[puppet][keystone] Need to set [token]revoke_by_id=False in keystone.conf

Bug #1625077 reported by Timur Nurlygayanov
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mirantis OpenStack
Status tracked in 10.0.x
10.0.x
Fix Released
High
Ivan Berezovskiy

Bug Description

We have revoke_by_id option enabled by default and as we have discussed with Keystone team (Alexander Makarov) it can seriously affect performance and also we can see the following errors in keystone logs during the Tempest tests execution on CI:

http://paste.openstack.org/show/580943/
http://paste.openstack.org/show/580944/
http://paste.openstack.org/show/580947/

To fix the issue we need to set the parameter [token]revoke_by_id=False, it will increase the performance and probably fix the issue with 401 errors on CI (we are going to test it).

The priority is critical because we need to fix the issue in MOS 9.1 release and the issue affects 100+ Tempest tests.

description: updated
Changed in mos:
importance: Undecided → Critical
status: New → Confirmed
assignee: nobody → Fuel Sustaining (fuel-sustaining-team)
milestone: none → 9.1
tags: added: area-puppet tempest
no longer affects: mos/9.x
Changed in mos:
assignee: Fuel Sustaining (fuel-sustaining-team) → Maksim Malchuk (mmalchuk)
Revision history for this message
Timur Nurlygayanov (tnurlygayanov) wrote :
Changed in mos:
status: Confirmed → In Progress
assignee: Maksim Malchuk (mmalchuk) → nobody
assignee: nobody → Ivan Berezovskiy (iberezovskiy)
Changed in mos:
importance: Critical → High
Changed in mos:
status: In Progress → Fix Committed
Revision history for this message
Oleksiy Butenko (obutenko) wrote :

verified on 9.1 snapshot #299

Changed in mos:
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0rc1

This issue was fixed in the openstack/fuel-library 10.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0

This issue was fixed in the openstack/fuel-library 10.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.