Hello, I confirm that setting:
[oslo_middleware] enable_proxy_headers_parsing = true Fixes the problem, and the 'links' property when I create new stacks gets again the https:// URL. THANK YOU !!! :) Anyway we should document this change in the Release notes for people upgrading to Newton. I never had: secure_proxy_ssl_header=X-Forwarded-Proto in my Mitaka config, because that was the default setting, it was not necessary to set it explicit. Also according to: https://docs.openstack.org/newton/config-reference/orchestration/api.html the setting is deprecated but not removed. Adding the enable_proxy_headers_parsing parameter we are also changing the default behavior, and this is bad if it is not written in the heat release notes. https://docs.openstack.org/releasenotes/heat/liberty.html https://docs.openstack.org/releasenotes/heat/mitaka.html https://docs.openstack.org/releasenotes/heat/newton.html Please correct me if I am wrong. But I cannot find anything in the release (upgrade) notes that warns you should flag this to true if you are running behind a proxy. Is it possible to integrate the release notes for Newton now adding a file in releasenotes/notes/ ? How does it work ? thank you Saverio On 13/04/17 09:52, Rabi Mishra wrote: > On Thu, Apr 13, 2017 at 1:04 PM, Saverio Proto <saverio.pr...@switch.ch > <mailto:saverio.pr...@switch.ch>> wrote: > > Hello, > > I am looking at a strange change in default behavior in heat, after the > upgrade from Mitaka to Newton. > > when you do > > openstack stack show uuid > > you get a table, and there is a property called 'links' > > In Mitaka the value was something like > > - href: https://URL > rel: self > > After I upgraded to Newton the 'links' field changed to > > http://URL (self) > > Also in the process the 's' from https went missing. > > > Though not sure, may be related to http_proxy_to_wsgi middleware related > change as mentioned here[1] in newton? > > [1] https://bugs.launchpad.net/heat/+bug/1630778 > > May be add the below in heat.conf and check. > > [oslo_middleware] > enable_proxy_headers_parsing = true > > > > This broke first of all our rally tests, that now fail with "Prohibited > endpoint redirect" > > It also broke Horizon, because if I click on the stack name, I am not > able to get to the page with the stack property, but I get a red box > "Error: Unable to retrieve stack.". > > Before opening a strange bug that will be marked as "Invalid" I would > like to understand better what is this 'links' property of the stack, > and why it changed from Mitaka to Newton ? Is possible this is a > regression bug ? > > Thank you > > Saverio > > > > > > -- > SWITCH > Saverio Proto, Peta Solutions > Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland > phone +41 44 268 15 15, direct +41 44 268 1573 > saverio.pr...@switch.ch <mailto:saverio.pr...@switch.ch>, > http://www.switch.ch > > http://www.switch.ch/stories > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > <http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > <http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev> > > > > > -- > Regards, > Rabi Misra > > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -- SWITCH Saverio Proto, Peta Solutions Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 15, direct +41 44 268 1573 saverio.pr...@switch.ch, http://www.switch.ch http://www.switch.ch/stories __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev