Make Apache vhost respect X-Forwarded-Proto header
Without this, some OpenStack services will return invalid URLs if you are using SSL termination at a proxy in front of the service. Change-Id: I3ee6b5838f4703e3b8b1b6632dd45c94057b2202 Closes-Bug: 1597935
This commit is contained in:
parent
e4253e04b5
commit
b61adb6257
@ -203,6 +203,7 @@ define openstacklib::wsgi::apache (
|
|||||||
docroot_owner => $user,
|
docroot_owner => $user,
|
||||||
docroot_group => $group,
|
docroot_group => $group,
|
||||||
priority => $priority,
|
priority => $priority,
|
||||||
|
setenvif => ['X-Forwarded-Proto https HTTPS=1'],
|
||||||
ssl => $ssl,
|
ssl => $ssl,
|
||||||
ssl_cert => $ssl_cert,
|
ssl_cert => $ssl_cert,
|
||||||
ssl_key => $ssl_key,
|
ssl_key => $ssl_key,
|
||||||
|
@ -82,7 +82,8 @@ describe 'openstacklib::wsgi::apache' do
|
|||||||
'threads' => global_facts[:processorcount],
|
'threads' => global_facts[:processorcount],
|
||||||
},
|
},
|
||||||
'wsgi_application_group' => '%{GLOBAL}',
|
'wsgi_application_group' => '%{GLOBAL}',
|
||||||
'require' => 'File[keystone_wsgi]'
|
'require' => 'File[keystone_wsgi]',
|
||||||
|
'setenvif' => ['X-Forwarded-Proto https HTTPS=1']
|
||||||
)}
|
)}
|
||||||
it { is_expected.to contain_concat("#{platform_parameters[:httpd_ports_file]}") }
|
it { is_expected.to contain_concat("#{platform_parameters[:httpd_ports_file]}") }
|
||||||
end
|
end
|
||||||
|
Loading…
Reference in New Issue
Block a user