Comment 24 for bug 1987355

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystonemiddleware (stable/ussuri)

Reviewed: https://review.opendev.org/c/openstack/keystonemiddleware/+/889191
Committed: https://opendev.org/openstack/keystonemiddleware/commit/b80dd8cdf848986e71112f16f26d910e447d27fd
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit b80dd8cdf848986e71112f16f26d910e447d27fd
Author: Jorge Merlino <email address hidden>
Date: Wed Oct 5 14:41:06 2022 -0300

    Remove cache invalidation when using expired token

    This can create a race condition for long running services that reuse
    their token (eg. Kubernetes Cinder CSI plugin) in this case for
    example:

    1 [user] Asks nova to attach a volume to a server
    2 ...the user's token expires
    3 [user] Asks cinder if the volume has been attached
    4 [nova] Asks cinder to attach the volume

    In step 3 the token is marked as invalid in the cache and step 4 fails
    even if allow_expired is true

    Closes-Bug: #1987355
    (cherry picked from commit e05466c5f439cd05482f109e6eb97a50ba156698)
    Change-Id: I4ee2e01666b167edf8b5e0d04d1c63ea842a691e