tree 002a701bc5d79ddb9e79a37fb8e1c861ad830647
parent b668ebd74c81ed7d3ba67baf133833f6295c3f55
author Oleksandr Bryndzii <obryndzii@mirantis.com> 1551270203 +0200
committer obryndzii <obryndzii@mirantis.com> 1551358156 +0000

Update keystone default softparams

Moves _param:keystone_tokens_expiration: 3600 definition
into defaults/openstack/init.yml

Add default soft params for the keystone fernet rotation:
keystone_fernet_rotate_rsync_minute = 0
keystone_fernet_rotate_rsync_hour = '*'

Add default soft param for the keystone [token] allow_expired_window:
keystone_tokens_allow_expired_window = ''

Adjuststed the max_active_keys default value according to the following defaults:
``[token] allow_expired_window`` = 172800 (48 hours)
``[token] expiration`` = 3600 (1 hour)
  rotation_frequency = 1 hour (keystone_fernet_rotate_rsync_minute/hour = 0 *)

max_active_keys = (allow_expired_window + expiration)/rotation_frequency + 2
keystone_tokens_max_active_keys = 51

Change-Id: I7a2a252afb34de9f3c7c4a1549f67d534959ecf9
Related-Prod: PROD-27591