yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #51368
[Bug 1573766] Re: Enable the paste filter HTTPProxyToWSGI by default
Had added cinder, but now I noticed there was already a bug report filed
there too https://bugs.launchpad.net/cinder/+bug/1573766 So I'll use
that one instead for Cinder. This still applies for Nova though.
** Also affects: cinder
Importance: Undecided
Status: New
** No longer affects: cinder
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1573766
Title:
Enable the paste filter HTTPProxyToWSGI by default
Status in OpenStack Compute (nova):
In Progress
Bug description:
oslo middleware provides a paste filter that sets the correct proxy
scheme and host. This is needed for the TLS proxy case.
Without this then enabling the TLS proxy in devstack will fail
configuring tempest because 'nova flavor-list' returns a http scheme
in Location in a redirect it returns.
I've proposed a temporary workaround in devstack using:
+ iniset $NOVA_API_PASTE_INI filter:ssl_header_handler past
e.filter_factory oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
+ iniset $NOVA_API_PASTE_INI composite:openstack_compute_ap
i_v21 keystone "ssl_header_handler cors compute_req_id faultwrap sizelimit autht
oken keystonecontext osapi_compute_app_v21"
But this isn't a long-term solution because two copies of the default
paste filters will need to be maintained.
See https://review.openstack.org/#/c/301172
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1573766/+subscriptions
References