Emilien Macchi d5e62607fd keystone: rotate fernet keys every 5 minutes ...

Add fernet keys rotations to our testing.

- Rotate keys every 5 minutes
- Maintain tokens valid 10 minutes
- Keep 4 active keys: (token_expiration / rotation_frequency) +2
  10 / 2 + 2 = 4

The frequencies are very short but that way we can have a real scenario
of fernet keys rotations in our CI jobs where Tempest runs during ~15
minutes.

See example on:
https://docs.openstack.org/admin-guide/identity-fernet-token-faq.html

Change-Id: I3d4133ee3a0e3dc52586a6d671d7ef85a9e886d0
Depends-On: I125e81d8cd130fadb8271f1b7bcdcf9794c79f47

2017-03-21 22:58:54 -04:00

..

aodh.pp

aodh: don't hardcode keystone endpoint version

2017-01-03 11:11:19 -05:00

barbican.pp

Switch to default_transport_url

2016-11-30 11:06:33 -07:00

bind.pp

Re-enable Designate on CentOS7

2017-02-02 22:15:04 +00:00

cacert.pp

scenario002: switch Keystone/Glance/Ironic/Nova to SSL

2016-03-14 16:34:29 -04:00

ceilometer.pp

Merge "Deploy panko, Events service in Telemetry OpenStack"

2016-12-03 17:25:36 +00:00

ceph.pp

Pass rbd_default_features to puppet-ceph

2017-01-13 21:10:04 +00:00

cinder.pp

Switch to default_transport_url

2016-11-30 11:06:33 -07:00

config.pp

In-process token caching is deprecated, use memcached instead

2016-08-05 10:40:16 -04:00

designate.pp

Actually run service validation for designate

2017-03-08 12:25:56 -07:00

ec2api.pp

scenario002: Enable ec2api tempest tests

2016-10-14 18:34:43 +02:00

glance.pp

Remove testing for Glance Registry

2017-01-06 11:11:47 -05:00

gnocchi.pp

Use sync_db option to sync database

2016-12-07 16:58:05 +08:00

heat.pp

heat: don't manage orchestration with openrc file

2017-03-14 19:49:56 -04:00

horizon.pp

Use versionless keystone endpoint for horizon

2016-07-18 15:03:39 +00:00

init.pp

Merge "Revert "Fix ci""

2016-12-16 00:38:14 +00:00

ironic.pp

Switch to default_transport_url

2016-11-30 11:06:33 -07:00

keystone.pp

keystone: rotate fernet keys every 5 minutes

2017-03-21 22:58:54 -04:00

memcached.pp

In-process token caching is deprecated, use memcached instead

2016-08-05 10:40:16 -04:00

mistral.pp

Re-enable Mistral testing

2017-01-06 11:37:59 -05:00

murano.pp

Switch to default_transport_url

2016-11-30 11:06:33 -07:00

mysql.pp

Fix mariadb-libs issue for non p-o-i jobs

2016-12-16 11:47:46 -05:00

neutron.pp

Add extension_drivers = port_security in neutron.pp

2017-03-17 10:20:56 +08:00

nova.pp

Add workaround for cellv2 race condition

2017-03-08 09:24:37 -07:00

panko.pp

Use sync_db option to sync database

2016-12-06 14:41:01 +08:00

params.pp

scenario002: switch Keystone/Glance/Ironic/Nova to SSL

2016-03-14 16:34:29 -04:00

provision.pp

Enable using tempest rpm in a configurable mode

2017-02-08 09:26:26 +00:00

rabbitmq.pp

Disable rabbitmq repo on non-SSL deployments

2016-08-29 10:34:34 -07:00

repos.pp

Switch trunk/cbs/buildlogs to use https

2017-03-21 08:25:03 -04:00

sahara.pp

Remove enable_notifications parameter in sahara.pp

2017-03-10 12:46:49 +08:00

ssl_key.pp

scenario003: enable SSL by default

2016-04-01 20:32:35 -04:00

swift.pp

Increase timeout for swift proxy operations

2017-03-06 13:14:58 +01:00

tempest.pp

Configure api_extensions to test for neutron

2017-03-16 03:20:05 +00:00

trove.pp

Switch to default_transport_url

2016-11-30 11:06:33 -07:00

vitrage.pp

add vitrage

2017-02-14 16:55:08 +02:00

watcher.pp

Add puppet-watcher and enable it in scenario004

2016-11-29 18:41:38 +00:00

zaqar.pp

Switch Zaqar to use Swift for messages storage

2017-03-07 01:55:45 +00:00