---
fixes:
  - |
    Add an option to set OIDCX forwarded headers in keystone. This is useful
    when keystone is behind a proxy and the proxy is adding headers to the
    request. The new option is ``keystone_federation_oidc_forwarded_headers``.
    The default value is empty, to preserve the current behavior.
    `LP#2080402 <https://bugs.launchpad.net/bugs/2080402>`__