The Dashboard (horizon) is the OpenStack dashboard that provides users a self-service portal to provision their own resources within the limits set by administrators. These include provisioning users, defining instance flavors, uploading virtual machine (VM) images, managing networks, setting up security groups, starting instances, and accessing the instances through a console.
The Dashboard is based on the Django web framework, ensuring secure deployment practices for Django apply directly to horizon. This guide provides a set of Django security recommendations. Further information can be found by reading the Django documentation.
The Dashboard ships with default security settings, and has deployment and configuration documentation.
DISALLOW_IFRAME_EMBED parameter set to True?CSRF_COOKIE_SECURE parameter set to True?SESSION_COOKIE_SECURE parameter set to True?SESSION_COOKIE_HTTPONLY parameter set to True?PASSWORD_AUTOCOMPLETE set to False?DISABLE_PASSWORD_REVEAL set to True?ENFORCE_PASSWORD_CHECK set to True?PASSWORD_VALIDATOR configured?SECURE_PROXY_SSL_HEADER configured?
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.