1 From: iberezovskiy <iberezovskiy@mirantis.com>
2 Date: Mon, 19 Sep 2016 12:35:05 +0300
3 Subject: [PATCH] Disable token revoke to increase keystone performance
5 Change-Id: I4df816369093908ad1eac372f38c92155efbe8e0
8 deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp | 2 ++
9 tests/noop/spec/hosts/keystone/keystone_spec.rb | 5 +++++
10 2 files changed, 7 insertions(+)
12 diff --git a/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp b/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
13 index 3162287..ba9d7df 100644
14 --- a/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
15 +++ b/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
16 @@ -327,6 +327,8 @@ class openstack_tasks::keystone::keystone {
17 memcache_pool_unused_timeout => '60',
18 cache_memcache_servers => $memcache_servers,
19 policy_driver => 'keystone.policy.backends.sql.Policy',
20 + # Set revoke_by_id to false according to LP #1625077
21 + revoke_by_id => false,
24 Package<| title == 'keystone'|> ~> Service<| title == 'keystone'|>
25 diff --git a/tests/noop/spec/hosts/keystone/keystone_spec.rb b/tests/noop/spec/hosts/keystone/keystone_spec.rb
26 index b29e691..3c0f847 100644
27 --- a/tests/noop/spec/hosts/keystone/keystone_spec.rb
28 +++ b/tests/noop/spec/hosts/keystone/keystone_spec.rb
29 @@ -176,6 +176,11 @@ describe manifest do
30 should contain_class('keystone').with('sync_db' => primary_controller)
33 + it 'should declare keystone class with revoke_by_id set to false' do
34 + # Set revoke_by_id to false according to LP #1625077
35 + should contain_class('keystone').with('revoke_by_id' => false)
38 it 'should configure keystone with paramters' do
39 should contain_keystone_config('token/caching').with(:value => 'false')
40 should contain_keystone_config('cache/enabled').with(:value => 'true')