)]}'
{"manifests/loadbalancer.pp":[{"author":{"_account_id":16339,"name":"Cyril Lopez","email":"cylopez@redhat.com","username":"cylopez"},"change_message_id":"0637ac563ca5b840bf778e02a5b125b0a8bc6b51","unresolved":false,"context_lines":[{"line_number":687,"context_line":"      collect_exported \u003d\u003e false,"},{"line_number":688,"context_line":"      mode             \u003d\u003e \u0027http\u0027, # Needed for http-request option"},{"line_number":689,"context_line":"      options          \u003d\u003e {"},{"line_number":690,"context_line":"          \u0027http-request\u0027 \u003d\u003e [\u0027set-header X-Forwarded-Proto https if { ssl_fc }\u0027],"},{"line_number":691,"context_line":"      },"},{"line_number":692,"context_line":"    }"},{"line_number":693,"context_line":"    haproxy::balancermember { \u0027keystone_public\u0027:"}],"source_content_type":"text/x-puppet","patch_set":2,"id":"7a740942_72a63baf","line":690,"updated":"2015-12-09 09:31:07.000000000","message":"I\u0027m not using of keystone but on heat and horizon","commit_id":"846b4fe0b82f861c3f6c637cdc5d7d9f052e4338"},{"author":{"_account_id":10873,"name":"Juan Antonio Osorio Robles","email":"jaosorior@redhat.com","username":"ejuaoso"},"change_message_id":"68d6aae1db281fe70131961e0933711fc4ead3c4","unresolved":false,"context_lines":[{"line_number":687,"context_line":"      collect_exported \u003d\u003e false,"},{"line_number":688,"context_line":"      mode             \u003d\u003e \u0027http\u0027, # Needed for http-request option"},{"line_number":689,"context_line":"      options          \u003d\u003e {"},{"line_number":690,"context_line":"          \u0027http-request\u0027 \u003d\u003e [\u0027set-header X-Forwarded-Proto https if { ssl_fc }\u0027],"},{"line_number":691,"context_line":"      },"},{"line_number":692,"context_line":"    }"},{"line_number":693,"context_line":"    haproxy::balancermember { \u0027keystone_public\u0027:"}],"source_content_type":"text/x-puppet","patch_set":2,"id":"3a7e1126_500961dc","line":690,"in_reply_to":"3a7e1126_3a96f6f0","updated":"2015-12-17 16:24:51.000000000","message":"I\u0027m not entirely sure if it\u0027s really needed. Only thing that will happen is that if it\u0027s http the header will not be set, and on the keystone side, the wsgi.url_scheme param will not be set, so it will fall back to whatever\u0027s the default in the server, which usually is http.","commit_id":"846b4fe0b82f861c3f6c637cdc5d7d9f052e4338"},{"author":{"_account_id":6928,"name":"Ben Nemec","email":"openstack@nemebean.com","username":"bnemec"},"change_message_id":"2afef531fdbde0e5bdb0645f9a7118bec601006d","unresolved":false,"context_lines":[{"line_number":687,"context_line":"      collect_exported \u003d\u003e false,"},{"line_number":688,"context_line":"      mode             \u003d\u003e \u0027http\u0027, # Needed for http-request option"},{"line_number":689,"context_line":"      options          \u003d\u003e {"},{"line_number":690,"context_line":"          \u0027http-request\u0027 \u003d\u003e [\u0027set-header X-Forwarded-Proto https if { ssl_fc }\u0027],"},{"line_number":691,"context_line":"      },"},{"line_number":692,"context_line":"    }"},{"line_number":693,"context_line":"    haproxy::balancermember { \u0027keystone_public\u0027:"}],"source_content_type":"text/x-puppet","patch_set":2,"id":"3a7e1126_3a96f6f0","line":690,"in_reply_to":"7a740942_28e60244","updated":"2015-12-17 16:07:41.000000000","message":"http://blog.haproxy.com/2013/02/26/ssl-offloading-impact-on-web-applications/ suggests that there should also be a separate one for http when ssl is turned off.  Does keystone not require that?","commit_id":"846b4fe0b82f861c3f6c637cdc5d7d9f052e4338"},{"author":{"_account_id":10873,"name":"Juan Antonio Osorio Robles","email":"jaosorior@redhat.com","username":"ejuaoso"},"change_message_id":"1a0f63215214f95ccb0058437af9d5a3f56d0688","unresolved":false,"context_lines":[{"line_number":687,"context_line":"      collect_exported \u003d\u003e false,"},{"line_number":688,"context_line":"      mode             \u003d\u003e \u0027http\u0027, # Needed for http-request option"},{"line_number":689,"context_line":"      options          \u003d\u003e {"},{"line_number":690,"context_line":"          \u0027http-request\u0027 \u003d\u003e [\u0027set-header X-Forwarded-Proto https if { ssl_fc }\u0027],"},{"line_number":691,"context_line":"      },"},{"line_number":692,"context_line":"    }"},{"line_number":693,"context_line":"    haproxy::balancermember { \u0027keystone_public\u0027:"}],"source_content_type":"text/x-puppet","patch_set":2,"id":"7a740942_28e60244","line":690,"in_reply_to":"7a740942_72a63baf","updated":"2015-12-09 09:37:55.000000000","message":"I\u0027ve found that using it on keystone helps a lot when trying to access the API. Though, keystone still needs to be configured to react to this header, which needs to be done in the puppet manifests in tripleo-heat-templates.\n\nSo, should I add this option to both Heat and horizon too?","commit_id":"846b4fe0b82f861c3f6c637cdc5d7d9f052e4338"}]}