Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/keystone-manage-token-flush-periodically.

Description:

With the H release, keystone-manage  has a new parameter called "token_flush" to flush the expired tokens (see https://blueprints.launchpad.net/keystone/+spec/keystone-manage-token-flush).
This is still a manual task which needs to be done by operations. 

There should be a periodic task in keystone to flush the expired tokens automatically.

I propose to add a new config parameter to the [token] section called "flush_period". This value is an integer (in seconds). If 0, the automatic flushing is disabled. So a possible keystone.conf looks like:

[token]
...
flush_period=3600
...

With this configuration, the expired tokens are every hour deleted.
To implement this, a ThreadGroup.add_timer() from openstack.common can be used.

Specification URL (additional information):

None