From 465d91380c8ab85128aee4e36f12425519b412e3 Mon Sep 17 00:00:00 2001
From: Alex Schultz <aschultz@redhat.com>
Date: Wed, 9 Nov 2016 08:22:44 -0700
Subject: Disable password reveal in horizon

To improve security,  we should disable the password reveal option in
horizon by default. An end user can override this options via their own
custom hiera if they would ultimately like to have this functionality.

Change-Id: Ie88dac5610840eb4b327252b32dc469099ba5f5f
Depends-On: Iacf899d595a2a3c522df1b96ca527731937ec698
Closes-Bug: 1640492
---
 puppet/services/horizon.yaml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'puppet')

diff --git a/puppet/services/horizon.yaml b/puppet/services/horizon.yaml
index 1e08415c..cea0c0b0 100644
--- a/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@ -63,6 +63,7 @@ outputs:
             dport:
               - 80
               - 443
+        horizon::disable_password_reveal: true
         horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
         horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
         horizon::vhost_extra_params:
-- 
cgit 1.2.3-korg