From d6df3c61c213b46e3b3fe0b8357a1222f0f79fed Mon Sep 17 00:00:00 2001
From: Matthias Runge <mrunge@redhat.com>
Date: Tue, 30 Aug 2016 09:56:54 +0200
Subject: Clarify horizon allowed hosts setting

Horizon allowed hosts should name the IP addresses/
DNS names (short/long) the Horizon node is listening to.
Allowed hosts is used for header checks and is a security
mechanism.

Change-Id: I81c96357f969a1a436eecd35eb178579159bc719
---
 puppet/services/horizon.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'puppet/services/horizon.yaml')

diff --git a/puppet/services/horizon.yaml b/puppet/services/horizon.yaml
index c5d96819..bdb171ae 100644
--- a/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@ -20,7 +20,8 @@ parameters:
     type: json
   HorizonAllowedHosts:
     default: '*'
-    description: A list of IP/Hostname allowed to connect to horizon
+    description: A list of IP/Hostname for the server Horizonis running on.
+                 Used for header checks.
     type: comma_delimited_list
   NeutronMechanismDrivers:
     default: 'openvswitch'
-- 
cgit 1.2.3-korg