5e8c966a40
currently it is impossible to use ironic-api for both internal and public api at the same time when both of those are using (ssl terminating) proxies as there's only one config option to override the resource url's in responses ([api]public_endpoint). This patch adds the http_proxy_to_wsgi middleware from oslo.middleware to the ironic API service, which, with properly configured proxies, makes the choice of correct URL automatic, and thus makes such scenario possible. As this middleware may potentially not properly handle some endpoint URL schemas, leave the api.public_endpoint option as a backup, but it will be ignored when proxy headers parsing is enabled. Change-Id: I3ce6b0726b479c2835f8777957b2cb12d8098aec Story: #2006303 Task: #36019
25 lines
734 B
Plaintext
25 lines
734 B
Plaintext
[DEFAULT]
|
|
output_file = etc/ironic/ironic.conf.sample
|
|
wrap_width = 62
|
|
namespace = ironic
|
|
namespace = ironic_lib.disk_utils
|
|
namespace = ironic_lib.disk_partitioner
|
|
namespace = ironic_lib.exception
|
|
namespace = ironic_lib.mdns
|
|
namespace = ironic_lib.metrics
|
|
namespace = ironic_lib.metrics_statsd
|
|
namespace = ironic_lib.utils
|
|
namespace = oslo.db
|
|
namespace = oslo.messaging
|
|
namespace = oslo.middleware.cors
|
|
namespace = oslo.middleware.healthcheck
|
|
namespace = oslo.middleware.http_proxy_to_wsgi
|
|
namespace = oslo.concurrency
|
|
namespace = oslo.policy
|
|
namespace = oslo.log
|
|
namespace = oslo.service.service
|
|
namespace = oslo.service.periodic_task
|
|
namespace = oslo.service.sslutils
|
|
namespace = osprofiler
|
|
namespace = keystonemiddleware.auth_token
|