Bug 1382799

Summary: [RFE][Docs][keystone] Fernet Token Support
Product: Red Hat OpenStack Reporter: Adam Young <ayoung>
Component: documentationAssignee: Martin Lopes <mlopes>
Status: CLOSED CURRENTRELEASE QA Contact: RHOS Documentation Team <rhos-docs>
Severity: high Docs Contact:
Priority: high    
Version: 9.0 (Mitaka)CC: jdennis, lbopf, markmc, mlopes, nkinder, nlevinki, rduartes, scohen, srevivo
Target Milestone: ---Keywords: FutureFeature
Target Release: 10.0 (Newton)   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: openstack-keystone-10.0.0-1.el7ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 1325541 Environment:
Last Closed: 2016-11-08 02:21:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1325541, 1382803    
Bug Blocks: 1336533    

Comment 1 Adam Young 2016-10-07 18:37:23 UTC
Process is Documented here:

http://adam.younglogic.com/2016/09/fernet-overcloud/

Comment 2 Rodrigo Duarte 2016-10-07 18:47:57 UTC
As additional information, please consider adding a "note" in the official document stating that the keys in the controller nodes should not be changed manually. All controller nodes should have the exact same set of fernet keys, otherwise a token generated by one controller won't be accepted in another.