Role os_keystone for OpenStack-Ansible
Go to file
Kevin Carter 28a0c5abbf Correct fernet token sync race condition
The fernet token rotation is subject to a race condition when using
aggressive rotation in a high volume, high traffic, high capacity cloud.
This change addresses the potential race condition by converting our
fernet token sync method from rsync to scp and by sorting the fernet
keys in reverse version ordering. This will ensure that the key with
the highest index is always synchronized first and will ensure that
the underlying file structure of a given target node always remains
intact during a sync operation.

Related-Bug: 1816927
Change-Id: I9087d953f7dabe04a2ad19af6121dae71544e5b2
Signed-off-by: Kevin Carter <kevin@cloudnull.com>
2019-02-21 15:36:57 +00:00
defaults Cleanup files and templates using smart sources 2019-01-09 18:30:07 -06:00
doc Remove keystone service user 2018-10-18 09:56:05 -07:00
examples Remove keystone service user 2018-10-18 09:56:05 -07:00
handlers Cleanup files and templates using smart sources 2019-01-09 18:30:07 -06:00
library Resolved Keystone Federation bugs 2017-02-07 21:01:09 -06:00
meta SUSE: Add support for openSUSE Leap 15 2018-09-18 17:45:55 +01:00
releasenotes spelling error 2018-12-31 14:52:53 +08:00
tasks venv: use inventory_hostname instead of ansible_hostname 2019-02-06 10:05:35 -05:00
templates Correct fernet token sync race condition 2019-02-21 15:36:57 +00:00
tests Set container_name as host_var in test inventory 2018-10-20 15:28:29 -07:00
vars Merge "Cleanup files and templates using smart sources" 2019-01-12 12:08:29 +00:00
zuul.d zuul: Switch to distro package installation template 2018-09-28 09:42:36 +01:00
.gitignore Updated from OpenStack Ansible Tests 2018-10-02 14:53:27 +00:00
.gitreview Implement base configuration for independent repository 2016-03-02 10:09:25 -05:00
CONTRIBUTING.rst [Trivial Fix] Replace Chinese punctuation with English punctuation 2018-09-06 10:36:48 +08:00
LICENSE Updated role to be an independent role 2016-02-26 14:13:43 -06:00
README.rst Add bugs url link to README 2018-12-04 02:30:22 -08:00
Vagrantfile Updated from OpenStack Ansible Tests 2018-09-28 06:20:14 +00:00
bindep.txt Updated from OpenStack Ansible Tests 2017-12-06 00:06:13 +00:00
manual-test.rc Use centralised test scripts 2016-09-28 08:56:33 +01:00
run_tests.sh Updated from OpenStack Ansible Tests 2018-09-29 04:54:46 +00:00
setup.cfg Update mailinglist from dev to discuss 2018-12-05 09:16:39 +08:00
setup.py Updated from global requirements 2017-03-02 11:51:52 +00:00
tox.ini fix tox python3 overrides 2018-09-26 18:43:38 -04:00

README.rst

Team and repository tags

image

OpenStack-Ansible keystone

Ansible role that installs and configures OpenStack Keystone. Keystone is installed behind the Apache webserver listening on port 5000 by default.

Documentation for the project can be found at: https://docs.openstack.org/openstack-ansible-os_keystone/latest/

Release notes for the project can be found at: https://docs.openstack.org/releasenotes/openstack-ansible-os_keystone/

The project source code repository is located at: https://git.openstack.org/cgit/openstack/openstack-ansible-os_keystone/

The project home is at: https://launchpad.net/openstack-ansible

The project bug tracker is located at: https://bugs.launchpad.net/openstack-ansible