Remove secure_proxy_ssl_header logic

According to nova doc, secure_proxy_ssl_header has been deprecated and
has no effect [1]. Since these variables are not used for other purpose
we drop them.

[1] https://docs.openstack.org/nova/latest/configuration/config.html#oslo_middleware.secure_proxy_ssl_header

Change-Id: Ibc3ac4f0f3fb038463748f8c1608fa475374cf67

defaults/main.yml

@@ -291,12 +291,6 @@ nova_vencrypt_ca_certs: "/etc/pki/nova-novncproxy/ca-cert.pem"
 # it is possible to remove the none option from the list
 nova_vencrypt_auth_scheme: "vencrypt,none"
 
-# Set to true when terminating SSL/TLS at a load balancer
-nova_external_ssl: "{{ openstack_external_ssl | default(False) }}"
-
-# External SSL forwarding proto
-nova_secure_proxy_ssl_header: HTTP_X_FORWARDED_PROTO
-
 ## Nova global config
 nova_image_cache_manager_interval: 0
 

releasenotes/notes/nova_ssl_header-c5d95a629a0a1df5.yaml

@@ -0,0 +1,6 @@
+---
+deprecations:
+  - |
+    Variables ``nova_external_ssl`` and ``nova_secure_proxy_ssl_header``
+    have been removed since secure_proxy_ssl_header option from nova.conf
+    they controlled has been deprecated and has no effect.

templates/nova.conf.j2

@@ -279,9 +279,7 @@ insecure = {{ keystone_service_adminuri_insecure | bool }}
 
 [wsgi]
 api_paste_config = /etc/nova/api-paste.ini
-{% if nova_external_ssl | bool %}
-secure_proxy_ssl_header = {{ nova_secure_proxy_ssl_header }}
-{% endif %}
+
 
 [api]
 use_forwarded_for = {{ nova_network_services[nova_network_type]['use_forwarded_for'] | bool }}