summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>2016-06-01 13:58:40 +0300
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>2016-06-01 13:58:40 +0300
commitc79c261547b1ec8f32c088ab5d4d71af5938c20b (patch)
tree8d41b17b2d943ebe26cc61a2767cdd6907f66351
parentccb46a51ac8ca59865c04b681628edbc5a167530 (diff)
Enable proxy header handling for nova
Nova is using http_proxy_to_wsgi middleware[1][2]. This parses the headers provided by the proxy, and helps us properly use TLS for keystone discovery. There was an option introduced in this middleware to have it disabled by default, and this change enables it. [1] Ia78f73e96585ab33a379a0b0be6d9682f7fbd810 [2] I808469f24066d382decf55b9dad5312d6e068da7 Change-Id: I3918f24c0c87cb626a28645b46e3df6360d5f924
-rw-r--r--puppet/hieradata/controller.yaml1
1 files changed, 1 insertions, 0 deletions
diff --git a/puppet/hieradata/controller.yaml b/puppet/hieradata/controller.yaml
index e07c84c6..b428d544 100644
--- a/puppet/hieradata/controller.yaml
+++ b/puppet/hieradata/controller.yaml
@@ -114,6 +114,7 @@ neutron::server::sync_db: true
nova::notify_on_state_change: 'vm_and_task_state'
nova::api::default_floating_pool: 'public'
nova::api::sync_db_api: true
+nova::api::enable_proxy_headers_parsing: true
nova::scheduler::filter::ram_allocation_ratio: '1.0'
nova::cron::archive_deleted_rows::hour: '*/12'
nova::cron::archive_deleted_rows::destination: '/dev/null'