Disable password reveal in horizon
authorAlex Schultz <aschultz@redhat.com>
Wed, 9 Nov 2016 15:22:44 +0000 (08:22 -0700)
committerAlex Schultz <aschultz@redhat.com>
Wed, 9 Nov 2016 15:22:44 +0000 (08:22 -0700)
To improve security,  we should disable the password reveal option in
horizon by default. An end user can override this options via their own
custom hiera if they would ultimately like to have this functionality.

Change-Id: Ie88dac5610840eb4b327252b32dc469099ba5f5f
Depends-On: Iacf899d595a2a3c522df1b96ca527731937ec698
Closes-Bug: 1640492

puppet/services/horizon.yaml

index 1e08415..cea0c0b 100644 (file)
@@ -63,6 +63,7 @@ outputs:
             dport:
               - 80
               - 443
+        horizon::disable_password_reveal: true
         horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
         horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
         horizon::vhost_extra_params: