Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-12377

[ironic-operator] Fix httpd config X-Forwarded-Proto

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • rhos-18.0.7
    • None
    • ironic-operator
    • None
    • HardProv Sprint 1
    • 1
    • Moderate

      Service operators deploying httpd container are not setting RequestHeader X-Forwarded-Proto setting for non tls deployments, which results into response containing https urls even with tls disabled.

      Some operators hard code it to https and others like neutron had it conditionally set but it was not honoring tls.ingress=true so was setting it to "http".

      It should be set similar to below to work with both ocp route and LoadBalancer:-

      {{- if $vhost.TLS }}
        RequestHeader setIfEmpty X-Forwarded-Proto "https"
      {{- else }}
        RequestHeader setIfEmpty X-Forwarded-Proto "http"
      {{- end }}

              jasonparoly Jason Paroly
              ykarel@redhat.com Yatin Karel
              rhos-dfg-hardprov
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: