aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>2015-12-16 18:56:29 +0200
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>2015-12-17 20:02:51 +0200
commit380ce02f8731d46e8a5ebf2fe7d68171ae9890ec (patch)
tree30ca2816fcac6ed8e29fd24f741f928f04635d5e
parent846b4fe0b82f861c3f6c637cdc5d7d9f052e4338 (diff)
Enable X-Forwarded-Proto header for Heat and Nova
Change-Id: Icd666d9988d14ac1e9581f55589bf95243cc7641
-rw-r--r--manifests/loadbalancer.pp5
1 files changed, 5 insertions, 0 deletions
diff --git a/manifests/loadbalancer.pp b/manifests/loadbalancer.pp
index c4a317b..d4122ab 100644
--- a/manifests/loadbalancer.pp
+++ b/manifests/loadbalancer.pp
@@ -579,6 +579,7 @@ class tripleo::loadbalancer (
}
$heat_options = {
'rsprep' => "^Location:\\ http://${public_virtual_ip}(.*) Location:\\ https://${public_virtual_ip}\\1",
+ 'http-request' => ['set-header X-Forwarded-Proto https if { ssl_fc }'],
}
$heat_cw_bind_opts = {
"${heat_api_vip}:8003" => [],
@@ -788,6 +789,10 @@ class tripleo::loadbalancer (
haproxy::listen { 'nova_osapi':
bind => $nova_osapi_bind_opts,
collect_exported => false,
+ mode => 'http',
+ options => {
+ 'http-request' => ['set-header X-Forwarded-Proto https if { ssl_fc }'],
+ },
}
haproxy::balancermember { 'nova_osapi':
listening_service => 'nova_osapi',