Merge "Only add OIDCXForwardedHeaders when variable is set" into stable/2025.1

Author: Zuul

ansible/roles/keystone/templates/wsgi-keystone.conf.j2

@@ -58,7 +58,9 @@ LogLevel info
 {% endif -%}
 
 {% if keystone_enable_federation_openid | bool %}
+{% if keystone_federation_oidc_forwarded_headers | length > 0 %}
     OIDCXForwardedHeaders "{{ keystone_federation_oidc_forwarded_headers }}"
+{% endif %}
     OIDCClaimPrefix "OIDC-"
     OIDCClaimDelimiter "{{ keystone_federation_oidc_claim_delimiter }}"
     OIDCResponseType "{{ keystone_federation_oidc_response_type }}"

releasenotes/notes/fix-oidc-x-forwarded-headers-option-edb945bfcb98c691.yaml

@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    Fixes the bug where Keystone become unable to start when the option
+    ``OIDCXForwardedHeaders`` is set with empty string in
+    ``wsgi-keystone.conf``.
+    `LP#2119344 <https://bugs.launchpad.net/kolla-ansible/+bug/2119344>`__