openstack/kolla-ansible
Code Issues Proposed changes

Fix secure_proxy_ssl_header option in nova

Browse Source 
Option "secure_proxy_ssl_header" from group "DEFAULT"  has been
deprecated in the N release and has been removed in the O release.

Use wsgi.secure_proxy_ssl_header configuration instead.

see
https://docs.openstack.org/ocata/config-reference/compute/config-options.html
https://docs.openstack.org/newton/config-reference/tables/conf-changes/nova.html
https://docs.openstack.org/mitaka/config-reference/compute/config-options.html

Change-Id: Icf3eea66f4ac281641ba22e8194aa113b57f6ce8
This commit is contained in:
shaofeng_cheng 2017-03-31 14:41:06 +08:00
parent bed0357931
commit b67cd3f7a9
1 changed files with 3 additions and 4 deletions

7
ansible/roles/nova/templates/nova.conf.j2

@ -6,10 +6,6 @@ log_dir = /var/log/kolla/nova
state_path = /var/lib/nova
{% if kolla_enable_tls_external | bool %}
secure_proxy_ssl_header = X-Forwarded-Proto
{% endif %}
osapi_compute_listen = {{ api_interface_address }}
osapi_compute_listen_port = {{ nova_api_port }}
osapi_compute_workers = {{ openstack_service_workers }}
@ -221,6 +217,9 @@ debug = {{ nova_logging_debug }}
[wsgi]
api_paste_config = /etc/nova/api-paste.ini
{% if kolla_enable_tls_external | bool %}
secure_proxy_ssl_header = X-Forwarded-Proto
{% endif %}
[scheduler]
max_attempts = 10