tree 6d80038f054f583ad38ee19cee562ef6f99f5d8e
parent 0056f12dfedc27d525dfcb4d537c025e56fb9b08
author Oleksandr Bryndzii <obryndzii@mirantis.com> 1551270203 +0200
committer obryndzii <obryndzii@mirantis.com> 1553601482 +0000

Update keystone default softparams

Moves _param:keystone_tokens_expiration: 3600 definition
into defaults/openstack/init.yml

Add default soft params for the keystone fernet rotation:
keystone_fernet_rotate_rsync_minute = 0
keystone_fernet_rotate_rsync_hour = '*'

Add default soft param for the keystone [token] allow_expired_window:
keystone_tokens_allow_expired_window = ''

Adjuststed the max_active_keys default value according to the following defaults:
``[token] allow_expired_window`` = 172800 (48 hours)
``[token] expiration`` = 3600 (1 hour)
  rotation_frequency = 1 hour (keystone_fernet_rotate_rsync_minute/hour = 0 *)

max_active_keys = (allow_expired_window + expiration)/rotation_frequency + 2
keystone_tokens_max_active_keys = 51

Change-Id: I7a2a252afb34de9f3c7c4a1549f67d534959ecf9
Related-Prod: PROD-27591
(cherry picked from commit 1558a8ee927fa4f952fa4fd5c4c0e4adbaa6d03e)

Set default keystone_tokens_allow_expired_window

Set keystone_tokens_allow_expired_window = 172800

Change-Id: I65595c09ed31c302d4cdec52e73bc52abc58d80d
Related-Prod: PROD-27591
(cherry picked from commit 8b98a638d7243f4eab10da8ca6a5e728a60c2deb)