diff options
| author | Zuul <zuul@review.opendev.org> | 2026-07-29 07:29:01 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2026-07-29 07:29:01 +0000 |
| commit | f68d279eeb0b064edff32849f13e95e34f854832 (patch) | |
| tree | 16ca7343c72ca18e404275e38e5bed15008cf0bb | |
| parent | fff4bf1c195ba5f65bfc0a5394285ccfad374eed (diff) | |
| parent | e8193097388372e4f29eaf32138a5ccde790c4e5 (diff) | |
| download | kolla-ansible-f68d279eeb0b064edff32849f13e95e34f854832.tar.gz kolla-ansible-f68d279eeb0b064edff32849f13e95e34f854832.zip | |
Merge "keystone: allow multiple OIDCXForwardedHeaders options" into stable/2026.1
| -rw-r--r-- | ansible/roles/keystone/templates/httpd-keystone.conf.j2 | 2 | ||||
| -rw-r--r-- | releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml | 8 |
2 files changed, 9 insertions, 1 deletions
diff --git a/ansible/roles/keystone/templates/httpd-keystone.conf.j2 b/ansible/roles/keystone/templates/httpd-keystone.conf.j2 index 6d4692367..2d5bfb848 100644 --- a/ansible/roles/keystone/templates/httpd-keystone.conf.j2 +++ b/ansible/roles/keystone/templates/httpd-keystone.conf.j2 @@ -53,7 +53,7 @@ LogLevel info {% if keystone_enable_federation_openid | bool %} {% if keystone_federation_oidc_forwarded_headers | length > 0 %} - OIDCXForwardedHeaders "{{ keystone_federation_oidc_forwarded_headers }}" + OIDCXForwardedHeaders {{ keystone_federation_oidc_forwarded_headers }} {% endif %} OIDCClaimPrefix "OIDC-" OIDCClaimDelimiter "{{ keystone_federation_oidc_claim_delimiter }}" diff --git a/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml b/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml new file mode 100644 index 000000000..ef3fc14e2 --- /dev/null +++ b/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml @@ -0,0 +1,8 @@ +--- +fixes: + - | + Fixes the ``OIDCXForwardedHeaders`` directive in the Keystone Apache + configuration. The value was previously wrapped in double quotes, which + caused Apache to treat the whole list as a single argument and prevented + configuring more than one forwarded header. See `LP#2155147 + <https://bugs.launchpad.net/kolla-ansible/+bug/2155147>`__. |