diff options
| author | Michal Nasiadka <mnasiadka@gmail.com> | 2026-04-01 10:04:16 +0200 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2026-04-02 10:09:26 +0000 |
| commit | 0abac93c99c60ca11e4f0218022a41b842e5f0b7 (patch) | |
| tree | aae1a8f4e999f6f893ed01a39ffac226e2e2c0ed | |
| parent | 3609bf948134d41e05be92a758a752f2eb60696c (diff) | |
| download | kolla-ansible-0abac93c99c60ca11e4f0218022a41b842e5f0b7.tar.gz kolla-ansible-0abac93c99c60ca11e4f0218022a41b842e5f0b7.zip | |
keystone: Limit OIDCHTMLErrorTemplate to Ubuntu
This feature has been deprecated in mod_auth_openidc since version
2.4.14 and removed in 2.4.16.2/2.4.18.1.
Only Ubuntu Noble from currently supported distros has enough old
version to support it.
Closes-Bug: #2146990
Change-Id: If7d35df7f9f4853d05442d53fa580a34393804cd
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Signed-off-by: Taavi Ansper <taaviansperr@gmail.com>
| -rw-r--r-- | ansible/roles/keystone/templates/wsgi-keystone.conf.j2 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ansible/roles/keystone/templates/wsgi-keystone.conf.j2 b/ansible/roles/keystone/templates/wsgi-keystone.conf.j2 index 7364b74f7..13f9f56c5 100644 --- a/ansible/roles/keystone/templates/wsgi-keystone.conf.j2 +++ b/ansible/roles/keystone/templates/wsgi-keystone.conf.j2 @@ -67,7 +67,10 @@ LogLevel info {% if keystone_federation_oidc_jwks_uri | length > 0 %} OIDCOAuthVerifyJwksUri {{ keystone_federation_oidc_jwks_uri }} {% endif %} +{# TODO(mnasiadka): Drop this when introducing Ubuntu 26.04 or when Noble bumps package version #} +{% if kolla_base_distro == "ubuntu" %} OIDCHTMLErrorTemplate /var/www/html/modoidc-error-page.html +{% endif %} {% if keystone_federation_openid_certificate_key_ids | length > 0 %} OIDCOAuthVerifyCertFiles {{ keystone_federation_openid_certificate_key_ids | join(" ") }} {% endif %} |