Files
docs/doc/source/security/kubernetes/configure-http-and-https-ports-for-horizon-using-the-cli.rest
Suzana Fernandes 0bf77eef8e Update User Management Section in the SECURITY guide
Change-Id: I753b0cd3912d2f9bc53c50906c05e90f2443d3f0
Signed-off-by: Suzana Fernandes <Suzana.Fernandes@windriver.com>
2025-10-15 17:30:18 +00:00

74 lines
2.6 KiB
ReStructuredText

.. luj1551986512461
.. _configure-http-and-https-ports-for-horizon-using-the-cli:
Configure HTTP and HTTPS Ports for Horizon Using the CLI
--------------------------------------------------------
Horizon is set up to use secure HTTPS connections by default, and regular HTTP
is disabled. If needed for backwards compatibility reasons, you can turn HTTP
back on, although it is not recommended.
You can configure the **HTTP / HTTPS** ports for accessing the Horizon Web
interface using the CLI.
To access Horizon, use **http://<external OAM IP\>:8080**. By default, the
ports are **HTTP=8080**, and **HTTPS=8443**.
.. rubric:: |prereq|
You can configure **HTTP / HTTPS** ports only when all hosts are unlocked
and enabled.
.. rubric:: |context|
Use the system :command:`service-parameter-list --service=http` command to
list the configured **HTTP**, and **HTTPS** ports.
.. code-block:: none
~(keystone_admin)]$ system service-parameter-list --service http
+---------+----------+---------+------------+-------+------------+--------+
| uuid | service | section | name | value |personality |Resource|
+---------+----------+---------+------------+-------+------------+--------+
| 4fc7... | http | config | http_port | 8080 | None |None |
| 9618... | http | config | https_port | 8443 | None |None |
+---------+----------+---------+------------+-------+-------------+-------+
.. rubric:: |proc|
#. Use the :command:`system service-parameter-modify` command to configure
a different port for **HTTP**, and **HTTPS**. For example,
.. code-block:: none
~(keystone_admin)]$ system service-parameter-modify http config http_port=8090
~(keystone_admin)]$ system service-parameter-modify http config https_port=9443
#. Apply the service parameter change.
.. code-block:: none
~(keystone_admin)]$ system service-parameter-apply http
Applying http service parameters
.. note::
Do not use ports used by other services on the platform, OAM and
management interfaces on the controllers, or in custom
applications. For more information, see, |sec-doc|: :ref:`Default
Firewall Rules <security-default-firewall-rules>`.
If you plan to run |prod-os|, do not reset the ports to 80/443, as
these ports may be used by containerized OpenStack, by default.
.. rubric:: |postreq|
A configuration out-of-date alarm is generated for each host. Wait for the
configuration to be automatically applied to all nodes and the alarms to be
cleared on all hosts before performing maintenance operations, such as
rebooting or locking/unlocking a host.