[Antelope][Deployment][Horizon] - csrf_failure

[Nilesh]

OS - Ubuntu 22.04
OSA - Antelope 2023.1
SSL/TLS - NO

I was deploying non-ssl deployment, deployment went succefull, but after the installation when trying to access the horizon seeing the following error:-

~~~
Referer checking failed - Referer is insecure while host is secure. Cookies may be turned off. Make sure cookies are enabled and try again.
~~~

~~~
https://pasteboard.co/oRR9sQuOqjft.png
~~~

~~~
Jul 04 17:52:41 ctrl002.ct.lan apache2[5246]: [wsgi:error] [pid 5246:tid 140210059286080] [remote 172.29.231.201:53980] Forbidden (Referer checking failed - Referer is insecure while host is secure.): /auth/login/~
~~~

Thanks,

[Nilesh (cnilesh)]

* faced the same issue on new deployment

https://pasteboard.co/cQNmezbabsnz.png

https://paste.openstack.org/show/b5B8n0KLXBzWicWj0Ttn/

[Nilesh (cnilesh)]

~~~
Referer checking failed - Referer is insecure while host is secure. Cookies may be turned off. Make sure cookies are enabled and try again.
~~~

[Dmitriy Rabotyagov (noonedeadpunk)]

Hey,

I've just spawned a Horizon in an AIO setup on bare metal (without containers) and from stable/2023.1, and I was not able to see the issue.

Can you confirm, that `cat /etc/horizon/local_settings.py | grep SECRET` does return you a secret and not any kind of local file lookup?

[Dmitriy Rabotyagov (noonedeadpunk)]

Ok, I was able to reproduce the issue.

I believe adding `openstack_external_ssl: False` to your user_variables and re-running os-horizon-install.yml should solve the issue.

[Nilesh (cnilesh)]

noonedeadpunk++ Thank you.