From 3fe43f1d692835d333559d64736783f52a07fb1e Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <kajinamit@oss.nttdata.com>
Date: Mon, 6 Nov 2023 01:31:56 +0900
Subject: [PATCH] keystone: Drop override of fernet options
The value used for fernet_key_repository exactly matches the default
value of the parameter.
Also the current setting of fernet_max_active_keys increases max
active keys from default(3) but we have no specific requirement to do
so.
Change-Id: I0d2c36371ddff3741a2bb49d9ce7f18fc85c875e
---
manifests/keystone.pp | 2 --
1 file changed, 2 deletions(-)
diff --git a/manifests/keystone.pp b/manifests/keystone.pp
index 21a11798f..d02099f63 100644
--- a/manifests/keystone.pp
+++ b/manifests/keystone.pp
@@ -74,8 +74,6 @@ class openstack_integration::keystone (
using_domain_config => $using_domain_config,
public_endpoint => $::openstack_integration::config::keystone_auth_uri,
manage_policyrcd => true,
- fernet_key_repository => '/etc/keystone/fernet-keys/',
- fernet_max_active_keys => '5',
token_expiration => $token_expiration,
default_transport_url => os_transport_url({
'transport' => $::openstack_integration::config::messaging_default_proto,