetPort: amqp
-      - name: dist
-        port: 25672
-        targetPort: dist
-      - name: http-stats
-        port: 15672
-        targetPort: stats
-      selector:
-        app.kubernetes.io/name: events-rabbitmq
-        app.kubernetes.io/instance: taiga
-      publishNotReadyAddresses: true
-EOF
-}
-
-resource "kubectl_manifest" "Service_taiga-front" {
-  yaml_body  = <<-EOF
-    apiVersion: v1
-    kind: Service
-    metadata:
-      name: taiga-front
-      labels: ${jsonencode(local.common-labels)}
       namespace: ${var.namespace}
     spec:
       type: ClusterIP
@@ -159,120 +99,43 @@ resource "kubectl_manifest" "Service_taiga-front" {
       - name: taiga-front
         port: 80
         targetPort: taiga-front
-      selector:
+      selector: ${jsonencode(local.front_labels)}
-        app.kubernetes.io/name: taiga-front
-        app.kubernetes.io/instance: taiga
 EOF
 }
 
-resource "kubectl_manifest" "Service_taiga-gateway" {
+resource "kubectl_manifest" "svc_events" {
   yaml_body  = <<-EOF
     apiVersion: v1
     kind: Service
     metadata:
-      name: taiga-gateway
+      name: "${var.instance}-${var.component}-events"
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.event_all_labels)}
       namespace: ${var.namespace}
     spec:
       type: ClusterIP
       ports:
-      - name: taiga-gateway
+      - name: taiga-events
-        port: 80
+        port: 8888
-        targetPort: taiga-gateway
+        targetPort: taiga-events
-      selector:
+      selector: ${jsonencode(local.event_labels)}
-        app.kubernetes.io/name: taiga-back
-        app.kubernetes.io/instance: taiga
 EOF
 }
 
+resource "kubectl_manifest" "svc_protected" {
+  yaml_body  = <<-EOF
+    apiVersion: v1
+    kind: Service
+    metadata:
+      name: "${var.instance}-${var.component}-protected"
+      labels: ${jsonencode(local.protected_all_labels)}
+      namespace: ${var.namespace}
+    spec:
+      type: ClusterIP
+      ports:
+      - name: taiga-protected
+        port: 8003
+        targetPort: taiga-protected
+      selector: ${jsonencode(local.protected_labels)}
+EOF
+}
 
-# resource "kubectl_manifest" "Service_taiga-events-rabbitmq" {
-#   yaml_body  = <<-EOF
-#     apiVersion: v1
-#     kind: Service
-#     metadata:
-#       name: taiga-events-rabbitmq
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#     spec:
-#       type: ClusterIP
-#       sessionAffinity: None
-#       ports:
-#       - name: amqp
-#         port: 5672
-#         targetPort: amqp
-#         nodePort: null
-#       - name: epmd
-#         port: 4369
-#         targetPort: epmd
-#         nodePort: null
-#       - name: dist
-#         port: 25672
-#         targetPort: dist
-#         nodePort: null
-#       - name: http-stats
-#         port: 15672
-#         targetPort: stats
-#         nodePort: null
-#       selector:
-#         app.kubernetes.io/name: events-rabbitmq
-#         app.kubernetes.io/instance: taiga
-# EOF
-# }
-
-# resource "kubectl_manifest" "Service_taiga-postgresql-hl" {
-#   yaml_body  = <<-EOF
-#     apiVersion: v1
-#     kind: Service
-#     metadata:
-#       name: taiga-postgresql-hl
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#     spec:
-#       type: ClusterIP
-#       clusterIP: None
-#       publishNotReadyAddresses: true
-#       ports:
-#       - name: tcp-postgresql
-#         port: 5432
-#         targetPort: tcp-postgresql
-#       selector:
-#         app.kubernetes.io/name: postgresql
-#         app.kubernetes.io/instance: taiga
-#         app.kubernetes.io/component: primary
-# EOF
-# }
-
-# resource "kubectl_manifest" "Service_taiga-async-rabbitmq" {
-#   yaml_body  = <<-EOF
-#     apiVersion: v1
-#     kind: Service
-#     metadata:
-#       name: taiga-async-rabbitmq
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#     spec:
-#       type: ClusterIP
-#       sessionAffinity: None
-#       ports:
-#       - name: amqp
-#         port: 5672
-#         targetPort: amqp
-#         nodePort: null
-#       - name: epmd
-#         port: 4369
-#         targetPort: epmd
-#         nodePort: null
-#       - name: dist
-#         port: 25672
-#         targetPort: dist
-#         nodePort: null
-#       - name: http-stats
-#         port: 15672
-#         targetPort: stats
-#         nodePort: null
-#       selector:
-#         app.kubernetes.io/name: async-rabbitmq
-#         app.kubernetes.io/instance: taiga
-# EOF
-# }

apps/taiga/taiga_workload.tf

@@ -4,62 +4,59 @@ resource "kubectl_manifest" "Deployment_taiga-events" {
