openstack
/
tripleo-quickstart
Code Issues Proposed changes

update tripleo_ui_secure_access to true by default 

The TripleO-UI now works quite well with security
enabled for the TripleO-UI.  Turning it on by default.

Related-Bug: #1722674
Depends-On: Ibc1652a63da4fb4c9ccf004f77aa18a3d81b490d
Change-Id: I3d3412e2299ea70321785d57ec905bff569c8ab8
This commit is contained in:
Wes Hayutin 2017-10-24 12:43:40 -04:00
parent d92ea2c7aa
commit b0d042e53c
2 changed files with 6 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/environments/default_libvirt.yml
View File

@ -5,7 +5,7 @@ environment_type: libvirt
enable_port_forward_for_tripleo_ui: true
# Setup for SSL access to the tripleo-ui.
# Please consult the tripleo-quickstart documentation prior to enabling this option
tripleo_ui_secure_access: false
tripleo_ui_secure_access: true
# Note this needs to be false for freeIPA
# https://bugs.launchpad.net/tripleo/+bug/1709333

14
doc/source/accessing-undercloud.rst
View File

@ -54,7 +54,7 @@ Access via the TripleO-UI
-------------------------
With baremetal and ovb based deployments you can access the TripleO-UI via the
undercloud's public ip address http://<virthost>:3000
undercloud's public ip address https://<virthost>
Deploying TripleO in a libvirt based environment presents the additional
challenge of accessing the isolated ovs networks on the undercloud. By default
@ -63,13 +63,9 @@ an ssh-tunnel service has been setup on the virthost by the tripleo-quickstart
From your workstation::
http://<virthost>:3000
https://<virthost>
By default an insecure connection the undercloud services has been configured
By default a secure connection to the undercloud services has been configured
in the /var/www/openstack-tripleo-ui-/dist/tripleo_ui_config.js file. To use
ssl connections change the default variable ``tripleo_ui_secure_access`` to true.
Note:: When using ssl a user must manually allow access due to the self
signed ssl certificate by accepting access to https://<virthost>/keystone/v3/auth/tokens
in a new browser window or tab. Then one may return to http://virthost:3000
and continue.
an insucure connections change the default variable
``tripleo_ui_secure_access`` to false.