openstack/openstack-ansible-os_sahara
Code Issues Proposed changes

Remove pki support

Browse Source 
Change-Id: I11313a78d332600564784f293ae9b8d0383440ae
Implements: blueprint remove-pki
This commit is contained in:
ZhongShengping 2016-12-29 13:46:22 +08:00
parent 404ce73dfd
commit 7a5e5eda86
1 changed files with 0 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
templates/sahara.conf.j2
View File

@ -39,7 +39,6 @@ connection = mysql+pymysql://{{ sahara_galera_user }}:{{ sahara_container_mysql_
[keystone_authtoken] [keystone_authtoken]
insecure = {{ keystone_service_internaluri_insecure | bool }} insecure = {{ keystone_service_internaluri_insecure | bool }}
auth_type = {{ sahara_keystone_auth_plugin }} auth_type = {{ sahara_keystone_auth_plugin }}
signing_dir = {{ sahara_system_user_home }}/cache/api
auth_url = {{ keystone_service_adminurl }} auth_url = {{ keystone_service_adminurl }}
auth_uri = {{ keystone_service_internaluri }} auth_uri = {{ keystone_service_internaluri }}
project_domain_id = {{ sahara_service_project_domain_id }} project_domain_id = {{ sahara_service_project_domain_id }}
@ -56,16 +55,11 @@ admin_password = {{ sahara_service_password }}
memcached_servers = {{ memcached_servers }} memcached_servers = {{ memcached_servers }}
token_cache_time = 300 token_cache_time = 300
revocation_cache_time = 60
# if your memcached server is shared, use these settings to avoid cache poisoning # if your memcached server is shared, use these settings to avoid cache poisoning
memcache_security_strategy = ENCRYPT memcache_security_strategy = ENCRYPT
memcache_secret_key = {{ memcached_encryption_key }} memcache_secret_key = {{ memcached_encryption_key }}
# if your keystone deployment uses PKI, and you value security over performance:
check_revocations_for_cached = False
[oslo_policy] [oslo_policy]
policy_file = {{ sahara_policy_file }} policy_file = {{ sahara_policy_file }}
policy_default_rule = {{ sahara_policy_default_rule }} policy_default_rule = {{ sahara_policy_default_rule }}