Comment 3 for bug 1994029

Revision history for this message
Takashi Kajinami (kajinamit) wrote (last edit ):

The current implementation of the undercloud-tolenflush validation tries to read puppet hieradata from ansible_facts. This is completely wrong and never works. We probably should read keystone.conf instead.
 https://review.opendev.org/c/openstack/tripleo-validations/+/710065

Also, token flush job was already removed, before stable/train release, and TripleO supports only fernet token since then. Probably we should remove the validation completely.
 https://review.opendev.org/c/openstack/tripleo-heat-templates/+/683750

Note that we later re-introduced keystone_cron container to purge expired/deleted trusts. We might want to add a validation for that, though that would be less prioritized.
 https://review.opendev.org/c/openstack/tripleo-heat-templates/+/739383