openstack/openstack-helm
Code Issues Proposed changes

horizon: allow setting WEBSSO_KEYSTONE_URL

Browse Source 
This patch enables users to override WEBSSO_KEYSTONE_URL variable for
Horizon.

As per docs:

> Use this when OPENSTACK_KEYSTONE_URL is set to an internal Keystone
endpoint and is not reachable from the external network where the
identity provider lives. This URL will take precedence over
OPENSTACK_KEYSTONE_URL if the login choice is an external identity
provider (IdP).

Change-Id: I542dadb8ada14ebab8257cc0693641b14c8adcc0
Signed-off-by: Marek Skrobacki <skrobul@skrobul.com>
This commit is contained in:
Marek Skrobacki 2024-09-11 18:22:50 +01:00
parent 5708319cd8
commit f7c0e3aefa
No known key found for this signature in database
GPG Key ID: 9AE656D71EA6B88D
3 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
horizon/Chart.yaml
View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Horizon description: OpenStack-Helm Horizon
name: horizon name: horizon
version: 0.3.27 version: 0.3.28
home: https://docs.openstack.org/horizon/latest/ home: https://docs.openstack.org/horizon/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Horizon/OpenStack_Project_Horizon_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Horizon/OpenStack_Project_Horizon_vertical.png
sources: sources:

5
horizon/values.yaml
View File

@ -460,6 +460,11 @@ conf:
# Determines which authentication choice to show as default. # Determines which authentication choice to show as default.
WEBSSO_INITIAL_CHOICE = "{{ .Values.conf.horizon.local_settings.config.auth.sso.initial_choice }}" WEBSSO_INITIAL_CHOICE = "{{ .Values.conf.horizon.local_settings.config.auth.sso.initial_choice }}"
{{- if .Values.conf.horizon.local_settings.config.auth.sso.websso_keystone_url }}
# The full auth URL for the Keystone endpoint used for web single-sign-on authentication.
WEBSSO_KEYSTONE_URL = "{{ .Values.conf.horizon.local_settings.config.auth.sso.websso_keystone_url }}"
{{- end }}
# The list of authentication mechanisms # The list of authentication mechanisms
# which include keystone federation protocols. # which include keystone federation protocols.
# Current supported protocol IDs are 'saml2' and 'oidc' # Current supported protocol IDs are 'saml2' and 'oidc'

1
releasenotes/notes/horizon.yaml
View File

@ -64,4 +64,5 @@ horizon:
- 0.3.25 Implement "CSRF_TRUSTED_ORIGINS" option support in horizon - 0.3.25 Implement "CSRF_TRUSTED_ORIGINS" option support in horizon
- 0.3.26 Fix templating of CSRF_TRUSTED_ORIGINS - 0.3.26 Fix templating of CSRF_TRUSTED_ORIGINS
- 0.3.27 Use quay.io/airshipit/kubernetes-entrypoint:latest-ubuntu_focal by default - 0.3.27 Use quay.io/airshipit/kubernetes-entrypoint:latest-ubuntu_focal by default
- 0.3.28 Add WEBSSO_KEYSTONE_URL value
... ...