diff options
| author | Dave McCowan <dmccowan@cisco.com> | 2016-04-12 00:58:56 -0400 |
|---|---|---|
| committer | Dave McCowan <dmccowan@cisco.com> | 2016-04-15 14:06:36 -0400 |
| commit | 4c8227ec8bb58d0259f04e26137f9312eecabd5c (patch) | |
| tree | aefa24f445b78dea03b7427ff95aacd707bae3c4 | |
| parent | 3cd96ea0ee912a786d3b2d98b3aac0d7dd42119b (diff) | |
| download | kolla-4c8227ec8bb58d0259f04e26137f9312eecabd5c.tar.gz kolla-4c8227ec8bb58d0259f04e26137f9312eecabd5c.zip | |
Add TLS to Kibana Web Interface
Use HAProxy to terminate a TLS connection on port 5601 for the
Kibana dashboard when TLS is enabled for Kolla. x-forwarded-for
and x-forwarded-proto headers are set to give Kibana the info it
needs to write returned URLs.
Change-Id: I03a2dd3a8e2513d38281b30bf4bae6449fec0316
Closes-bug: #1566117
| -rw-r--r-- | ansible/roles/haproxy/templates/haproxy.cfg.j2 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2 index 7968fa052..72c52cab7 100644 --- a/ansible/roles/haproxy/templates/haproxy.cfg.j2 +++ b/ansible/roles/haproxy/templates/haproxy.cfg.j2 @@ -388,7 +388,9 @@ listen kibana {% if haproxy_enable_external_vip | bool %} listen kibana_external - bind {{ kolla_external_vip_address }}:{{ kibana_server_port }} + bind {{ kolla_external_vip_address }}:{{ kibana_server_port }} {{ tls_bind_info }} + http-request del-header X-Forwarded-Proto + http-request set-header X-Forwarded-Proto https if { ssl_fc } acl auth_acl http_auth(kibanauser) http-request auth realm basicauth unless auth_acl {% for host in groups['kibana'] %} |