1 From ba542dde34743b276547b7ca3c6591feb9000877 Mon Sep 17 00:00:00 2001
2 From: iberezovskiy <iberezovskiy@mirantis.com>
3 Date: Mon, 19 Sep 2016 12:35:05 +0300
4 Subject: [PATCH] Disable token revoke to increase keystone performance
6 Change-Id: I4df816369093908ad1eac372f38c92155efbe8e0
9 .../openstack_tasks/manifests/keystone/keystone.pp | 2 ++
10 tests/noop/spec/hosts/keystone/keystone_spec.rb | 5 +++++
11 2 files changed, 7 insertions(+)
13 diff --git a/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp b/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
14 index 3162287..ba9d7df 100644
15 --- a/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
16 +++ b/deployment/puppet/openstack_tasks/manifests/keystone/keystone.pp
17 @@ -327,6 +327,8 @@ class openstack_tasks::keystone::keystone {
18 memcache_pool_unused_timeout => '60',
19 cache_memcache_servers => $memcache_servers,
20 policy_driver => 'keystone.policy.backends.sql.Policy',
21 + # Set revoke_by_id to false according to LP #1625077
22 + revoke_by_id => false,
25 Package<| title == 'keystone'|> ~> Service<| title == 'keystone'|>
26 diff --git a/tests/noop/spec/hosts/keystone/keystone_spec.rb b/tests/noop/spec/hosts/keystone/keystone_spec.rb
27 index b29e691..3c0f847 100644
28 --- a/tests/noop/spec/hosts/keystone/keystone_spec.rb
29 +++ b/tests/noop/spec/hosts/keystone/keystone_spec.rb
30 @@ -176,6 +176,11 @@ describe manifest do
31 should contain_class('keystone').with('sync_db' => primary_controller)
34 + it 'should declare keystone class with revoke_by_id set to false' do
35 + # Set revoke_by_id to false according to LP #1625077
36 + should contain_class('keystone').with('revoke_by_id' => false)
39 it 'should configure keystone with paramters' do
40 should contain_keystone_config('token/caching').with(:value => 'false')
41 should contain_keystone_config('cache/enabled').with(:value => 'true')