Added secure_proxy_ssl_header to nova.conf
* The HTTP Header that will be used to determine what the
original request protocol scheme was, even if it was hidden
by a SSL termination proxy.
Change-Id: Ide2e0362b7c8fc056bc41c62a227e0537c08f0ba
Related-PROD: PROD-28987
diff --git a/README.rst b/README.rst
index 7bb9581..4a3b7ac 100644
--- a/README.rst
+++ b/README.rst
@@ -1231,6 +1231,18 @@
You can read more about it here:
https://docs.openstack.org/security-guide/databases/database-access-control.html
+Define config option which allows to use nova-api service behind proxy.(Only Mitaka)
+---------------------
+The HTTP Header that will be used to determine what the original request protocol
+scheme was, even if it was hidden by a SSL termination proxy.
+
+ nova:
+ controller:
+ secure_proxy_ssl_header: HTTP_X_FORWARDED_PROTO
+
+You can read more about it here:
+ https://docs.openstack.org/mitaka/config-reference/compute/config-options.html
+
Nova database connection setup:
========
@@ -1278,8 +1290,6 @@
username: nova
password: pswd
-
-
Upgrades
========
diff --git a/nova/files/mitaka/nova-controller.conf.Debian b/nova/files/mitaka/nova-controller.conf.Debian
index fb95af9..e42449e 100644
--- a/nova/files/mitaka/nova-controller.conf.Debian
+++ b/nova/files/mitaka/nova-controller.conf.Debian
@@ -1,5 +1,6 @@
{%- from "nova/map.jinja" import controller with context %}
[DEFAULT]
+secure_proxy_ssl_header = {{ controller.get('secure_proxy_ssl_header', 'HTTP_X_FORWARDED_PROTO') }}
verbose = True
log-dir = /var/log/nova
{%- if controller.debug %}
diff --git a/tests/pillar/control_cluster.sls b/tests/pillar/control_cluster.sls
index cc88269..beccee3 100644
--- a/tests/pillar/control_cluster.sls
+++ b/tests/pillar/control_cluster.sls
@@ -13,6 +13,7 @@
disk_allocation_ratio: 1.0
workers: 8
instance_build_timeout: 600
+ secure_proxy_ssl_header: HTTP_X_FORWARDED_PROTO
bind:
private_address: 127.0.0.1
public_address: 127.0.0.1
diff --git a/tests/pillar/control_single.sls b/tests/pillar/control_single.sls
index 467d4b0..42300f4 100644
--- a/tests/pillar/control_single.sls
+++ b/tests/pillar/control_single.sls
@@ -26,6 +26,7 @@
disk_allocation_ratio: 1.0
workers: 8
nfs_mount_options: 'vers=3,lookupcache=pos'
+ secure_proxy_ssl_header: HTTP_X_FORWARDED_PROTO
bind:
private_address: 127.0.0.1
public_address: 127.0.0.1