max active keys for fernet

Change-Id: I4fafaee9c6203139f276b68c21904ec400133003
This commit is contained in:
Jakub Pavlik 2016-09-01 10:49:14 +02:00
parent 1984148f01
commit 6b0b74a4d7
5 changed files with 5 additions and 3 deletions

View File

@ -167,6 +167,7 @@ Keystone fernet tokens for OpenStack Kilo release
...
tokens:
engine: fernet
max_active_keys: 3
...
Keystone domain with LDAP backend, using SQL for role/project assignment

View File

@ -697,7 +697,7 @@ key_repository = {{ server.tokens.location }}
# key. Increasing this value means that additional secondary keys will be kept
# in the rotation. (integer value)
#max_active_keys = 3
max_active_keys={{ server.tokens.get('max_active_keys', '3') }}
[identity]

View File

@ -823,7 +823,7 @@ key_repository = {{ server.tokens.location }}
# key. Increasing this value means that additional secondary keys will be kept
# in the rotation. (integer value)
#max_active_keys = 3
max_active_keys={{ server.tokens.get('max_active_keys', '3') }}
[identity]

View File

@ -877,7 +877,7 @@ key_repository = {{ server.tokens.location }}
# key. Increasing this value means that additional secondary keys will be kept
# in the rotation. (integer value)
#max_active_keys = 3
max_active_keys={{ server.tokens.get('max_active_keys', '3') }}
[identity]

View File

@ -25,6 +25,7 @@ keystone:
engine: fernet
expiration: 86400
location: /etc/keystone/fernet-keys/
max_active_keys: 4
cache:
engine: memcached
members: