Switch horizon to direct upload mode to glance
This patch switches horizon to direct upload mode to glance.
It will prevent horizon from caching user image on proxy node.
Disable caching for glance site on proxy node.
Enable CORS in glance with allowed origins set to horizon URL.
Parametrize horizon proxy settins:
* horizon_public_host
* horizon_public_port
* horizon_public_protocol
Related-Prod: PROD-24536
Change-Id: Ie2ff8b58c352584d076e0c85bd033dc8fe52ee89
diff --git a/defaults/openstack/init.yml b/defaults/openstack/init.yml
index 1c864e5..eedc587 100644
--- a/defaults/openstack/init.yml
+++ b/defaults/openstack/init.yml
@@ -18,6 +18,8 @@
# Glance
glance_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
glance_memcache_secret_key: ''
+ # Allow CORS from horizon, needed for direct upload
+ glance_cors_allowed_origin: '${_param:horizon_public_protocol}://${_param:horizon_public_host}'
# Heat
heat_memcache_security_enabled: ${_param:openstack_memcache_security_enabled}
heat_memcache_secret_key: ''
@@ -44,4 +46,8 @@
apache_mods_status_status: 'disabled'
# Horizon
# 'direct' mode will require cors on glance side to be enabled.
- horizon_images_upload_mode: 'legacy'
+ horizon_images_upload_mode: 'direct'
+ # TODO (vsaineko): switch to openstack_cluster_public_host
+ horizon_public_host: ${_param:cluster_public_host}
+ horizon_public_port: 443
+ horizon_public_protocol: https