OpenStack Identity (keystone)

  1. Bug #1642457
  2. Comment #1

Comment 1 for bug 1642457

Revision history for this message
Lance Bragstad (lbragstad) wrote : Re: Root partition full on any control node makes master Fernet keys empty on all nodes

Hi John,

Would you be able to check the contents of the key? It looks like the staged key, or the zero key (0), doesn't contain *anything*. As a result, the MultiFernet object is unable to initialize itself. The error being reported by keystone is actually coming from the fernet library [0].

How many max_active_keys are you using? More than 11? Are there any keys in your key repository that you know are stale and you can remove?

[0] https://github.com/pyca/cryptography/blob/7ff4c8fe2400244a2e6e2a86bc015b2025907b5a/src/cryptography/fernet.py#L35-L38