Created attachment 1108979 [details] sample haproxy.conf from one of the controllers Description of problem: We currenlty have ssl implemented via haproxy for horizon and keystone for public VIP. We want to make sure that the internal API endpoints are also using SSL to secure sensitive communication. If an authorized user, let's say a sysadmin logs into the a node on a cluster, that person can see and capture information that is passed in the clear to api endpoints. We would like to make sure that internal API's are being used over SSL. browser - (https)-> horizon -(http) -> internal API(s) CLI -(https)-> keystone pub haproxy -(http)->internal keystone API Needs to be: browser - (https)-> horizon -(httpS) -> internal API(s) CLI -(https)-> keystone pub haproxy -(httpS)->internal keystone API Additional info:
*** This bug has been marked as a duplicate of bug 1336504 ***