     kind: Deployment
     metadata:
       name: taiga-events
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.event_all_labels)}
       namespace: ${var.namespace}
     spec:
       selector:
-        matchLabels:
+        matchLabels: ${jsonencode(local.event_labels)}
-          app.kubernetes.io/name: taiga-events
-          app.kubernetes.io/instance: taiga
       replicas: 1
       template:
         metadata:
-          labels:
+          labels: ${jsonencode(local.event_labels)}
-            app.kubernetes.io/name: taiga-events
-            helm.sh/chart: taiga-0.0.11
-            app.kubernetes.io/instance: taiga
-            app.kubernetes.io/managed-by: Helm
-            app.kubernetes.io/component: taiga-events
         spec:
-          serviceAccountName: default
           containers:
           - name: taiga-events
-            image: docker.io/taigaio/taiga-events:latest
+            image: "${var.images.events.registry}/${var.images.events.repository}:${var.images.events.tag}"
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: ${var.images.events.pull_policy}
-            resources:
-              limits: {}
-              requests: {}
             envFrom:
             - secretRef:
                 name: ${kubectl_manifest.secret.name}
             env:
+            - name: TAIGA_EVENTS_RABBITMQ_HOST
+              value: ${kubectl_manifest.rabbit.name}
             - name: RABBITMQ_USER
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: username
             - name: RABBITMQ_PASS
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: password
             ports:
             - name: taiga-events
               containerPort: 8888
-            livenessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 20
-              periodSeconds: 10
-              timeoutSeconds: 5
-              successThreshold: 1
-              failureThreshold: 3
-            readinessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 5
-              periodSeconds: 10
-              timeoutSeconds: 1
-              successThreshold: 1
-              failureThreshold: 3
 EOF
 }
+            # livenessProbe:
+            #   httpGet:
+            #     path: /admin/login/
+            #     port: 8000
+            #   initialDelaySeconds: 20
+            #   periodSeconds: 10
+            #   timeoutSeconds: 5
+            #   successThreshold: 1
+            #   failureThreshold: 3
+            # readinessProbe:
+            #   httpGet:
+            #     path: /admin/login/
+            #     port: 8000
+            #   initialDelaySeconds: 5
+            #   periodSeconds: 10
+            #   timeoutSeconds: 1
+            #   successThreshold: 1
+            #   failureThreshold: 3
 
 resource "kubectl_manifest" "Deployment_taiga-front" {
   yaml_body  = <<-EOF
@@ -67,55 +64,29 @@ resource "kubectl_manifest" "Deployment_taiga-front" {
     kind: Deployment
     metadata:
       name: taiga-front
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.front_all_labels)}
       namespace: ${var.namespace}
     spec:
       selector:
-        matchLabels:
+        matchLabels: ${jsonencode(local.front_labels)}
-          app.kubernetes.io/name: taiga-front
-          app.kubernetes.io/instance: taiga
       replicas: 1
       template:
         metadata:
-          labels:
+          labels: ${jsonencode(local.front_labels)}
-            app.kubernetes.io/name: taiga-front
-            helm.sh/chart: taiga-0.0.11
-            app.kubernetes.io/instance: taiga
-            app.kubernetes.io/managed-by: Helm
-            app.kubernetes.io/component: taiga-front
         spec:
-          serviceAccountName: default
           containers:
           - name: taiga-front
-            image: docker.io/taigaio/taiga-front:latest
+            image: "${var.images.front.registry}/${var.images.front.repository}:${var.images.front.tag}"
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: ${var.images.front.pull_policy}
-            resources:
+            env:
-              limits: {}
+            - name: GITLAB_CLIENT_ID
-              requests: {}
+              value: gitlab-api-client-id
             envFrom:
             - configMapRef:
                 name: ${kubectl_manifest.cm_env.name}
             ports:
             - name: taiga-front
               containerPort: 80
-            livenessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 20
-              periodSeconds: 10
-              timeoutSeconds: 5
-              successThreshold: 1
-              failureThreshold: 3
