OpenStack Identity (keystone)

  1. Bug #1590608
  2. Comment #70

Comment 70 for bug 1590608

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to senlin (master)

Reviewed: https://review.openstack.org/384482
Committed: https://git.openstack.org/cgit/openstack/senlin/commit/?id=8542ba8457d93a14e22f7c7b771d4ac629b77142
Submitter: Jenkins
Branch: master

commit 8542ba8457d93a14e22f7c7b771d4ac629b77142
Author: pallavi <email address hidden>
Date: Mon Oct 10 18:16:09 2016 +0530

    Add http_proxy_to_wsgi to api-paste

    This sets up the HTTPProxyToWSGI middleware in front of senlin-api. The
    purpose of this middleware is to set up the request URL correctly in
    the case there is a proxy (For instance, a loadbalancer such as HAProxy)
    in front of senlin-api.

    So, when TLS connections are terminated at the proxy, and one tries to
    get the versions from the '/' resource from senlin-api, one will notice
    that the protocol is incorrect; It will show 'http' instead of 'https'.
    So this middleware handles such cases, thus helping Keystone discovery
    work correctly.

    The HTTPProxyToWSGI is off by default and needs to be enabled via a
    configuration value.

    Change-Id: Ia65ecdcc07084514884258661f840e6edcb200a4
    Closes-Bug: #1590608
    Co-Authored-By: pallavi <email address hidden>