From: Juan Antonio Osorio Robles Date: Thu, 14 Jan 2016 09:01:13 +0000 (+0200) Subject: Enable X-Forwarded-Proto header for keystone admin endpoint X-Git-Tag: opnfv-6.0.0~806^2 X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=eb62088ddd6055177554f873168b2a7db0158a57;p=apex-puppet-tripleo.git Enable X-Forwarded-Proto header for keystone admin endpoint This is useful for handling URLs properly when TLS is enabled. Change-Id: I4defed679cf3b2980dcc4ce1db030c0fdf154bfe --- diff --git a/manifests/loadbalancer.pp b/manifests/loadbalancer.pp index dbfc570..cde069d 100644 --- a/manifests/loadbalancer.pp +++ b/manifests/loadbalancer.pp @@ -768,6 +768,10 @@ class tripleo::loadbalancer ( haproxy::listen { 'keystone_admin': bind => $keystone_admin_bind_opts, collect_exported => false, + mode => 'http', # Needed for http-request option + options => { + 'http-request' => ['set-header X-Forwarded-Proto https if { ssl_fc }'], + }, } haproxy::balancermember { 'keystone_admin': listening_service => 'keystone_admin',