Horizon SSL handshake errors with apache

Added in "WSGIApplicationGroup %{GLOBAL}" to fix an issue
where horizon will have ssl handshake issues with various
SSL openstack endpoints.

Change-Id: Idd10380f1b6e6ef0ee4a4cb84317aa12131b77c4
Closes-Bug: #1700176
Closes-Bug: #1708655
(cherry picked from commit 588b9f83c7)

manifests/params.pp

@@ -6,6 +6,7 @@ class horizon::params {
   $logdir                 = '/var/log/horizon'
   $django_wsgi            = '/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi'
   $manage_py              = '/usr/share/openstack-dashboard/manage.py'
+  $wsgi_application_group = '%{GLOBAL}'
 
   case $::osfamily {
     'RedHat': {

manifests/wsgi/apache.pp

@@ -227,6 +227,7 @@ class horizon::wsgi::apache (
     },
     wsgi_import_script     => $::horizon::params::django_wsgi,
     wsgi_process_group     => $::horizon::params::wsgi_group,
+    wsgi_application_group => $::horizon::params::wsgi_application_group,
     redirectmatch_status   => $redirect_type,
   }
 

releasenotes/notes/fix_ssl_handshake_errors-aece1e80e78820a2.yaml

@@ -0,0 +1,4 @@
+---
+issues:
+  - an issue with horizon having ssl handshake issues under apache with ssl endpoints.
+    Fix adds in WSGIApplicationGroup apache directive.

spec/classes/horizon_wsgi_apache_spec.rb

@@ -45,6 +45,7 @@ describe 'horizon::wsgi::apache' do
           'wsgi_script_aliases'    => { platforms_params[:root_url] => '/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' },
           'wsgi_process_group'     => platforms_params[:wsgi_group],
           'wsgi_daemon_process'    => platforms_params[:wsgi_group],
+          'wsgi_application_group' => '%{GLOBAL}',
           'wsgi_daemon_process_options' => { 'processes' => params[:wsgi_processes], 'threads' => params[:wsgi_threads], 'user' => platforms_params[:unix_user], 'group' => platforms_params[:unix_group] }
          )
       end
@@ -81,6 +82,7 @@ describe 'horizon::wsgi::apache' do
           'wsgi_script_aliases'    => { platforms_params[:root_url] => '/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' },
           'wsgi_process_group'     => platforms_params[:wsgi_group],
           'wsgi_daemon_process'    => platforms_params[:wsgi_group],
+          'wsgi_application_group' => '%{GLOBAL}',
           'wsgi_daemon_process_options' => { 'processes' => params[:wsgi_processes], 'threads' => params[:wsgi_threads], 'user' => platforms_params[:unix_user], 'group' => platforms_params[:unix_group] }
          )
       end
@@ -118,6 +120,7 @@ describe 'horizon::wsgi::apache' do
           'redirectmatch_dest'     => platforms_params[:root_url],
           'wsgi_process_group'     => 'horizon-ssl',
           'wsgi_daemon_process'    => 'horizon-ssl',
+          'wsgi_application_group' => '%{GLOBAL}',
           'wsgi_script_aliases'  => { platforms_params[:root_url] => '/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' },
         )}
 
@@ -135,6 +138,7 @@ describe 'horizon::wsgi::apache' do
           'redirectmatch_dest'     => 'https://some.host.tld',
           'wsgi_process_group'     => platforms_params[:wsgi_group],
           'wsgi_daemon_process'    => platforms_params[:wsgi_group],
+          'wsgi_application_group' => '%{GLOBAL}',
           'wsgi_script_aliases'    => { platforms_params[:root_url] => '/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' },
         )}
       end