-            readinessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 5
-              periodSeconds: 10
-              timeoutSeconds: 1
-              successThreshold: 1
-              failureThreshold: 3
 EOF
 }
 
@@ -125,57 +96,31 @@ resource "kubectl_manifest" "Deployment_taiga-protected" {
     kind: Deployment
     metadata:
       name: taiga-protected
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.protected_all_labels)}
       namespace: ${var.namespace}
     spec:
       selector:
-        matchLabels:
+        matchLabels: ${jsonencode(local.protected_labels)}
-          app.kubernetes.io/name: taiga-protected
-          app.kubernetes.io/instance: taiga
       replicas: 1
       template:
         metadata:
-          labels:
+          labels: ${jsonencode(local.protected_labels)}
-            app.kubernetes.io/name: taiga-protected
-            helm.sh/chart: taiga-0.0.11
-            app.kubernetes.io/instance: taiga
-            app.kubernetes.io/managed-by: Helm
-            app.kubernetes.io/component: taiga-protected
         spec:
-          serviceAccountName: default
           containers:
           - name: taiga-protected
-            image: docker.io/taigaio/taiga-protected:latest
+            image: "${var.images.protected.registry}/${var.images.protected.repository}:${var.images.protected.tag}"
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: ${var.images.protected.pull_policy}
-            resources:
-              limits: {}
-              requests: {}
             env:
             - name: SECRET_KEY
-              value: 9%pno@m688el28@2+^y4v^&6wluqk-g#j#d7$dsjtht)o30dn1
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.secret.name}
+                  key: TAIGA_SECRET_KEY
             - name: MAX_AGE
               value: '360'
             ports:
             - name: taiga-protected
               containerPort: 8003
-            livenessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 20
-              periodSeconds: 10
-              timeoutSeconds: 5
-              successThreshold: 1
-              failureThreshold: 3
-            readinessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 8000
-              initialDelaySeconds: 5
-              periodSeconds: 10
-              timeoutSeconds: 1
-              successThreshold: 1
-              failureThreshold: 3
 EOF
 }
 
@@ -185,36 +130,39 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
     kind: Deployment
     metadata:
       name: taiga-back
-      labels: ${jsonencode(local.common-labels)}
+      labels: ${jsonencode(local.back_all_labels)}
       namespace: ${var.namespace}
     spec:
       selector:
-        matchLabels:
+        matchLabels: ${jsonencode(local.back_labels)}
-          app.kubernetes.io/name: taiga-back
-          app.kubernetes.io/instance: taiga
       replicas: 1
       template:
         metadata:
-          labels:
+          labels: ${jsonencode(local.back_labels)}
-            app.kubernetes.io/name: taiga-back
-            helm.sh/chart: taiga-0.0.11
-            app.kubernetes.io/instance: taiga
-            app.kubernetes.io/managed-by: Helm
-            app.kubernetes.io/component: taiga-back
         spec:
-          serviceAccountName: default
           containers:
           - name: taiga-back
-            image: docker.io/taigaio/taiga-back:latest
+            image: "${var.images.back.registry}/${var.images.back.repository}:${var.images.back.tag}"
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: ${var.images.back.pull_policy}
-            resources:
-              limits: {}
-              requests: {}
             env:
+            - name: TAIGA_EVENTS_RABBITMQ_HOST
+              value: ${kubectl_manifest.rabbit.name}
+            - name: TAIGA_ASYNC_RABBITMQ_HOST
+              value: ${kubectl_manifest.rabbit.name}
             - name: RABBITMQ_USER
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: username
             - name: RABBITMQ_PASS
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: password
+            - name: GITLAB_API_CLIENT_ID
+              value: gitlab-api-client-id
+            - name: GITLAB_API_CLIENT_SECRET
+              value: gitlab-api-client-secret
             - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
@@ -228,9 +176,16 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
             ports:
             - name: taiga-back
               containerPort: 8000
+            volumeMounts:
+            - name: data
