Configure keystone http timeouts for dcmanager

The dcmanager currently has no http_connect_timeout set for
keystone connections. That can result in an attempt to contact
keystone (e.g. to get a token) taking several minutes to
timeout if the keystone api is not reachable (e.g. if a subcloud
is powered down).

Changing the http_connect_timeout to 10s and configuring
http_request_max_retries as 3 (that is also the default but
adding this to the puppet module allows for easy changes in the
future).

Change-Id: I6a62846e7f4e75e9b2f0705f59818243ea909e41
Partial-Bug: 1854894
Signed-off-by: Bart Wensley <barton.wensley@windriver.com>
This commit is contained in:
Bart Wensley 2020-01-20 12:28:20 -06:00
parent b2d4e41822
commit 1b5372b52c
1 changed files with 4 additions and 0 deletions

View File

@ -95,6 +95,8 @@ class dcmanager::api (
$keystone_identity_uri = false,
$keystone_user_domain = 'Default',
$keystone_project_domain = 'Default',
$keystone_http_connect_timeout = '10',
$keystone_http_request_max_retries = '3',
$auth_type = 'password',
$service_port = '5000',
$package_ensure = 'latest',
@ -151,6 +153,8 @@ class dcmanager::api (
'keystone_authtoken/password': value => $keystone_password, secret=> true;
'keystone_authtoken/user_domain_name': value => $keystone_user_domain;
'keystone_authtoken/project_domain_name': value => $keystone_project_domain;
'keystone_authtoken/http_connect_timeout': value => $keystone_http_connect_timeout;
'keystone_authtoken/http_request_max_retries': value => $keystone_http_request_max_retries;
}
dcmanager_config {
'cache/admin_tenant': value => $keystone_admin_tenant;