Compare commits
No commits in common. "2e372f3b78f7582a00411abbd39e0faf52e5eef4" and "149590eb35592fca1497611f03ab8872fc0bd282" have entirely different histories.
2e372f3b78
...
149590eb35
10
.drone.yml
10
.drone.yml
@ -94,16 +94,6 @@ pipeline:
|
|||||||
tag: latest
|
tag: latest
|
||||||
when:
|
when:
|
||||||
branch: master
|
branch: master
|
||||||
horizon_merlin:
|
|
||||||
image: plugins/docker
|
|
||||||
dockerfile: horizon/Dockerfile
|
|
||||||
context: horizon
|
|
||||||
secrets: [docker_username, docker_password]
|
|
||||||
registry: registry.webhosting.rug.nl
|
|
||||||
repo: registry.webhosting.rug.nl/hpc/openstack-horizon-merlin
|
|
||||||
tag: latest
|
|
||||||
when:
|
|
||||||
branch: merlin
|
|
||||||
neutron_controller_merlin:
|
neutron_controller_merlin:
|
||||||
image: plugins/docker
|
image: plugins/docker
|
||||||
dockerfile: neutron_controller/Dockerfile
|
dockerfile: neutron_controller/Dockerfile
|
||||||
|
@ -16,29 +16,20 @@ RUN set -x \
|
|||||||
python-openstackclient \
|
python-openstackclient \
|
||||||
&& apt-get -y clean
|
&& apt-get -y clean
|
||||||
|
|
||||||
|
EXPOSE 80
|
||||||
EXPOSE 80 443
|
|
||||||
|
|
||||||
COPY openstack-dashboard.conf /etc/apache2/conf-available/openstack-dashboard.conf
|
|
||||||
|
|
||||||
COPY local_settings.py /etc/openstack-dashboard/local_settings.py
|
COPY local_settings.py /etc/openstack-dashboard/local_settings.py
|
||||||
|
|
||||||
# Add a redirect to /keystone instead of the "It works! page"
|
# Add a redirect to /keystone instead of the "It works! page"
|
||||||
COPY 000-default.conf /etc/apache2/sites-available
|
COPY 000-default.conf /etc/apache2/sites-available
|
||||||
|
|
||||||
COPY run.sh /etc/run.sh
|
|
||||||
|
|
||||||
RUN chown -R www-data: /var/lib/openstack-dashboard/
|
RUN chown -R www-data: /var/lib/openstack-dashboard/
|
||||||
|
|
||||||
RUN touch /var/log/horizon.log
|
RUN touch /var/log/horizon.log
|
||||||
|
|
||||||
RUN chown www-data: /var/log/horizon.log
|
RUN chown www-data: /var/log/horizon.log
|
||||||
|
|
||||||
RUN a2enmod ssl
|
RUN chown horizon: /var/lib/openstack-dashboard/secret_key
|
||||||
RUN a2enmod headers
|
|
||||||
RUN a2enmod rewrite
|
|
||||||
|
|
||||||
RUN chown /var/lib/openstack-dashboard/secret_key horizon
|
CMD apachectl -DFOREGROUND
|
||||||
|
|
||||||
CMD /etc/run.sh
|
|
||||||
|
|
||||||
|
@ -37,7 +37,7 @@ EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'
|
|||||||
#EMAIL_HOST_PASSWORD = 'top-secret!'
|
#EMAIL_HOST_PASSWORD = 'top-secret!'
|
||||||
|
|
||||||
OPENSTACK_HOST = os.environ['KEYSTONE_HOST']
|
OPENSTACK_HOST = os.environ['KEYSTONE_HOST']
|
||||||
OPENSTACK_KEYSTONE_URL = "https://%s:5000/v3" % OPENSTACK_HOST
|
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
|
||||||
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"
|
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"
|
||||||
|
|
||||||
|
|
||||||
@ -266,6 +266,7 @@ TIME_ZONE = "UTC"
|
|||||||
# ('default', 'Default', 'themes/default'),
|
# ('default', 'Default', 'themes/default'),
|
||||||
# ('material', 'Material', 'themes/material'),
|
# ('material', 'Material', 'themes/material'),
|
||||||
#]
|
#]
