From 10c699dbb0619aa41c7321ac28c43fadd5bbbcfc Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <tkajinam@redhat.com>
Date: Thu, 27 Jul 2023 10:36:09 +0900
Subject: [PATCH] Enforce correct choice for [DEFAULT] enabled_ssl_apis

The [DEFAULT] enabled_ssl_apis option is supposed to contain the subset
(or the same set) of the [DEFULT] enabled_apis option.

Because we accept only the correct values for enabled_apis, we can do
the same for enabled_ssl_apis. This would allow users to notice any
wrong values which were ignored previously.

Change-Id: Ibba8f3ea307df3e81e18c3a75361e27a0f52701d
---
 nova/conf/service.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nova/conf/service.py b/nova/conf/service.py
index e10f3a049264..5ae4993e5c6d 100644
--- a/nova/conf/service.py
+++ b/nova/conf/service.py
@@ -86,6 +86,8 @@ Possible Values:
                 default=['osapi_compute', 'metadata'],
                 help="List of APIs to be enabled by default."),
     cfg.ListOpt('enabled_ssl_apis',
+                item_type=cfg.types.String(choices=['osapi_compute',
+                                                    'metadata']),
                 default=[],
                 help="""
 List of APIs with enabled SSL.