openstack/puppet-openstack-integration
Code Issues Proposed changes

Set ssl_verify_client to optional for horizon

Browse Source 
Depends-On: https://review.opendev.org/#/c/758032/
Change-Id: I8b0be54f2c03cbbc51423cebcd96e8be58e2ef1b
This commit is contained in:
Tobias Urdin 2020-10-14 14:18:27 +02:00
parent cff4d9f2b2
commit 90c1e3e1a7
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
manifests/horizon.pp
View File

@ -29,18 +29,19 @@ class openstack_integration::horizon {
}
class { 'horizon':
secret_key => 'big_secret',
allowed_hosts => $::openstack_integration::config::ip_for_url,
listen_ssl => $::openstack_integration::config::ssl,
ssl_redirect => $::openstack_integration::config::ssl,
horizon_cert => $::openstack_integration::params::cert_path,
horizon_key => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
horizon_ca => $::openstack_integration::params::ca_bundle_cert_path,
keystone_url => $::openstack_integration::config::keystone_auth_uri,
log_level => 'DEBUG',
secret_key => 'big_secret',
allowed_hosts => $::openstack_integration::config::ip_for_url,
listen_ssl => $::openstack_integration::config::ssl,
ssl_redirect => $::openstack_integration::config::ssl,
horizon_cert => $::openstack_integration::params::cert_path,
horizon_key => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
horizon_ca => $::openstack_integration::params::ca_bundle_cert_path,
ssl_verify_client => 'optional',
keystone_url => $::openstack_integration::config::keystone_auth_uri,
log_level => 'DEBUG',
# need to disable offline compression due to
# https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1424042
compress_offline => false,
compress_offline => false,
}
horizon::dashboard { 'heat': }