openstack-ansible-os_keystone/releasenotes/notes
Bjoern Teipel e8d0f0db5f
Remove X-Forwarded-Proto header in apache
Ther X-Forward-Proto header should be added on the external loadbalancer only,
otherwise admin, internal endpoint requests to keystone may suddenly flip to
HTTPS while HTTP is configured in default.
This also affects request to local keystone API calls for monitoring etc.

Closes-Bug: #2068039
Change-Id: I4cfef16841f95328d4ae7e4666f5a8fac053440b
2024-06-20 13:06:57 -05:00
..
.placeholder Add reno scaffolding for release notes management 2016-04-09 19:20:42 +01:00
add-security-headers-e46c205b42b9598b.yaml Add security headers to web accessable services. 2017-10-22 03:01:16 +00:00
app-credentials-709e7ae0573b4955.yaml Add application credentials as a default authentication method 2019-10-01 21:28:48 +01:00
cache_backend-3ac67f78fa111445.yaml Improve way of cache backend selection 2022-09-23 10:49:09 +02:00
capping_keystone_workers-e284a47fc4dcea38.yaml Cap the number of worker threads 2017-02-23 05:15:53 -05:00
db-pooling-f078d5d7668377b2.yaml Database connection pooling improvements 2021-12-03 16:54:38 +01:00
db-pooling-old-vars-6ad7284cd8583218.yaml Remove legacy db pooling variables 2022-02-01 04:12:55 -05:00
deprecated-memcached-and-backend-caching-vars-88c48117b232b37e.yaml Fix memcache caching w/ multiple cache servers 2018-01-29 09:40:12 +00:00
extra-headers-e54a672d3a78dd89.yaml Add extra headers for Keystone 2017-08-17 14:44:44 -05:00
git-sourced-config-change-5b445d3ce26d29c1.yaml Use the venv contents instead of a git source for templates 2018-04-03 09:53:34 +01:00
journal-log-ccbb504642b49611.yaml Fix typo in release note 2018-10-27 16:08:21 +02:00
keystone_drop_nginx-5e7791d22f0be48a.yaml Drop Nginx webserver support 2021-11-22 10:36:35 +00:00
keystone_external_ssl-removal-5d972299f98dcc32.yaml Remove X-Forwarded-Proto header in apache 2024-06-20 13:06:57 -05:00
keystone_init_time_settings-62a1aab4bcfc9779.yaml Rename release note to unique hash 2017-04-28 11:39:09 +01:00
keystone_ssl-4dc7676a36831f85.yaml Rename keystone_ssl to keystone_backend_ssl 2023-04-08 12:53:10 +00:00
keystone_uwsgi_role-b61179e170401e21.yaml Use uwsgi role for keystone 2022-02-09 12:10:18 +02:00
keystone_uwsgi-86116742b67bb944.yaml Add the option to deploy keystone without apache 2022-09-08 14:35:49 -05:00
keystone-endpoints-urls-679748dec6ee6dd7.yaml Bootstrap Keystone with versionless endpoints 2017-05-16 16:29:37 +02:00
keystone-init-config-overrides-1857d5e5bc5a905f.yaml spelling error 2018-12-31 14:52:53 +08:00
keystone-nginx-default-e9d91affd646f379.yaml Switch to using Nginx/uWSGI by default 2017-06-29 16:42:36 +00:00
keystone-oidc-forwarded-proto-92471121e3949428.yaml oidc: fix recognition of x forwarded headers from v2.4.11 2023-09-29 08:24:16 +00:00
keystone-service-setup-host-cd3ee3346af823e6.yaml Execute service setup against a delegated host using Ansible built-in modules 2018-07-13 19:01:59 +00:00
keystone-upstream-config-files-d16f27fc1332ed83.yaml Source template files from git or deploy host 2017-04-04 09:51:09 +00:00
keystone-use-pki-role-d0e905887a5f5bd1.yaml Migrate ssl certificate generation to the PKI role 2022-03-10 09:58:39 +00:00
mod-auth-openidc-102bd253b677f3fc.yaml Federated openid support using auth_mod_openidc 2020-01-31 11:28:38 +00:00
oidc-fix-redirect-uri-5909172a1db5457f.yaml oidc: fix overloading of redirect_uri for cli client 2023-10-20 14:04:31 +01:00
openstack-distribution-packages-d42a426bb57f76b1.yaml Add support for using distribution packages for OpenStack services 2018-05-14 13:13:41 +01:00
os_keystone-centos7-support-0a5d97f81ac42e44.yaml Rename package lists (and related vars) appropriately 2016-08-30 20:05:21 +00:00
os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml Add note on admin_token_auth deprecation 2016-06-15 16:06:23 -07:00
os-keystone-apache-log-format-support-7232177f835222ee.yaml Add support for CustomLog format modification 2016-06-06 17:33:26 +06:00
os-keystone-apache-mpm-tunable-support-1c72f2f99cd502bc.yaml Add support to tune the keystone apache MPM settings 2016-05-04 11:50:06 -04:00
os-keystone-oidc-scope-spelling-fix-3051b95adeb37901.yaml Fix oidc scope misspelling in newer releases 2021-07-22 10:04:54 +00:00
os-keystone-only-install-venv-b766568ee8d40354.yaml Only install to virtual environment 2016-07-06 18:42:09 -07:00
os-keystone-remove-service-user-f2100fa3127c7c2e.yaml Remove keystone service user 2018-10-18 09:56:05 -07:00
os-keystone-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml Allow Uwsgi configuration overrides 2016-09-01 07:20:12 +01:00
os-keystone-zero-downtime-upgrade-5f19ab84183490b9.yaml Replacing the HTTP protocal with HTTPS in jobs.yaml. 2018-11-14 00:47:31 +08:00
oslo-messaging-separate-backends-e68c98d4f9d9a79c.yaml releasenotes: oslo-messaging-separate-backends add project name 2018-10-15 16:57:13 +02:00
package-list-name-changes-007cacee4faf8ee6.yaml Rename package lists (and related vars) appropriately 2016-08-30 20:05:21 +00:00
package-state-711a1eb4814311cc.yaml Add ability to change apt/yum package state 2016-08-02 08:49:23 -05:00
primary-container-rebuild-a2f4d7f33d66c843.yaml Rebuild credential-key repo during keystone[0] rebuild 2017-03-04 02:46:39 +00:00
remove_rpc_backend-187132a35223d295.yaml Deprecate rpc_backend option 2017-06-17 11:49:07 +00:00
remove-requirements-git-bdf5691b8390ed7c.yaml Simplify pip options/constraints mechanism 2016-10-19 14:51:03 +00:00
sso-callback-template-cf720ab7f6fc2461.yaml Use correct variable for sso_callback_template deployment 2018-06-05 18:50:14 +01:00
tls12-only-75222cbe8c32ad57.yaml Force force-tlsv12 only 2018-12-06 10:22:23 -06:00
tls_variables-5d7db8f80f158f0d.yaml Adjust default configuration to support TLS v1.3 2022-01-10 13:49:45 +00:00