From: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Date: Wed, 1 Jun 2016 10:58:40 +0000 (+0300)
Subject: Enable proxy header handling for nova
X-Git-Tag: opnfv-6.0.0~1968
X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=c79c261547b1ec8f32c088ab5d4d71af5938c20b;p=apex-tripleo-heat-templates.git

Enable proxy header handling for nova

Nova is using http_proxy_to_wsgi middleware[1][2]. This parses the
headers provided by the proxy, and helps us properly use TLS for
keystone discovery. There was an option introduced in this middleware
to have it disabled by default, and this change enables it.

[1] Ia78f73e96585ab33a379a0b0be6d9682f7fbd810
[2] I808469f24066d382decf55b9dad5312d6e068da7

Change-Id: I3918f24c0c87cb626a28645b46e3df6360d5f924
---

diff --git a/puppet/hieradata/controller.yaml b/puppet/hieradata/controller.yaml
index e07c84c6..b428d544 100644
--- a/puppet/hieradata/controller.yaml
+++ b/puppet/hieradata/controller.yaml
@@ -114,6 +114,7 @@ neutron::server::sync_db: true
 nova::notify_on_state_change: 'vm_and_task_state'
 nova::api::default_floating_pool: 'public'
 nova::api::sync_db_api: true
+nova::api::enable_proxy_headers_parsing: true
 nova::scheduler::filter::ram_allocation_ratio: '1.0'
 nova::cron::archive_deleted_rows::hour: '*/12'
 nova::cron::archive_deleted_rows::destination: '/dev/null'