+              mountPath: /taiga-back/static
+              subPath: static
+            - name: data
+              mountPath: /taiga-back/media
+              subPath: media
             livenessProbe:
               httpGet:
-                path: /admin/login/
+                path: /api/v1/
                 port: 8000
               initialDelaySeconds: 20
               periodSeconds: 10
@@ -239,31 +194,29 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
               failureThreshold: 3
             readinessProbe:
               httpGet:
-                path: /admin/login/
+                path: /api/v1/
                 port: 8000
               initialDelaySeconds: 5
               periodSeconds: 10
               timeoutSeconds: 1
               successThreshold: 1
               failureThreshold: 3
-            volumeMounts:
-            - name: taiga-static
-              mountPath: /taiga-back/static
-            - name: taiga-media
-              mountPath: /taiga-back/media
           - name: taiga-async
-            image: docker.io/taigaio/taiga-back:latest
+            image: "${var.images.back.registry}/${var.images.back.repository}:${var.images.back.tag}"
-            imagePullPolicy: IfNotPresent
+            imagePullPolicy: ${var.images.back.pull_policy}
-            resources:
-              limits: {}
-              requests: {}
             command:
             - /taiga-back/docker/async_entrypoint.sh
             env:
             - name: RABBITMQ_USER
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: username
             - name: RABBITMQ_PASS
-              value: taiga
+              valueFrom:
+                secretKeyRef:
+                  name: ${kubectl_manifest.rabbit.name}-default-user
+                  key: password
             - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
@@ -275,569 +228,33 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
             - configMapRef:
                 name: ${kubectl_manifest.cm_env.name}
             volumeMounts:
-            - name: taiga-static
+            - name: data
               mountPath: /taiga-back/static
-            - name: taiga-media
+              subPath: static
+            - name: data
               mountPath: /taiga-back/media
-          - name: taiga-gateway
+              subPath: media
-            image: docker.io/nginx:1.19-alpine
+          - name: nginx
-            imagePullPolicy: IfNotPresent
+            image: "${var.images.nginx.registry}/${var.images.nginx.repository}:${var.images.nginx.tag}"
-            resources:
+            imagePullPolicy: ${var.images.nginx.pull_policy}
-              limits: {}
-              requests: {}
             ports:
-            - name: taiga-gateway
+            - name: http
-              containerPort: 80
+              containerPort: 8080
-            livenessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 80
-              initialDelaySeconds: 20
-              periodSeconds: 10
-              timeoutSeconds: 5
-              successThreshold: 1
-              failureThreshold: 10
-            readinessProbe:
-              httpGet:
-                path: /admin/login/
-                port: 80
-              initialDelaySeconds: 5
-              periodSeconds: 10
-              timeoutSeconds: 1
-              successThreshold: 1
-              failureThreshold: 10
             volumeMounts:
-            - name: taiga-static
+            - name: data
               mountPath: /taiga/static
-            - name: taiga-media
+              subPath: static
+            - name: data
               mountPath: /taiga/media
+              subPath: media
             - name: taiga-conf
               mountPath: /etc/nginx/conf.d/
           volumes:
-          - name: taiga-static
+          - name: data
             persistentVolumeClaim:
-              claimName: taiga-static
+              claimName: ${kubectl_manifest.pvc.name}
-          - name: taiga-media
-            persistentVolumeClaim:
-              claimName: taiga-media
           - name: taiga-conf
             configMap:
-              name: taiga-gateway
+              name: ${kubectl_manifest.cm_nginx.name}
 EOF
 }
-
-# resource "kubectl_manifest" "StatefulSet_taiga-async-rabbitmq" {
-#   yaml_body  = <<-EOF
-#     apiVersion: apps/v1
-#     kind: StatefulSet
-#     metadata:
-#       name: taiga-async-rabbitmq
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#     spec:
-#       serviceName: taiga-async-rabbitmq-headless
-#       podManagementPolicy: OrderedReady
-#       replicas: 1
-#       updateStrategy:
-#         type: RollingUpdate
-#       selector:
-#         matchLabels:
-#           app.kubernetes.io/name: async-rabbitmq
-#           app.kubernetes.io/instance: taiga
-#       template:
-#         metadata:
-#           labels:
-#             app.kubernetes.io/name: async-rabbitmq
-#             helm.sh/chart: async-rabbitmq-11.9.3
-#             app.kubernetes.io/instance: taiga
-#             app.kubernetes.io/managed-by: Helm
-#           annotations:
-#             checksum/config: 217a61a978fa7482416092178a1ec21062391912fcb3b4dcf9d56998cbc7dcb0
-#             checksum/secret: 6cfb22ee840921fa65ccca1d3b463345d79ab2cf3fbc5da718cdb5d482d8f329
-#         spec:
-#           serviceAccountName: taiga-async-rabbitmq
-#           affinity:
-#             podAffinity: null
-#             podAntiAffinity:
-#               preferredDuringSchedulingIgnoredDuringExecution:
-#               - podAffinityTerm:
-#                   labelSelector:
-#                     matchLabels:
-#                       app.kubernetes.io/name: async-rabbitmq
-#                       app.kubernetes.io/instance: taiga
-#                   topologyKey: kubernetes.io/hostname
-#                 weight: 1
-#             nodeAffinity: null
-#           securityContext:
-#             fsGroup: 1001
-#           terminationGracePeriodSeconds: 120
-#           initContainers: null
-#           containers:
-#           - name: rabbitmq
-#             image: docker.io/bitnami/rabbitmq:3.11.9-debian-11-r1
-#             imagePullPolicy: IfNotPresent
-#             securityContext:
-#               runAsNonRoot: true
-#               runAsUser: 1001
-#             lifecycle:
-#               preStop:
-#                 exec:
-#                   command:
-#                   - /bin/bash
-#                   - -ec
-#                   - |
-#                     if [[ -f /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh ]]; then
-#                         /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh -t "120" -d "false"
-#                     else
-#                         rabbitmqctl stop_app
-#                     fi
-#             env:
-#             - name: BITNAMI_DEBUG
-#               value: 'false'
-#             - name: MY_POD_IP
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: status.podIP
-#             - name: MY_POD_NAME
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: metadata.name
-#             - name: MY_POD_NAMESPACE
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: metadata.namespace
-#             - name: K8S_SERVICE_NAME
-#               value: taiga-async-rabbitmq-headless
-#             - name: K8S_ADDRESS_TYPE
-#               value: hostname
-#             - name: RABBITMQ_FEATURE_FLAGS
-#               value: null
-#             - name: RABBITMQ_FORCE_BOOT
-#               value: no
-#             - name: RABBITMQ_NODE_NAME
-#               value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local
-#             - name: K8S_HOSTNAME_SUFFIX
-#               value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local
-#             - name: RABBITMQ_MNESIA_DIR
-#               value: /bitnami/rabbitmq/mnesia/$(RABBITMQ_NODE_NAME)
-#             - name: RABBITMQ_LDAP_ENABLE
-#               value: no
-#             - name: RABBITMQ_LOGS
-#               value: '-'
-#             - name: RABBITMQ_ULIMIT_NOFILES
-#               value: '65536'
-#             - name: RABBITMQ_USE_LONGNAME
-#               value: 'true'
-#             - name: RABBITMQ_ERL_COOKIE
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-async-rabbitmq
-#                   key: rabbitmq-erlang-cookie
-#             - name: RABBITMQ_LOAD_DEFINITIONS
-#               value: no
-#             - name: RABBITMQ_DEFINITIONS_FILE
-#               value: /app/load_definition.json
-#             - name: RABBITMQ_SECURE_PASSWORD
-#               value: yes
-#             - name: RABBITMQ_USERNAME
-#               value: taiga
-#             - name: RABBITMQ_PASSWORD
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-async-rabbitmq
-#                   key: rabbitmq-password
-#             - name: RABBITMQ_PLUGINS
-#               value: rabbitmq_management, rabbitmq_peer_discovery_k8s, rabbitmq_auth_backend_ldap
-#             envFrom: null
-#             ports:
-#             - name: amqp
-#               containerPort: 5672
-#             - name: dist
-#               containerPort: 25672
