add user option to ignore user inactivity period

[Pavlo Shchelokovskyy]

Heat's bug: https://storyboard.openstack.org/#!/story/2005210

Heat creates service users in its dedicated domain on the fly. These are crucial in situations that require deferred authentications, for example autoscaling.

While it is currently possible to ignore some settings in [security_compliance] sections of Keystone for specific users, there's no way to ignore the "disable_user_account_days_inactive" setting.

It is proposed to add such user option (similar to those already existing ones) to ignore this setting for a given user

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/656898

[Vishakha Agarwal (vishakha.agarwal)]

Hi. Is anyone working over this?

[Pavlo Shchelokovskyy (pshchelo)]

Hi Vishaka,

same comment as in another issue - please take over if having time.

[Vishakha Agarwal (vishakha.agarwal)]

Thanks Pavlo

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/656898
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=c9c655a1e1e865a1f4e274c0aaea1749acc8a53b
Submitter: Zuul
Branch: master

commit c9c655a1e1e865a1f4e274c0aaea1749acc8a53b
Author: Pavlo Shchelokovskyy <email address hidden>
Date: Thu May 2 16:50:56 2019 -0600

    Add ignore_user_inactivity user option

    this option allows to override the
    [security_compliance]disable_user_account_days_inactive setting from
    config on per-user basis.

    Co-Authored-By: Vishakha Agarwal <email address hidden>

    Change-Id: Ida360e215426184195687bee2a800877af33af04
    Closes-Bug: #1827431