fix

apps/taiga/taiga_workload.tf

@@ -187,7 +187,7 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
       namespace: ${var.namespace}
       annotations:
         configmap.reloader.stakater.com/reload: "${kubectl_manifest.cm_env_back.name},${kubectl_manifest.cm_scripts.name},${kubectl_manifest.cm_nginx.name}"
-        secret.reloader.stakater.com/reload: "${kubectl_manifest.rabbit_user_secret.name},${module.oauth2.secret_client_id_name},${var.instance}-${var.component}-pg-app,${kubectl_manifest.secret.name}"
+        secret.reloader.stakater.com/reload: "${kubectl_manifest.rabbit_user_secret.name},${module.oauth2.secret_client_id_name},${module.ingress.secret_name},${var.instance}-${var.component}-pg-app,${kubectl_manifest.secret.name}"
     spec:
       selector:
         matchLabels: ${jsonencode(local.back_labels)}
@@ -249,6 +249,9 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
             - name: data
               mountPath: /taiga-back/media
               subPath: media
+            - name: certs
+              mountPath: /etc/local-ca
+              readOnly: true
             livenessProbe:
               httpGet:
                 path: /api/v1/
@@ -302,6 +305,8 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
             - name: data
               mountPath: /taiga-back/media
               subPath: media
+            - name: certs
+              mountPath: /opt/certs
           - name: nginx
             image: "${var.images.nginx.registry}/${var.images.nginx.repository}:${var.images.nginx.tag}"
             imagePullPolicy: ${var.images.nginx.pull_policy}
@@ -318,6 +323,10 @@ resource "kubectl_manifest" "Deployment_taiga-back" {
             - name: taiga-conf
               mountPath: /etc/nginx/conf.d/
           volumes:
+          - name: certs
+            secret:
+              secretName: "${module.ingress.secret_name}"
+              defaultMode: 0444
           - name: scripts
             configMap:
               name: ${kubectl_manifest.cm_scripts.name}