Horizon: Enable client ip detection by X-Forwarded-For header

... so that actual client ip is logged instead of loadbalancer ip. Depends-on: https://review.opendev.org/837504 Change-Id: I58a2290ca9362d48e4de55d1ba93834c6eb04100
openstack-archive · May 6, 2022 · 55e7629 · 55e7629
1 parent cb99d62
commit 55e7629
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/deployment/horizon/horizon-container-puppet.yaml b/deployment/horizon/horizon-container-puppet.yaml
@@ -210,6 +210,7 @@ outputs:
         map_merge:
         - horizon::allowed_hosts: {get_param: HorizonAllowedHosts}
           horizon::enable_secure_proxy_ssl_header: true
+          horizon::secure_proxy_addr_header: HTTP_X_FORWARDED_FOR
           horizon::disable_password_reveal: true
           horizon::enforce_password_check: true
           horizon::disallow_iframe_embed: true