commit 90c1e3e1a7ff35cfa9cbef8573191d5f75d503ab
Author: Tobias Urdin <tobias.urdin@binero.se>
Date:   Wed Oct 14 14:18:27 2020 +0200

    Set ssl_verify_client to optional for horizon
    
    Depends-On: https://review.opendev.org/#/c/758032/
    Change-Id: I8b0be54f2c03cbbc51423cebcd96e8be58e2ef1b

diff --git a/manifests/horizon.pp b/manifests/horizon.pp
index 4824da7..58b71dd 100644
--- a/manifests/horizon.pp
+++ b/manifests/horizon.pp
@@ -29,18 +29,19 @@ class openstack_integration::horizon {
   }
 
   class { 'horizon':
-    secret_key       => 'big_secret',
-    allowed_hosts    => $::openstack_integration::config::ip_for_url,
-    listen_ssl       => $::openstack_integration::config::ssl,
-    ssl_redirect     => $::openstack_integration::config::ssl,
-    horizon_cert     => $::openstack_integration::params::cert_path,
-    horizon_key      => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
-    horizon_ca       => $::openstack_integration::params::ca_bundle_cert_path,
-    keystone_url     => $::openstack_integration::config::keystone_auth_uri,
-    log_level        => 'DEBUG',
+    secret_key        => 'big_secret',
+    allowed_hosts     => $::openstack_integration::config::ip_for_url,
+    listen_ssl        => $::openstack_integration::config::ssl,
+    ssl_redirect      => $::openstack_integration::config::ssl,
+    horizon_cert      => $::openstack_integration::params::cert_path,
+    horizon_key       => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
+    horizon_ca        => $::openstack_integration::params::ca_bundle_cert_path,
+    ssl_verify_client => 'optional',
+    keystone_url      => $::openstack_integration::config::keystone_auth_uri,
+    log_level         => 'DEBUG',
     # need to disable offline compression due to
     # https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1424042
-    compress_offline => false,
+    compress_offline  => false,
   }
 
   horizon::dashboard { 'heat': }