diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-01-14 11:01:13 +0200 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-01-14 11:01:13 +0200 |
| commit | eb62088ddd6055177554f873168b2a7db0158a57 (patch) | |
| tree | 0c55b3c641f373c011112eb7e22eb93bbbe6d155 /manifests/loadbalancer.pp | |
| parent | b4ec7f7f47a356fc622c73b0822fa18e67a4519a (diff) | |
Enable X-Forwarded-Proto header for keystone admin endpoint
This is useful for handling URLs properly when TLS is enabled.
Change-Id: I4defed679cf3b2980dcc4ce1db030c0fdf154bfe
Diffstat (limited to 'manifests/loadbalancer.pp')
| -rw-r--r-- | manifests/loadbalancer.pp | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/manifests/loadbalancer.pp b/manifests/loadbalancer.pp index dbfc570..cde069d 100644 --- a/manifests/loadbalancer.pp +++ b/manifests/loadbalancer.pp @@ -768,6 +768,10 @@ class tripleo::loadbalancer ( haproxy::listen { 'keystone_admin': bind => $keystone_admin_bind_opts, collect_exported => false, + mode => 'http', # Needed for http-request option + options => { + 'http-request' => ['set-header X-Forwarded-Proto https if { ssl_fc }'], + }, } haproxy::balancermember { 'keystone_admin': listening_service => 'keystone_admin', |