openstack/instack-undercloud
Code Issues Proposed changes

Set fernet max_active_keys to 2

Browse Source 
We only seem to be deploying two fernet keys, but the default in
keystone is to have a max active keys of 3.  This results in the
keystone log being spammed with:

Loaded 2 Fernet keys from /etc/keystone/fernet-keys, but
`[fernet_tokens] max_active_keys = 3`; perhaps there have not been
enough key rotations to reach `max_active_keys` yet?

Reducing max_active_keys to 2 should clean that up.

Change-Id: I3259dc8c8097717d65edfb9ebe77add6796a81f0
This commit is contained in:
Ben Nemec
2016-12-19 18:43:51 +00:00
parent 2d20438213
commit ff95ae6fec
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
elements/puppet-stack-config/puppet-stack-config.yaml.template
View File

@@ -215,6 +215,7 @@ keystone::rabbit_userid: {{UNDERCLOUD_RABBIT_USERNAME}}
keystone::rabbit_password: {{UNDERCLOUD_RABBIT_PASSWORD}}
keystone::rabbit_host: {{LOCAL_IP}}
keystone::enable_credential_setup: true
keystone::fernet_max_active_keys: 2
# MySQL
admin_password: {{UNDERCLOUD_ADMIN_PASSWORD}}