-#             - name: stats
-#               containerPort: 15672
-#             - name: epmd
-#               containerPort: 4369
-#             livenessProbe:
-#               failureThreshold: 6
-#               initialDelaySeconds: 120
-#               periodSeconds: 30
-#               successThreshold: 1
-#               timeoutSeconds: 20
-#               exec:
-#                 command:
-#                 - /bin/bash
-#                 - -ec
-#                 - rabbitmq-diagnostics -q ping
-#             readinessProbe:
-#               failureThreshold: 3
-#               initialDelaySeconds: 10
-#               periodSeconds: 30
-#               successThreshold: 1
-#               timeoutSeconds: 20
-#               exec:
-#                 command:
-#                 - /bin/bash
-#                 - -ec
-#                 - rabbitmq-diagnostics -q check_running && rabbitmq-diagnostics -q check_local_alarms
-#             resources:
-#               limits: {}
-#               requests: {}
-#             volumeMounts:
-#             - name: configuration
-#               mountPath: /bitnami/rabbitmq/conf
-#             - name: data
-#               mountPath: /bitnami/rabbitmq/mnesia
-#           volumes:
-#           - name: configuration
-#             projected:
-#               sources:
-#               - secret:
-#                   name: taiga-async-rabbitmq-config
-#       volumeClaimTemplates:
-#       - metadata:
-#           name: data
-#           labels:
-#             app.kubernetes.io/name: async-rabbitmq
-#             app.kubernetes.io/instance: taiga
-#         spec:
-#           accessModes:
-#           - ReadWriteOnce
-#           resources:
-#             requests:
-#               storage: 8Gi
-# EOF
-# }
-
-# resource "kubectl_manifest" "StatefulSet_taiga-events-rabbitmq" {
-#   yaml_body  = <<-EOF
-#     apiVersion: apps/v1
-#     kind: StatefulSet
-#     metadata:
-#       name: taiga-events-rabbitmq
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#     spec:
-#       serviceName: taiga-events-rabbitmq-headless
-#       podManagementPolicy: OrderedReady
-#       replicas: 1
-#       updateStrategy:
-#         type: RollingUpdate
-#       selector:
-#         matchLabels:
-#           app.kubernetes.io/name: events-rabbitmq
-#           app.kubernetes.io/instance: taiga
-#       template:
-#         metadata:
-#           labels:
-#             app.kubernetes.io/name: events-rabbitmq
-#             helm.sh/chart: events-rabbitmq-11.9.3
-#             app.kubernetes.io/instance: taiga
-#             app.kubernetes.io/managed-by: Helm
-#           annotations:
-#             checksum/config: 708e775803d7be65e291bb582e83c9ff67ac497152301cd4ab1f23f4f8741485
-#             checksum/secret: 2d4a98f9c2ae284ad1b5ae4ff40da10e1ce7b9a44a210ca81f647b71f962a5c8
-#         spec:
-#           serviceAccountName: taiga-events-rabbitmq
-#           affinity:
-#             podAffinity: null
-#             podAntiAffinity:
-#               preferredDuringSchedulingIgnoredDuringExecution:
-#               - podAffinityTerm:
-#                   labelSelector:
-#                     matchLabels:
-#                       app.kubernetes.io/name: events-rabbitmq
-#                       app.kubernetes.io/instance: taiga
-#                   topologyKey: kubernetes.io/hostname
-#                 weight: 1
-#             nodeAffinity: null
-#           securityContext:
-#             fsGroup: 1001
-#           terminationGracePeriodSeconds: 120
-#           initContainers: null
-#           containers:
-#           - name: rabbitmq
-#             image: docker.io/bitnami/rabbitmq:3.11.9-debian-11-r1
-#             imagePullPolicy: IfNotPresent
-#             securityContext:
-#               runAsNonRoot: true
-#               runAsUser: 1001
-#             lifecycle:
-#               preStop:
-#                 exec:
-#                   command:
-#                   - /bin/bash
-#                   - -ec
-#                   - |
-#                     if [[ -f /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh ]]; then
-#                         /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh -t "120" -d "false"
-#                     else
-#                         rabbitmqctl stop_app
-#                     fi
-#             env:
-#             - name: BITNAMI_DEBUG
-#               value: 'false'
-#             - name: MY_POD_IP
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: status.podIP
-#             - name: MY_POD_NAME
