Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue Keystone Auth, forcing HTTPS #49

Open
duhow opened this issue Jan 15, 2018 · 4 comments
Open

Issue Keystone Auth, forcing HTTPS #49

duhow opened this issue Jan 15, 2018 · 4 comments
Labels

Comments

@duhow
Copy link

duhow commented Jan 15, 2018

Using Auth Mode keystone, with all settings OK (URL endpoint http://controller:5000, domain, project, user and password) and CORS enabled.
Grafana gets the Keystone token and the Gnocchi endpoint, and goes to query it.
But, the connection is done via HTTPS automatically forced, not HTTP.
As HTTPS is not responding, data load fails.
This happens in some versions of Firefox and Chrome, Internet Explorer is not having this issue and gets the data OK.

@sileht
Copy link
Member

sileht commented Jan 15, 2018

Recent Chrome and Firefox are stricter about ssl. You can't mix non-ssl with ssl endpoint within the same page with CORS. So I don't think this can be solved on the plugin side. Maybe you should just ensure keystone AND Gnocchi are both in https://

Can you provide browser console output when the issue occurs ? so I can confirm my though.

@duhow
Copy link
Author

duhow commented Jan 15, 2018

All connections are HTTP, Grafana, Keystone and Gnocchi. Endpoint Gnocchi is also set as HTTP.

In Firefox, directly queries to HTTPS, while Chrome does HTTP but then redirect 307 to HTTPS.

Tomorrow I'll send some screenshots.

@duhow
Copy link
Author

duhow commented Jan 16, 2018

req1
req2

Console outputs:

Failed to load http://controller:8041/v1/search/resource/instance?filter=id+in+%5B%5D: Response for preflight is invalid (redirect)

@LuckyBirds
Copy link

Same problems.
I don't wont use inside ssl, so i configure CORS in keystone and gnocchi as
http://my_ip:3000
If i use Internet Explorer all good, problem with redirects in firefox and chrome.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

3 participants