openstack/kolla-ansible
Code Issues Proposed changes
ba8c27f554
kolla-ansible/ansible/roles
History
Mark Goddard ba8c27f554 Fix keystone-startup.sh - remove Fernet key age check 
Currently we check the age of the primary Fernet key on Keystone
startup, and fail if it is older than the rotation interval. While this
may seem sensible, there are various reasons why the key may be older
than this:

* if the rotation interval is not a factor of the number of seconds in a
  week, the rotation schedule will be lumpy, with the last rotation
  being up to twice the nominal rotation interval
* if a keystone host is unavailable at its scheduled rotation time,
  rotation will not happen. This may happen multiple times

We could do several things to avoid this issue:

1. remove the check on the age of the key
2. multiply the rotation interval by some factor to determine the
   allowed key age

This change goes for the more simple option 1. It also cleans up some
terminology in the keystone-startup.sh script.

Closes-Bug: #1895723

Change-Id: I2c35f59ae9449cb1646e402e0a9f28ad61f918a8
2020-10-22 09:20:02 +01:00
..
aodh
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
barbican
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
baremetal
baremetal: Install iptables for Docker if enabled
2020-10-08 17:48:57 +01:00
bifrost
Allow setting container_proxy per service
2020-09-22 10:54:40 +02:00
blazar
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
ceilometer
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
certificates
Fix haproxy bundle generation
2020-10-08 16:57:16 +02:00
chrony
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
cinder
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
cloudkitty
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
collectd
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
common
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
cyborg
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
designate
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
destroy
remove useless files from destroy role
2020-08-22 23:21:00 +08:00
elasticsearch
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
etcd
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
freezer
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
glance
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
gnocchi
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
grafana
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
haproxy
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
haproxy-config
Add support for with_frontend and with_backend
2020-09-22 17:26:42 +02:00
heat
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
horizon
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
influxdb
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
ironic
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
iscsi
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
kafka
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
karbor
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
keystone
Fix keystone-startup.sh - remove Fernet key age check
2020-10-22 09:20:02 +01:00
kibana
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
kuryr
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
magnum
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
manila
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
mariadb
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
masakari
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
memcached
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
mistral
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
module-load
Drop support for /etc/modules
2020-08-25 20:20:57 +01:00
monasca
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
multipathd
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
murano
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
neutron
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
nova
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
nova-cell
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
octavia
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
octavia-certificates
octavia: generate certificates automatically
2020-10-08 16:50:30 +02:00
openvswitch
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
ovn
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
ovs-dpdk
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
panko
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
placement
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
prechecks
Bump minimum Ansible version to 2.9
2020-09-23 17:48:01 +02:00
prometheus
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
prune-images
Performance: replace unconditional include_tasks with import_tasks
2020-08-28 16:12:03 +00:00
qdrouterd
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
qinling
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
rabbitmq
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
rally
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
redis
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
sahara
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
searchlight
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
senlin
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
service-cert-copy/tasks
Add support for encrypting backend Keystone HAProxy traffic
2020-04-09 09:22:55 +00:00
service-ks-register
Remove delegate_to from service-ks-register tasks
2019-09-26 10:38:35 +01:00
service-precheck
Add Ansible group check to prechecks
2020-02-28 16:23:14 +00:00
service-rabbitmq
Configure RabbitMQ user tags in nova-cell role
2020-05-15 16:02:46 +01:00
service-stop/tasks
Fix kolla-ansible stop with heterogeneous hosts
2020-03-23 17:21:53 +00:00
skydive
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
solum
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
storm
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
swift
Performance: replace unconditional include_tasks with import_tasks
2020-08-28 16:12:03 +00:00
tacker
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
telegraf
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
tempest
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
trove
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
vitrage
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
vmtp
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
watcher
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
zookeeper
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00
zun
Performance: optimize genconfig
2020-10-12 19:30:06 +02:00