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: metadata.name
-#             - name: MY_POD_NAMESPACE
-#               valueFrom:
-#                 fieldRef:
-#                   fieldPath: metadata.namespace
-#             - name: K8S_SERVICE_NAME
-#               value: taiga-events-rabbitmq-headless
-#             - name: K8S_ADDRESS_TYPE
-#               value: hostname
-#             - name: RABBITMQ_FEATURE_FLAGS
-#               value: null
-#             - name: RABBITMQ_FORCE_BOOT
-#               value: no
-#             - name: RABBITMQ_NODE_NAME
-#               value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local
-#             - name: K8S_HOSTNAME_SUFFIX
-#               value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local
-#             - name: RABBITMQ_MNESIA_DIR
-#               value: /bitnami/rabbitmq/mnesia/$(RABBITMQ_NODE_NAME)
-#             - name: RABBITMQ_LDAP_ENABLE
-#               value: no
-#             - name: RABBITMQ_LOGS
-#               value: '-'
-#             - name: RABBITMQ_ULIMIT_NOFILES
-#               value: '65536'
-#             - name: RABBITMQ_USE_LONGNAME
-#               value: 'true'
-#             - name: RABBITMQ_ERL_COOKIE
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-events-rabbitmq
-#                   key: rabbitmq-erlang-cookie
-#             - name: RABBITMQ_LOAD_DEFINITIONS
-#               value: no
-#             - name: RABBITMQ_DEFINITIONS_FILE
-#               value: /app/load_definition.json
-#             - name: RABBITMQ_SECURE_PASSWORD
-#               value: yes
-#             - name: RABBITMQ_USERNAME
-#               value: taiga
-#             - name: RABBITMQ_PASSWORD
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-events-rabbitmq
-#                   key: rabbitmq-password
-#             - name: RABBITMQ_PLUGINS
-#               value: rabbitmq_management, rabbitmq_peer_discovery_k8s, rabbitmq_auth_backend_ldap
-#             envFrom: null
-#             ports:
-#             - name: amqp
-#               containerPort: 5672
-#             - name: dist
-#               containerPort: 25672
-#             - name: stats
-#               containerPort: 15672
-#             - name: epmd
-#               containerPort: 4369
-#             livenessProbe:
-#               failureThreshold: 6
-#               initialDelaySeconds: 120
-#               periodSeconds: 30
-#               successThreshold: 1
-#               timeoutSeconds: 20
-#               exec:
-#                 command:
-#                 - /bin/bash
-#                 - -ec
-#                 - rabbitmq-diagnostics -q ping
-#             readinessProbe:
-#               failureThreshold: 3
-#               initialDelaySeconds: 10
-#               periodSeconds: 30
-#               successThreshold: 1
-#               timeoutSeconds: 20
-#               exec:
-#                 command:
-#                 - /bin/bash
-#                 - -ec
-#                 - rabbitmq-diagnostics -q check_running && rabbitmq-diagnostics -q check_local_alarms
-#             resources:
-#               limits: {}
-#               requests: {}
-#             volumeMounts:
-#             - name: configuration
-#               mountPath: /bitnami/rabbitmq/conf
-#             - name: data
-#               mountPath: /bitnami/rabbitmq/mnesia
-#           volumes:
-#           - name: configuration
-#             projected:
-#               sources:
-#               - secret:
-#                   name: taiga-events-rabbitmq-config
-#       volumeClaimTemplates:
-#       - metadata:
-#           name: data
-#           labels:
-#             app.kubernetes.io/name: events-rabbitmq
-#             app.kubernetes.io/instance: taiga
-#         spec:
-#           accessModes:
-#           - ReadWriteOnce
-#           resources:
-#             requests:
-#               storage: 8Gi
-# EOF
-# }
-
-# resource "kubectl_manifest" "StatefulSet_taiga-postgresql" {
-#   yaml_body  = <<-EOF
-#     apiVersion: apps/v1
-#     kind: StatefulSet
-#     metadata:
-#       name: taiga-postgresql
-#       namespace: ${var.namespace}
-#       labels: ${jsonencode(local.common-labels)}
-#       annotations: null
-#     spec:
-#       replicas: 1
-#       serviceName: taiga-postgresql-hl
-#       updateStrategy:
-#         rollingUpdate: {}
-#         type: RollingUpdate
-#       selector:
-#         matchLabels:
-#           app.kubernetes.io/name: postgresql
-#           app.kubernetes.io/instance: taiga
-#           app.kubernetes.io/component: primary
