Ensure Keystone sets check-max-request-body-size

Change-Id: I580669d82c3f37adceb75d5d6f368b09ea41b9da
Closes-Bug: #1819134
Func-Test-PR: https://github.com/openstack-charmers/zaza/pull/198

actions/security_checklist.py

@@ -42,7 +42,8 @@ def uses_sha256_for_hashing_tokens(audit_options):
             algorithm)
 
 
-@audits.audit(audits.is_audit_type(audits.AuditType.OpenStackSecurityGuide),)
+@audits.audit(audits.is_audit_type(audits.AuditType.OpenStackSecurityGuide),
+              audits.since_openstack_release('keystone', 'juno'))
 def check_max_request_body_size(audit_options):
     """Validate that a sane max_request_body_size is set.
 

templates/kilo/keystone.conf

@@ -115,3 +115,7 @@ group_allow_update = False
 group_allow_delete = False
 {% endif -%}
 {% endif -%}
+
+[oslo_middleware]
+# Bug #1819134
+max_request_body_size = 114688

templates/mitaka/keystone.conf

@@ -111,3 +111,6 @@ admin_project_name = admin
 {% endif -%}
 
 {% include "section-oslo-middleware" %}
+# This goes in the section above, selectively
+# Bug #1819134
+max_request_body_size = 114688

templates/ocata/keystone.conf

@@ -126,3 +126,6 @@ admin_project_name = admin
 {% include "parts/section-federation" %}
 
 {% include "section-oslo-middleware" %}
+# This goes in the section above, selectively
+# Bug #1819134
+max_request_body_size = 114688

templates/rocky/keystone.conf

@@ -107,3 +107,6 @@ admin_project_name = admin
 {% include "parts/section-federation" %}
 
 {% include "section-oslo-middleware" %}
+# This goes in the section above, selectively
+# Bug #1819134
+max_request_body_size = 114688