openstack/kolla-ansible
Code Issues Proposed changes

Disable revoke_by_id in keystone

Browse Source 
revoke api is only used when using kvs revoke driver. In most of case it
is useless and unnecessary.

Change-Id: I6afaf32574330e3ee57435f688c41ae74dbdf7ed
Closes-Bug: #1664026
This commit is contained in:
Jeffrey Zhang 2017-02-13 21:27:04 +08:00
parent 96185846c3
commit ba023042b2
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/keystone/templates/keystone.conf.j2
View File

@ -21,6 +21,7 @@ domain_config_dir = /etc/keystone/domains
{% endif %} {% endif %}
[token] [token]
revoke_by_id = False
{% if keystone_token_provider == 'uuid' %} {% if keystone_token_provider == 'uuid' %}
provider = uuid provider = uuid
{% elif keystone_token_provider == 'fernet' %} {% elif keystone_token_provider == 'fernet' %}