-#       template:
-#         metadata:
-#           name: taiga-postgresql
-#           labels:
-#             app.kubernetes.io/name: postgresql
-#             helm.sh/chart: postgresql-11.6.26
-#             app.kubernetes.io/instance: taiga
-#             app.kubernetes.io/managed-by: Helm
-#             app.kubernetes.io/component: primary
-#           annotations: null
-#         spec:
-#           serviceAccountName: default
-#           affinity:
-#             podAffinity: null
-#             podAntiAffinity:
-#               preferredDuringSchedulingIgnoredDuringExecution:
-#               - podAffinityTerm:
-#                   labelSelector:
-#                     matchLabels:
-#                       app.kubernetes.io/name: postgresql
-#                       app.kubernetes.io/instance: taiga
-#                       app.kubernetes.io/component: primary
-#                   topologyKey: kubernetes.io/hostname
-#                 weight: 1
-#             nodeAffinity: null
-#           securityContext:
-#             fsGroup: 1001
-#           hostNetwork: false
-#           hostIPC: false
-#           initContainers: null
-#           containers:
-#           - name: postgresql
-#             image: docker.io/bitnami/postgresql:13.10.0-debian-11-r2
-#             imagePullPolicy: IfNotPresent
-#             securityContext:
-#               runAsUser: 1001
-#             env:
-#             - name: BITNAMI_DEBUG
-#               value: 'false'
-#             - name: POSTGRESQL_PORT_NUMBER
-#               value: '5432'
-#             - name: POSTGRESQL_VOLUME_DIR
-#               value: /bitnami/postgresql
-#             - name: PGDATA
-#               value: /bitnami/postgresql/data
-#             - name: POSTGRES_USER
-#               value: taiga
-#             - name: POSTGRES_POSTGRES_PASSWORD
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-postgresql
-#                   key: postgres-password
-#             - name: POSTGRES_PASSWORD
-#               valueFrom:
-#                 secretKeyRef:
-#                   name: taiga-postgresql
-#                   key: password
-#             - name: POSTGRES_DB
-#               value: taiga
-#             - name: POSTGRESQL_ENABLE_LDAP
-#               value: no
-#             - name: POSTGRESQL_ENABLE_TLS
-#               value: no
-#             - name: POSTGRESQL_LOG_HOSTNAME
-#               value: 'false'
-#             - name: POSTGRESQL_LOG_CONNECTIONS
-#               value: 'false'
-#             - name: POSTGRESQL_LOG_DISCONNECTIONS
-#               value: 'false'
-#             - name: POSTGRESQL_PGAUDIT_LOG_CATALOG
-#               value: off
-#             - name: POSTGRESQL_CLIENT_MIN_MESSAGES
-#               value: error
-#             - name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
-#               value: pgaudit
-#             ports:
-#             - name: tcp-postgresql
-#               containerPort: 5432
-#             livenessProbe:
-#               failureThreshold: 6
-#               initialDelaySeconds: 30
-#               periodSeconds: 10
-#               successThreshold: 1
-#               timeoutSeconds: 5
-#               exec:
-#                 command:
-#                 - /bin/sh
-#                 - -c
-#                 - exec pg_isready -U "taiga" -d "dbname=taiga" -h 127.0.0.1 -p 5432
-#             readinessProbe:
-#               failureThreshold: 6
-#               initialDelaySeconds: 5
-#               periodSeconds: 10
-#               successThreshold: 1
-#               timeoutSeconds: 5
-#               exec:
-#                 command:
-#                 - /bin/sh
-#                 - -c
-#                 - -e
-#                 - |
-#                   exec pg_isready -U "taiga" -d "dbname=taiga" -h 127.0.0.1 -p 5432
-#                   [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
-#             resources:
-#               limits: {}
-#               requests:
-#                 cpu: 250m
-#                 memory: 256Mi
-#             volumeMounts:
-#             - name: dshm
-#               mountPath: /dev/shm
-#             - name: data
-#               mountPath: /bitnami/postgresql
-#           volumes:
-#           - name: dshm
-#             emptyDir:
-#               medium: Memory
-#       volumeClaimTemplates:
-#       - metadata:
-#           name: data
-#         spec:
-#           accessModes:
-#           - ReadWriteOnce
-#           resources:
-#             requests:
-#               storage: 8Gi
-# EOF
-# }
-