diff --git a/ansible/roles/cloudkitty/templates/cloudkitty.conf.j2 b/ansible/roles/cloudkitty/templates/cloudkitty.conf.j2
index 2f377a681e..b450c7e46f 100644
--- a/ansible/roles/cloudkitty/templates/cloudkitty.conf.j2
+++ b/ansible/roles/cloudkitty/templates/cloudkitty.conf.j2
@@ -30,6 +30,9 @@ memcache_security_strategy = ENCRYPT
 memcache_secret_key = {{ memcache_secret_key }}
 memcached_servers = {% for host in groups['memcached'] %}{{ 'api' | kolla_address(host) | put_address_in_context('memcache') }}:{{ memcached_port }}{% if not loop.last %},{% endif %}{% endfor %}
 
+[oslo_middleware]
+enable_proxy_headers_parsing = True
+
 [oslo_concurrency]
 lock_path = /var/lib/cloudkitty/tmp
 
diff --git a/releasenotes/notes/cloudkitty-proxy-headers-da4ea3297063e2e8.yaml b/releasenotes/notes/cloudkitty-proxy-headers-da4ea3297063e2e8.yaml
new file mode 100644
index 0000000000..236bff141d
--- /dev/null
+++ b/releasenotes/notes/cloudkitty-proxy-headers-da4ea3297063e2e8.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes issues with some CloudKitty commands trying to connect to an external
+    TLS endpoint using HTTP. `LP#1888544 <https://launchpad.net/bugs/1888544>`__