|
||||||
|
|
||||||
LOGGING = {
|
LOGGING = {
|
||||||
'version': 1,
|
'version': 1,
|
||||||
# When set to True this will disable all logging except
|
# When set to True this will disable all logging except
|
||||||
@ -287,12 +288,11 @@ LOGGING = {
|
|||||||
},
|
},
|
||||||
'console': {
|
'console': {
|
||||||
# Set the level to "DEBUG" for verbose output logging.
|
# Set the level to "DEBUG" for verbose output logging.
|
||||||
'level': 'DEBUG',
|
'level': 'INFO',
|
||||||
'class': 'logging.FileHandler',
|
'class': 'logging.StreamHandler',
|
||||||
'filename': '/var/log/horizon.log',
|
|
||||||
},
|
},
|
||||||
'operation': {
|
'operation': {
|
||||||
'level': 'DEBUG',
|
'level': 'INFO',
|
||||||
'class': 'logging.StreamHandler',
|
'class': 'logging.StreamHandler',
|
||||||
'formatter': 'operation',
|
'formatter': 'operation',
|
||||||
},
|
},
|
||||||
@ -516,12 +516,3 @@ ALLOWED_HOSTS = '*'
|
|||||||
COMPRESS_OFFLINE = True
|
COMPRESS_OFFLINE = True
|
||||||
|
|
||||||
ALLOWED_PRIVATE_SUBNET_CIDR = {'ipv4': [], 'ipv6': []}
|
ALLOWED_PRIVATE_SUBNET_CIDR = {'ipv4': [], 'ipv6': []}
|
||||||
|
|
||||||
WEBSSO_ENABLED = True
|
|
||||||
|
|
||||||
WEBSSO_CHOICES = (
|
|
||||||
("credentials", _("Keystone Credentials")),
|
|
||||||
("mapped", _("Security Assertion Markup Language"))
|
|
||||||
)
|
|
||||||
|
|
||||||
WEBSSO_INITIAL_CHOICE = "mapped"
|
|
||||||
|
@ -1,35 +0,0 @@
|
|||||||
<VirtualHost *:80>
|
|
||||||
RedirectMatch "^/$" "/horizon"
|
|
||||||
ServerName oscloudtest01.hpc.rug.nl
|
|
||||||
RewriteEngine On
|
|
||||||
RewriteCond %{HTTPS} off
|
|
||||||
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
|
|
||||||
</VirtualHost>
|
|
||||||
<VirtualHost *:443>
|
|
||||||
RedirectMatch "^/$" "/horizon"
|
|
||||||
ServerName oscloudtest01.hpc.rug.nl
|
|
||||||
|
|
||||||
SSLEngine On
|
|
||||||
SSLCertificateFile "/certs/oscloudtest01.hpc.rug.nl.crt"
|
|
||||||
SSLCertificateKeyFile "/certs/oscloudtest01.hpc.rug.nl.key"
|
|
||||||
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
|
|
||||||
|
|
||||||
# HTTP Strict Transport Security (HSTS) enforces that all communications
|
|
||||||
# with a server go over SSL. This mitigates the threat from attacks such
|
|
||||||
# as SSL-Strip which replaces links on the wire, stripping away https prefixes
|
|
||||||
# and potentially allowing an attacker to view confidential information on the
|
|
||||||
# wire
|
|
||||||
Header add Strict-Transport-Security "max-age=15768000"
|
|
||||||
|
|
||||||
Alias /horizon/static /var/lib/openstack-dashboard/static/
|
|
||||||
Alias /static /var/lib/openstack-dashboard/static/
|
|
||||||
|
|
||||||
<Directory /var/lib/openstack-dashboard/static>
|
|
||||||
Require all granted
|
|
||||||
</Directory>
|
|
||||||
|
|
||||||
WSGIScriptAlias /horizon /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi process-group=horizon
|
|
||||||
WSGIDaemonProcess horizon user=www-data group=www-data processes=3 threads=10 display-name=%{GROUP}
|
|
||||||
WSGIProcessGroup horizon
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
@ -1,6 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
#Making the console log console again...
|
|
||||||
tail -f /var/log/horizon.log &
|
|
||||||
|
|
||||||
apachectl -DFOREGROUND
|
|
@ -12,7 +12,7 @@ RUN set -x \
|
|||||||
python-openstackclient \
|
python-openstackclient \
|
||||||
nova-compute \
|
nova-compute \
|
||||||
neutron-linuxbridge-agent \
|
neutron-linuxbridge-agent \
|
||||||
neutron-l3-agent \
|
neutron-l3-agent \
|
||||||
neutron-dhcp-agent \
|
neutron-dhcp-agent \
|
||||||
neutron-metadata-agent \
|
neutron-metadata-agent \
|
||||||
python-ceph \
|
python-ceph \
|
||||||
|
Loading…
Reference in New Issue
Block a user