[os_keystone] fernet_token block still configured even though keystone_token_provider is uuid

[Miguel Alejandro Cantu]

It seems as if there is a conditional missing here that applies the fernet_token block depending on whether or not fernet is being used as a keystone token provider.

https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone.conf.j2#L77-L80

I'm not sure if this changes the behavior of keystone in any way, but regardless that block should not appear in the keystone.conf file when keystone_token_provider is not fernet.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/413176

[Lance Bragstad (lbragstad)]

For what it's worth - the `keystone.conf [fernet_tokens]` block should have no affect on keystone's behavior, even if the token provider is `uuid`. The options are only used when `keystone.conf [token] provider = fernet`.

I would agree that it can be misleading to have fernet options defined when not being used. I'd be happy to review the fix!

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/413176
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_keystone/commit/?id=b82d81c0548ce87bcee7a9a8f4f2fe6cbcf3389a
Submitter: Jenkins
Branch: master

commit b82d81c0548ce87bcee7a9a8f4f2fe6cbcf3389a
Author: Travis Truman <email address hidden>
Date: Tue Dec 20 11:50:22 2016 -0500

    Include fernet config block only when fernet tokens are used

    Change-Id: Idddab83b63270f47af1384e57b4c621968c5edc8
    Closes-Bug: #1651511

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone 15.0.0.0b3 development milestone.