openstack
/
tripleo-heat-templates
Code Issues Proposed changes

use keystone public endpoint in horizon 

the horizon::keystone_url is ultimately used to set the
OPENSTACK_KEYSTONE_URL setting in Horizon's local_settings, and this
is used in browser redirects when utilizing web SSO. In many cases,
the keystone internal endpoint would be inaccessible to browser
clients, so we should use the public endpoint here.

Change-Id: I5b3c0935b1a5c38704e748770b7bac52d674a637
This commit is contained in:
Lars Kellogg-Stedman 2018-06-15 10:44:36 -04:00
parent b7dcbd8da7
commit 43a39d4b0d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
puppet/services/horizon.yaml
View File

@ -121,7 +121,7 @@ outputs:
"%{hiera('$NETWORK')}"
params:
$NETWORK: {get_param: [ServiceNetMap, HorizonNetwork]}
horizon::keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
horizon::keystone_url: {get_param: [EndpointMap, KeystonePublic, uri_no_suffix]}
horizon::password_validator: {get_param: [HorizonPasswordValidator]}
horizon::password_validator_help: {get_param: [HorizonPasswordValidatorHelp]}
horizon::secret_key: