Versions endpoint does not support X-Forwarded-Proto
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Cinder |
Fix Released
|
Medium
|
Yuriy Nesenenko | ||
Glance |
Fix Released
|
Undecided
|
Stuart McLaren | ||
OpenStack Cinder Charm |
Fix Released
|
Undecided
|
Seyeong Kim |
Bug Description
When a project is deployed behind a SSL terminating proxy, the version endpoint returns the wrong URLs. The returned protocol in the reponse URLs is http:// instead of the expected https://.
This is because the response built by versions.py git the host information only from the incoming req. If SSL has been terminated by a proxy, then the information in the req indicates http://. Other projects have addressed this by adding the config parameter secure_
One workaround is to set the public_endpoint parameter. However, the value set for public_endpoint, is also returned when the internal and admin version endpoints are queried, which breaks other things.
Changed in cinder: | |
importance: | Undecided → Medium |
description: | updated |
Changed in glance: | |
assignee: | nobody → Stuart McLaren (stuart-mclaren) |
Changed in cinder: | |
assignee: | nobody → Yuriy Nesenenko (ynesenenko) |
Changed in charm-cinder: | |
assignee: | nobody → Seyeong Kim (xtrusia) |
Changed in charm-cinder: | |
status: | New → In Progress |
milestone: | none → 17.11 |
Changed in charm-cinder: | |
milestone: | 17.11 → 18.02 |
Changed in charm-cinder: | |
milestone: | 18.02 → 18.05 |
https:/ /review. openstack. org/#/c/ 206479/ was how this was fixed in Nova