Identity v3 PKI token over 8k does not work

[Dag Stenstad]

A known problem when using Identity v3 PKI tokens is that the token will grow over 8k in size if you have a lot of entries in your catalog or lots of groups. The default max header length in eventlet.wsgi is 8k, and requests with a header over that size will fail.

I think the default of wsgi.MAX_HEADER_LINE should be set to 16384, and ultimately it should probably be configurable in the [service:api] section in designate.conf. I see nova and neutron uses the config entry "max_header_line" for this in the [DEFAULT] section.

In the future, when everyone switches to PKIZ or use ?nocatalog when requesting tokens, this will probably not be an issue. But it is right now.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/181892

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/181892
Committed: https://git.openstack.org/cgit/openstack/designate/commit/?id=8df61d4e5b870e09b9cbe9e7dd024d9734f272dc
Submitter: Jenkins
Branch: master

commit 8df61d4e5b870e09b9cbe9e7dd024d9734f272dc
Author: Dag Stenstad <email address hidden>
Date: Mon May 11 15:29:09 2015 +0200

    Add support for settings wsgi MAX_HEADER_LINE

    Changes default from 8192 to 16384 and adds a configuration option.

    Change-Id: Ia6dc883c60e32e54124fc4d9e5853021c861c284
    Closes-Bug: 1453591