Add kickstack_horizon_allow_any_hostname parameter

By default (unless running in debug mode), Django will only allow
access to Horizon through the Horizon host's FQDN. Add
kickstack_horizon_allow_any_hostname, which when set to true will
override by allowing access through any hostname, or the host's IP
address.

Author: fghaas

manifests/horizon.pp

@@ -22,6 +22,10 @@
   class { '::horizon':
     require               => Package['memcached'],
     secret_key            => $new_secret_key,
+    fqdn                  => $::kickstack::horizon_allow_any_hostname ? {
+                               true => '*',
+                               default => pick($fqdn,$hostname)
+                             },
     cache_server_ip       => '127.0.0.1',
     cache_server_port     => '11211',
     swift                 => false,

manifests/init.pp

@@ -59,7 +59,8 @@
   $nova_compute_libvirt_type = $kickstack::params::nova_compute_libvirt_type,
   $xenapi_connection_url = $kickstack::params::xenapi_connection_url,
   $xenapi_connection_username = $kickstack::params::xenapi_connection_username,
-  $xenapi_connection_password = $kickstack::params::xenapi_connection_password
+  $xenapi_connection_password = $kickstack::params::xenapi_connection_password,
+  $horizon_allow_any_hostname = $kickstack::params::horizon_allow_any_hostname,
 ) inherits kickstack::params {
 
   include ::exportfact

manifests/params.pp

@@ -237,4 +237,12 @@
 
   # The XenAPI password (ignored unless nova_compute_driver==xenserver)
   $xenapi_connection_password = getvar("::${variable_prefix}xenapi_connection_password")
+
+  # Allow access to Horizon using any host name?
+  # Default is false, meaning allow Horizon access only through the
+  # FQDN of the dashboard host.
+  # Set to true if you want to access by IP address, through an SSH
+  # tunnel, etc.
+  $horizon_allow_any_hostname = str2bool(pick(getvar("::${variable_prefix}horizon_allow_any_hostname"),'false'))
+
 }