openstack/openstack-helm
Code Issues Proposed changes

Add LDAP pool options

Browse Source 
This patch set adds the pool timeout to the LDAP configuration sample.
Also, puts the LDAP pool timeout to a sensible 15 seconds rather than
-1 which can cause keystone to hang due to potential LDAP instability
or unavailability.

Change-Id: I15d6b6d93811bb560e4db26490b05024617ec665
Signed-off-by: Tin Lam <tin@irrational.io>
This commit is contained in:
Tin Lam 2018-04-10 16:04:56 -05:00
parent 7554196a22
commit 7cba187884
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
tools/overrides/keystone/ldap_domain_config.yaml
View File

@ -41,3 +41,12 @@ conf:
user_mail_attribute: mail
user_pass_attribute: userPassword
group_tree_dn: "ou=Groups,dc=cluster,dc=local"
use_pool: true
pool_size: 27
pool_retry_max: 3
pool_retry_delay: 0.1
pool_connection_timeout: 15
pool_connection_lifetime: 600
use_auth_pool: true
auth_pool_size: 100
auth_pool_connection_lifetime: 60