fix

apps/taiga/taiga_ConfigMap.tf

@@ -27,7 +27,6 @@ resource "kubectl_manifest" "cm_env_back" {
       ENABLE_TRELLO_IMPORTER: "False"
       OPENID_CONNECT_SCOPES: "openid email profile"
       GITLAB_URL: "${module.oauth2.sso_configuration_url}"
-      REQUESTS_CA_BUNDLE: /etc/ssl/certs/ca-certificates.crt
 EOF
 }
 
@@ -70,13 +69,12 @@ resource "kubectl_manifest" "cm_env_front" {
       ENABLE_TELEMETRY: "false"
       PUBLIC_REGISTER_ENABLED: "true"
       ENABLE_GITHUB_AUTH: "false"
-      ENABLE_GITLAB_AUTH: "true"
+      ENABLE_GITLAB_AUTH: "false"
+      ENABLE_OIDC_AUTH: "true"
       ENABLE_SLACK: "false"
       ENABLE_GITHUB_IMPORTER: "false"
       ENABLE_JIRA_IMPORTER: "false"
       ENABLE_TRELLO_IMPORTER: "false"
-      OPENID_CONNECT_SCOPES: "openid email profile"
-      GITLAB_URL: "${module.oauth2.sso_configuration_url}"
 EOF
 }
 
@@ -94,40 +92,13 @@ resource "kubectl_manifest" "cm_scripts" {
       labels: ${jsonencode(local.postcfg_all_labels)}
       namespace: ${var.namespace}
     data:
-      back_entrypoint.sh: |-
+      certs.sh: |-
         #!/usr/bin/env bash
-        set -euo pipefail
-        python manage.py migrate
-        python manage.py loaddata initial_project_templates
         if [ -f /etc/local-ca/ca.crt ];then
-          cp /etc/local-ca/ca.crt /usr/local/share/ca-certificates/
-          /usr/sbin/update-ca-certificates
+          export REQUESTS_CA_BUNDLE=/etc/local-ca/ca.crt
+        else
+          export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
         fi
-        chown -R taiga:taiga /taiga-back
-        sed -i "s/taiga-events-rabbitmq/{ os.getenv('TAIGA_EVENTS_RABBITMQ_HOST') }/;s/taiga-async-rabbitmq/{ os.getenv('TAIGA_ASYNC_RABBITMQ_HOST') }/" /taiga-back/settings/config.py
-        echo Starting Taiga API...
-        exec gosu taiga gunicorn taiga.wsgi:application \
-            --name taiga_api \
-            --bind 0.0.0.0:8000 \
-            --workers 3 \
-            --worker-tmp-dir /dev/shm \
-            --log-level=info \
-            --access-logfile - \
-            "$@"
-      async_entrypoint.sh: |-
-        #!/usr/bin/env bash
-        set -euo pipefail
-        chown -R taiga:taiga /taiga-back
-        if [ -f /etc/local-ca/ca.crt ];then
-          cp /etc/local-ca/ca.crt /usr/local/share/ca-certificates/
-          /usr/sbin/update-ca-certificates
-        fi
-        sed -i "s/taiga-events-rabbitmq/{ os.getenv('TAIGA_EVENTS_RABBITMQ_HOST') }/;s/taiga-async-rabbitmq/{ os.getenv('TAIGA_ASYNC_RABBITMQ_HOST') }/" /taiga-back/settings/config.py
-        echo Starting Celery...
-        exec gosu taiga celery -A taiga.celery worker -B \
-            --concurrency 4 \
-            -l INFO \
-            "$@"
       postconfig.py: |-
         #!/usr/bin/env python
         import time