Reduce log level of Fernet key count message
This reduces the log level of the fairly repetitive message regarding the number of Fernet keys on disk, and also adds a suggestion into the message itself about how the message can be resolved (hint: start rotating your keys!). Change-Id: Id35f781c7b34463c324a867c6a781572f4144311 Closes-Bug: 1615111
This commit is contained in:
parent
be7307b20b
commit
6bde3f3ac2
|
@ -255,14 +255,13 @@ class FernetUtils(object):
|
||||||
keys[key_id] = key_file.read()
|
keys[key_id] = key_file.read()
|
||||||
|
|
||||||
if len(keys) != self.max_active_keys:
|
if len(keys) != self.max_active_keys:
|
||||||
# If there haven't been enough key rotations to reach
|
# Once the number of keys matches max_active_keys, this log entry
|
||||||
# max_active_keys, or if the configured value of max_active_keys
|
# is too repetitive to be useful.
|
||||||
# has changed since the last rotation, then reporting the
|
LOG.debug(
|
||||||
# discrepancy might be useful. Once the number of keys matches
|
'Loaded %(count)d Fernet keys from %(dir)s, but '
|
||||||
# max_active_keys, this log entry is too repetitive to be useful.
|
'`[fernet_tokens] max_active_keys = %(max)d`; perhaps there '
|
||||||
LOG.info(_LI(
|
'have not been enough key rotations to reach '
|
||||||
'Loaded %(count)d encryption keys (max_active_keys=%(max)d) '
|
'`max_active_keys` yet?', {
|
||||||
'from: %(dir)s'), {
|
|
||||||
'count': len(keys),
|
'count': len(keys),
|
||||||
'max': self.max_active_keys,
|
'max': self.max_active_keys,
|
||||||
'dir': self.key_repository})
|
'dir': self.key_repository})
|
||||||
|
|
Loading…
Reference in New Issue