4.23. 将 Horizon 配置为使用联邦

  1. 在每个节点中,编辑 /var/lib/config-data/puppet-generated/horizon/etc/openstack-dashboard/local_settings,并确保设置了以下配置值:

    OPENSTACK_KEYSTONE_URL = "https://$FED_KEYSTONE_HOST:$FED_KEYSTONE_HTTPS_PORT/v3"
    OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"
    WEBSSO_ENABLED = True
    WEBSSO_INITIAL_CHOICE = "mapped"
    WEBSSO_CHOICES = (
        ("mapped", _("RH-SSO")),
        ("credentials", _("Keystone Credentials")),
    )
注意

务必将 $FED_ 变量替换为特定于部署的值。