Add support to configure token caching

Add a new parameter named KeystoneEnableTokenCaching to enable
caching for keystone token to improve performance related to
token management.

Depends-on: https://review.opendev.org/#/c/683010
Change-Id: Id8b33837eebbe18417d4c349e73817aa8f660091
This commit is contained in:
Takashi Kajinami 2019-09-19 09:51:31 +09:00
parent 2317c48e70
commit db35747962
2 changed files with 11 additions and 0 deletions

View File

@ -350,6 +350,11 @@ parameters:
default: ''
description: >-
OAuth 2.0 introspection endpoint for mod_auth_openidc
KeystoneEnableTokenCaching:
type: boolean
default: false
description: >-
Enable token caching
resources:
@ -438,6 +443,7 @@ outputs:
content: {get_param: KeystoneCredential1}
keystone::fernet_keys: {get_param: KeystoneFernetKeys}
keystone::fernet_replace_keys: {get_param: ManageKeystoneFernetKeys}
tripleo::profile::base::keystone::enable_token_caching: {get_param: KeystoneEnableTokenCaching}
keystone::logging::debug:
if:
- service_debug_unset

View File

@ -0,0 +1,5 @@
---
features:
- |
A new parameter, KeystoneEnabledTokenCaching is available to enable token
caching in keystone, which is disabled by default.