openstack/openstack-ansible
Code Issues Proposed changes

Merge "Fix encoded url bypass"

Browse Source
This commit is contained in:
Zuul 2024-11-14 22:26:56 +00:00 committed by Gerrit Code Review
commit d441d1d62f
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
inventory/group_vars/nova_all/haproxy_service.yml
View File

@ -72,7 +72,7 @@ haproxy_nova_spice_console_service:
haproxy_accept_both_protocols: "{{ nova_accept_both_protocols | default(openstack_service_accept_both_protocols) }}"
haproxy_service_enabled: "{{ groups['nova_console'] is defined and groups['nova_console'] | length > 0 and 'spice' in nova_console_proxy_types }}"
haproxy_frontend_raw:
- "http-request deny if { path -m sub /. }"
- "http-request deny if { path,url_dec -m sub /. }"
haproxy_nova_serial_console_service:
haproxy_service_name: nova_serial_console
@ -91,7 +91,7 @@ haproxy_nova_serial_console_service:
haproxy_service_enabled: "{{ (groups['nova_console'] is defined and groups['nova_console'] | length > 0 and 'serialconsole' in nova_console_proxy_types) or
(groups['ironic_console'] is defined and groups['ironic_console'] | length > 0 and 'serialconsole' in nova_console_proxy_types) }}"
haproxy_frontend_raw:
- "http-request deny if { path -m sub /. }"
- "http-request deny if { path,url_dec -m sub /. }"
haproxy_nova_novnc_console_service:
haproxy_service_name: nova_novnc_console
@ -109,7 +109,7 @@ haproxy_nova_novnc_console_service:
haproxy_accept_both_protocols: "{{ nova_accept_both_protocols | default(openstack_service_accept_both_protocols) }}"
haproxy_service_enabled: "{{ groups['nova_console'] is defined and groups['nova_console'] | length > 0 and 'novnc' in nova_console_proxy_types }}"
haproxy_frontend_raw:
- "http-request deny if { path -m sub /. }"
- "http-request deny if { path,url_dec -m sub /. }"
# NOTE(jrosser) Clean up legacy console haproxy configs from previous releases
haproxy_nova_console_service: