From 930b46810f25be30ef43792733a76381e2ec3f56 Mon Sep 17 00:00:00 2001
From: loitho <thomas@herbin.xyz>
Date: Tue, 31 Dec 2019 03:09:38 +0100
Subject: [PATCH] Add a uwsgi param to prevent SAML error

Add the uwsgi_param 'HTTP_X_FORWARDED_PORT' to nginx configuration,
This prevents the python-saml "invalid_response" error

related issue : #5570 and #1016

Signed-off-by: loitho
---
 installer/roles/kubernetes/templates/configmap.yml.j2 | 1 +
 installer/roles/local_docker/templates/nginx.conf.j2  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/installer/roles/kubernetes/templates/configmap.yml.j2 b/installer/roles/kubernetes/templates/configmap.yml.j2
index 68206a5ccf..f3edd6769e 100644
--- a/installer/roles/kubernetes/templates/configmap.yml.j2
+++ b/installer/roles/kubernetes/templates/configmap.yml.j2
@@ -120,6 +120,7 @@ data:
                 include {{ extra_nginx_include }};
                 {%- endif %}
                 proxy_set_header X-Forwarded-Port 443;
+                uwsgi_param HTTP_X_FORWARDED_PORT 443;
             }
         }
     }
diff --git a/installer/roles/local_docker/templates/nginx.conf.j2 b/installer/roles/local_docker/templates/nginx.conf.j2
index a3441ecc2e..78c513f49d 100644
--- a/installer/roles/local_docker/templates/nginx.conf.j2
+++ b/installer/roles/local_docker/templates/nginx.conf.j2
@@ -113,6 +113,7 @@ http {
             include {{ extra_nginx_include }};
             {%- endif %}
             proxy_set_header X-Forwarded-Port 443;
+            uwsgi_param HTTP_X_FORWARDED_PORT 443;
         }
     }
 }