openstack/kolla-ansible.git/ansible/roles/keystone/templates/httpd-keystone.conf.j2, branch stable/2026.1Unnamed repository; edit this file 'description' to name the repository.
https://git.platform-os.org/openstack/kolla-ansible.git/atom?h=stable%2F2026.12026-07-28T10:17:38+00:00keystone: allow multiple OIDCXForwardedHeaders options2026-07-28T10:17:38+00:00Michel Raaberaabe@b1-systems.de2026-06-03T10:50:32+00:00urn:sha1:e8193097388372e4f29eaf32138a5ccde790c4e5
The OIDCXForwardedHeaders directive from mod_auth_openidc accepts a
space-separated list of header names and parses each one as a separate
argument. The keystone httpd template wrapped the value in double
quotes, so Apache passed the whole list as a single argument. As a
result, only a single forwarded header could be configured and setting
more than one value failed.
Remove the surrounding quotes so that each header name is parsed as an
individual argument, allowing more than one forwarded header to be set.
Closes-Bug: #2155147
Change-Id: Id23fbdf6c82acdec1ee310b6b29fc4a5dc846f66
Signed-off-by: Michel Raabe <raabe@b1-systems.de>
(cherry picked from commit 6a710101850a13518d66bd0e7c27a3ee54a3c2d8)
Switch to pypi version of j2lint and fix linting errors2025-12-30T16:31:17+00:00Michal Nasiadkamnasiadka@gmail.com2025-10-14T15:53:08+00:00urn:sha1:51eb7e05a2ef5e184a75c69b9f99ca11767bf675
Since ipwrap filter is getting moved another time
inside ansible code - let's switch to j2lint that is
actively maintained and it's rules will help in
readability of jinja2 templates
Change-Id: I6762b691b927de31fa1abd83c4c14e87226fe5e2
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
keystone: Add support for deploying httpd for federation2025-11-06T17:03:10+00:00Michal Nasiadkamnasiadka@gmail.com2025-09-23T09:35:48+00:00urn:sha1:3bffbca3c77b79c250b51ac04e65b26dbb7d3914
Depends-On: https://review.opendev.org/c/openstack/kolla/+/954707
Change-Id: I1f519b3ce8b7f2ceee2eaef88e4afc8ca8fa2f6e
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>