openstack
/
puppet-openstack-integration
Code Issues Proposed changes

Merge "Set ssl_verify_client to optional for horizon"

This commit is contained in:
Zuul 2020-10-15 21:36:11 +00:00 committed by Gerrit Code Review
parent 100757a21a 90c1e3e1a7
commit af0859fab5
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
manifests/horizon.pp
View File

@ -29,18 +29,19 @@ class openstack_integration::horizon {
}
class { 'horizon':
secret_key => 'big_secret',
allowed_hosts => $::openstack_integration::config::ip_for_url,
listen_ssl => $::openstack_integration::config::ssl,
ssl_redirect => $::openstack_integration::config::ssl,
horizon_cert => $::openstack_integration::params::cert_path,
horizon_key => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
horizon_ca => $::openstack_integration::params::ca_bundle_cert_path,
keystone_url => $::openstack_integration::config::keystone_auth_uri,
log_level => 'DEBUG',
secret_key => 'big_secret',
allowed_hosts => $::openstack_integration::config::ip_for_url,
listen_ssl => $::openstack_integration::config::ssl,
ssl_redirect => $::openstack_integration::config::ssl,
horizon_cert => $::openstack_integration::params::cert_path,
horizon_key => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
horizon_ca => $::openstack_integration::params::ca_bundle_cert_path,
ssl_verify_client => 'optional',
keystone_url => $::openstack_integration::config::keystone_auth_uri,
log_level => 'DEBUG',
# need to disable offline compression due to
# https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1424042
compress_offline => false,
compress_offline => false,
}
horizon::dashboard { 'heat': }