Open Stack

Hello,

I confirm that setting:

[oslo_middleware]
enable_proxy_headers_parsing = true

Fixes the problem, and the 'links' property when I create new stacks
gets again the https:// URL.

THANK YOU !!! :)

Anyway we should document this change in the Release notes for people
upgrading to Newton.

I never had:
secure_proxy_ssl_header=X-Forwarded-Proto

in my Mitaka config, because that was the default setting, it was not
necessary to set it explicit.

Also according to:
https://docs.openstack.org/newton/config-reference/orchestration/api.html
the setting is deprecated but not removed.

Adding the enable_proxy_headers_parsing parameter we are also changing
the default behavior, and this is bad if it is not written in the heat
release notes.

https://docs.openstack.org/releasenotes/heat/liberty.html
https://docs.openstack.org/releasenotes/heat/mitaka.html
https://docs.openstack.org/releasenotes/heat/newton.html

Please correct me if I am wrong. But I cannot find anything in the
release (upgrade) notes that warns you should flag this to true if you
are running behind a proxy.

Is it possible to integrate the release notes for Newton now adding a
file in releasenotes/notes/ ? How does it work ?

thank you

Saverio



On 13/04/17 09:52, Rabi Mishra wrote:
> On Thu, Apr 13, 2017 at 1:04 PM, Saverio Proto <saverio.proto at switch.ch
> <mailto:saverio.proto at switch.ch>> wrote:
> 
>     Hello,
> 
>     I am looking at a strange change in default behavior in heat, after the
>     upgrade from Mitaka to Newton.
> 
>     when you do
> 
>     openstack stack show uuid
> 
>     you get a table, and there is a property called 'links'
> 
>     In Mitaka the value was something like
> 
>     - href: https://URL
>       rel: self
> 
>     After I upgraded to Newton the 'links' field changed to
> 
>     http://URL (self)
> 
>     Also in the process the 's' from https went missing.
> 
> 
> Though not sure, may be related to http_proxy_to_wsgi middleware related
> change as mentioned here[1] in newton?
> 
> [1] https://bugs.launchpad.net/heat/+bug/1630778
> 
> May be add the below in heat.conf and check.
> 
> [oslo_middleware]
> enable_proxy_headers_parsing = true
> 
>  
> 
>     This broke first of all our rally tests, that now fail with "Prohibited
>     endpoint redirect"
> 
>     It also broke Horizon, because if I click on the stack name, I am not
>     able to get to the page with the stack property, but I get a red box
>     "Error: Unable to retrieve stack.".
> 
>     Before opening a strange bug that will be marked as "Invalid" I would
>     like to understand better what is this 'links' property of the stack,
>     and why it changed from Mitaka to Newton ? Is possible this is a
>     regression bug ?
> 
>     Thank you
> 
>     Saverio
> 
> 
> 
> 
> 
>     --
>     SWITCH
>     Saverio Proto, Peta Solutions
>     Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
>     phone +41 44 268 15 15, direct +41 44 268 1573
>     saverio.proto at switch.ch <mailto:saverio.proto at switch.ch>,
>     http://www.switch.ch
> 
>     http://www.switch.ch/stories
> 
>     __________________________________________________________________________
>     OpenStack Development Mailing List (not for usage questions)
>     Unsubscribe:
>     OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>     <http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>     <http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev>
> 
> 
> 
> 
> -- 
> Regards,
> Rabi Misra
> 
> 
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 


-- 
SWITCH
Saverio Proto, Peta Solutions
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 15, direct +41 44 268 1573
saverio.proto at switch.ch, http://www.switch.ch

http://www.switch.ch/stories