Remove cache invalidation when using expired token
This can create a race condition for long running services that reuse
their token (eg. Kubernetes Cinder CSI plugin) in this case for
example:
1 [user] Asks nova to attach a volume to a server
2 ...the user's token expires
3 [user] Asks cinder if the volume has been attached
4 [nova] Asks cinder to attach the volume
In step 3 the token is marked as invalid in the cache and step 4 fails
even if allow_expired is true
Closes-Bug: #1987355
(cherry picked from commit e05466c5f439cd05482f109e6eb97a50ba156698)
Change-Id: I4ee2e01666b167edf8b5e0d04d1c63ea842a691e
Reviewed: https:/ /review. opendev. org/c/openstack /keystonemiddle ware/+/ 889191 /opendev. org/openstack/ keystonemiddlew are/commit/ b80dd8cdf848986 e71112f16f26d91 0e447d27fd
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/ussuri
commit b80dd8cdf848986 e71112f16f26d91 0e447d27fd
Author: Jorge Merlino <email address hidden>
Date: Wed Oct 5 14:41:06 2022 -0300
Remove cache invalidation when using expired token
This can create a race condition for long running services that reuse
their token (eg. Kubernetes Cinder CSI plugin) in this case for
example:
1 [user] Asks nova to attach a volume to a server
2 ...the user's token expires
3 [user] Asks cinder if the volume has been attached
4 [nova] Asks cinder to attach the volume
In step 3 the token is marked as invalid in the cache and step 4 fails
even if allow_expired is true
Closes-Bug: #1987355 5482f109e6eb97a 50ba156698) edf8b5e0d04d1c6 3ea842a691e
(cherry picked from commit e05466c5f439cd0
Change-Id: I4ee2e01666b167