Bug 1212126

Summary: keystone: add token flush cronjob script to keystone package
Product: [Community] RDO Reporter: Christian Berendt <berendt>
Component: openstack-keystoneAssignee: Alan Pevec (Fedora) <apevec>
Status: CLOSED EOL QA Contact: Mike Abrams <mabrams>
Severity: high Docs Contact:
Priority: unspecified    
Version: trunkCC: apevec, ayoung, dyocum, Jan.van.Eldik, srevivo, ukalifon
Target Milestone: ---   
Target Release: Kilo   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-05-19 15:37:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Christian Berendt 2015-04-15 15:30:19 UTC
This is a feature request. Please back port to the Kilo packages.

Can you please add a hourly token flush cronjob script to the keystone package like seen in other distributions? At the moment we manually add this cronjob in the installation guide with the following command:

# (crontab -l -u keystone 2>&1 | grep -q token_flush) || \
  echo '@hourly /usr/bin/keystone-manage token_flush
> /var/log/keystone/keystone-tokenflush.log 2>&1' \
  >> /var/spool/cron/keystone

It would be nice to be able to remove this command for RDO, it is only necessary with RDO at the moment.

Comment 1 Alan Pevec (Fedora) 2015-04-15 16:31:24 UTC
IIRC Packstack installer might be adding that cron job but agreed, it makes sense in the package.

Comment 2 Christian Berendt 2015-04-15 16:35:30 UTC
Yes, it is part of Packstack at the moment. Has to be removed there when adding it to the package.

https://github.com/stackforge/packstack/blob/master/packstack/puppet/templates/keystone.pp#L116-L127

Comment 3 Udi Kalifon 2015-04-16 12:04:11 UTC
As far as I can remember, this job is supposed to run every minute (not every hour).

Comment 4 Udi Kalifon 2015-06-01 09:28:15 UTC
See also bug 1173970 which is currently ON_QA so hoopefully we'll be able to verify it soon.

Comment 5 Dan Yocum 2015-12-07 18:26:23 UTC
This is killing OSP-d.  Please fix post haste.

Comment 6 Chandan Kumar 2016-05-19 15:37:42 UTC
This bug is against a Version which has reached End of Life.
If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.