From: Alex Schultz <aschultz@redhat.com>
Date: Wed, 9 Nov 2016 15:22:44 +0000 (-0700)
Subject: Disable password reveal in horizon
X-Git-Tag: opnfv-6.0.0~1404^2
X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=465d91380c8ab85128aee4e36f12425519b412e3;p=apex-tripleo-heat-templates.git

Disable password reveal in horizon

To improve security,  we should disable the password reveal option in
horizon by default. An end user can override this options via their own
custom hiera if they would ultimately like to have this functionality.

Change-Id: Ie88dac5610840eb4b327252b32dc469099ba5f5f
Depends-On: Iacf899d595a2a3c522df1b96ca527731937ec698
Closes-Bug: 1640492
---

diff --git a/puppet/services/horizon.yaml b/puppet/services/horizon.yaml
index 1e08415c..cea0c0b0 100644
--- a/puppet/services/horizon.yaml
+++ b/puppet/services/horizon.yaml
@@ -63,6 +63,7 @@ outputs:
             dport:
               - 80
               - 443
+        horizon::disable_password_reveal: true
         horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
         horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
         horizon::vhost_extra_params: