Welcome to RH-SSO TripleO Federation’s documentation!¶
Contents:
- Introduction
- Issues when a HTTP server is behind a proxy or SSL terminator
- Set Up IPA
- Set Up RH-SSO
- Steps
- Step 1: Determine IP address and matching FQDN
- Step 2: Install helper files on undercloud-0
- Step 3: Set your deployment variables
- Step 4: Copy helper files from undercloud-0 to controller-0
- Step 5: Initialize working environment on undercloud node
- Step 6: Initialize working environment on controller-0
- Step 7: Install mod_auth_mellon on each controller node
- Step 8: Use the Keystone Version 3 API
- Step 9: Add the RH-SSO FQDN to /etc/hosts on each controller
- Step 10: Install & configure mellon on controller node
- Step 11: Adjust the mellon configuration
- Step 12: Make an archive of the generated configuration files
- Step 13: Retrieve the mellon configuration archive
- Step 14: Prevent puppet from deleting unmanaged httpd files
- Step 15: Configure Keystone for federation
- Step 16: Deploy the mellon configuration archive
- Step 17: Redeploy the overcloud
- Step 18: Use proxy persistence for Keystone on each controller
- Step 19: Create federated resources
- Step 20: Create the identity provider in OpenStack
- Step 21: Create mapping file and upload into Keystone
- Step 22: Create a Keystone federation protocol
- Step 23: Fully qualify the Keystone scheme, host, and port
- Step 24: Configure Horizon to use federation
- Step 25: Set Horizon to use
X-Forwarded-ProtoHTTP header
- Troubleshooting
- Glossary
- Footnotes