Undercloud keystone caching enabled with dogpile.cache.null backend

[Rabi Mishra]

We use ::os_service_default which enables global toggle for keystone caching and also token caching is enabled.

We added keystone::memcache_servers in commit[1]. However, we still use ::os_service_default for cache_backend[2] which sets it to dogpile.cache.null and effectively disabling all caching for keystone.

As we use fernet as the default provider since ocata and memcached service is enabled in undercloud by default. So we should change the driver to use dogpile.cache.memcached instead.

As per keystone docs[3]

"Fernet has the highest scalability characteristics overall, but requires more work to validate, and therefore enabling caching ([cache] enable) is absolutely critical"

[1] https://github.com/openstack/tripleo-heat-templates/commit/19fec5d9d06a84e7dd21e1e60784b48365b34902

[2] https://github.com/openstack/puppet-keystone/blob/master/manifests/init.pp#L78

[3] https://docs.openstack.org/keystone/latest/admin/configuration.html#performance-and-scaling

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/664781

[Bogdan Dobrelya (bogdando)]

Raised to high as caching should technically boost undercloud capabilities for managing nodes and deployments for the larger scale

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/664781
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=e2a4d90aad3a6978ea9a6e4de132adca51df0c15
Submitter: Zuul
Branch: master

commit e2a4d90aad3a6978ea9a6e4de132adca51df0c15
Author: Rabi Mishra <email address hidden>
Date: Wed Jun 12 10:29:25 2019 +0530

    Set cache_backend for token caching

    'fernet' is the token provider since octata. As we've memcached
    in the undercloud, we should enable caching by setting
    cache_backend to 'dogpile.cache.memcached'.

    Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
    Closes-Bug: #1832437

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/665277

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.opendev.org/665278

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/665277
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0f5bc4d1b5ceedb6b4b5de6ef16e569d4b349c26
Submitter: Zuul
Branch: stable/stein

commit 0f5bc4d1b5ceedb6b4b5de6ef16e569d4b349c26
Author: Rabi Mishra <email address hidden>
Date: Wed Jun 12 10:29:25 2019 +0530

    Set cache_backend for token caching

    'fernet' is the token provider since octata. As we've memcached
    in the undercloud, we should enable caching by setting
    cache_backend to 'dogpile.cache.memcached'.

    Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
    Closes-Bug: #1832437
    (cherry picked from commit e2a4d90aad3a6978ea9a6e4de132adca51df0c15)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/665278
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=d37bdf779a351e09cc4b1afa386f647c03d417fe
Submitter: Zuul
Branch: stable/rocky

commit d37bdf779a351e09cc4b1afa386f647c03d417fe
Author: Rabi Mishra <email address hidden>
Date: Wed Jun 12 10:29:25 2019 +0530

    Set cache_backend for token caching

    'fernet' is the token provider since octata. As we've memcached
    in the undercloud, we should enable caching by setting
    cache_backend to 'dogpile.cache.memcached'.

    Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
    Closes-Bug: #1832437
    (cherry picked from commit e2a4d90aad3a6978ea9a6e4de132adca51df0c15)

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/rocky
Review: https://review.opendev.org/665854

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/queens
Review: https://review.opendev.org/665855

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/665854
Committed: https://git.openstack.org/cgit/openstack/instack-undercloud/commit/?id=b18bfae6903f84dd7db596ee7b5caa3e0b43f0a7
Submitter: Zuul
Branch: stable/rocky

commit b18bfae6903f84dd7db596ee7b5caa3e0b43f0a7
Author: Rabi Mishra <email address hidden>
Date: Tue Jun 18 09:22:18 2019 +0530

    Enable keystone token caching

    'fernet' is the token provider since octata. As we've memcached
    in the undercloud, we should enable caching.

    Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
    Related-Bug: #1832437

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/665855
Committed: https://git.openstack.org/cgit/openstack/instack-undercloud/commit/?id=2e54de832e77c15450050300919c481be2ef361f
Submitter: Zuul
Branch: stable/queens

commit 2e54de832e77c15450050300919c481be2ef361f
Author: Rabi Mishra <email address hidden>
Date: Tue Jun 18 09:22:18 2019 +0530

    Enable keystone token caching

    'fernet' is the token provider since octata. As we've memcached
    in the undercloud, we should enable caching.

    Change-Id: I4b040d25b2cb83f40cbd8e8caf6890feba586b60
    Related-Bug: #1832437
    (cherry picked from commit b18bfae6903f84dd7db596ee7b5caa3e0b43f0a7)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 9.4.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 10.6.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.1.0 release.