c1bda5f81e
In a recent commit [1] the keystone token flush cron job was changed to run twice a day. However, this change was not enough for big deployments. After getting some customer feedback and looking at what other projects are doing [2] [3] [4]. It seems that running this job hourly is the way to go. [1] Ia0b0fb422318712f4b0f4d023cbb3a61d40bb85d [2] https://www.ibm.com/support/knowledgecenter/en/SSB27U_6.4.0/com.ibm.zvm.v640.hcpo4/exptoken.htm [3] https://review.openstack.org/#/c/88670/8 [4] https://github.com/openstack/charm-keystone/blob/master/templates/keystone-token-flush Conflicts: manifests/cron/token_flush.pp spec/acceptance/keystone_federation_identity_provider_spec.rb spec/acceptance/keystone_federation_shibboleth_spec.rb spec/acceptance/keystone_wsgi_apache_spec.rb spec/classes/keystone_cron_token_flush_spec.rb (cherry picked from commit |
||
---|---|---|
.. | ||
cron | ||
db | ||
federation | ||
resource | ||
roles | ||
wsgi | ||
client.pp | ||
config.pp | ||
cors.pp | ||
db.pp | ||
deps.pp | ||
disable_admin_token_auth.pp | ||
endpoint.pp | ||
init.pp | ||
ldap_backend.pp | ||
ldap.pp | ||
logging.pp | ||
params.pp | ||
policy.pp | ||
python.pp | ||
service.pp |