Specified fernet token keys are not utilised
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
Low
|
Unassigned |
Bug Description
Unfortunately, despite setting the fernet tokens in an environment file used with TripleO, they're not used as expected, and therefore if using a multi-site configuration, one token issued by one site is not automatically valid in another. Inside of the configuration we use the following parameters for fernet:
# Enable fernet tokens
keystone:
keystone:
# Set the fernet token keys
keystone:
'
content: 'pTZtu4rmWkYGVp
'
content: 'IOV0IUtppYRei_
Yet when deployed, we see the following:
[root@region-
tWmKQ_qrzVoh1er
[root@region-
ir7crS67c-
It's my belief that when the 'keystone:
Changed in tripleo: | |
importance: | Undecided → Low |
Changed in tripleo: | |
status: | Expired → Fix Released |
milestone: | none → ocata-3 |
Upon reflection, this is likely a bug in puppet-keystone, not TripleO. Thoughts?