Michal Nasiadka 0799782ce8 Fix keystone fernet bootstrap
There are cases when a multinode deployment ends up in unusable
keystone public wsgi on some nodes.

The root cause is that keystone public wsgi doesn't find fernet
keys on startup - and then persists on sending 500 errors to any
requests - due to a race condition between
fernet_setup/fernet-push.sh and keystone startup.

Depends-On: https://review.opendev.org/703742/
Change-Id: I63709c2e3f6a893db82a05640da78f492bf8440f
Closes-Bug: #1846789
2020-02-03 13:41:11 +01:00

20 lines
327 B
YAML

---
- include_tasks: config.yml
- include_tasks: clone.yml
when:
- keystone_dev_mode | bool
- include_tasks: bootstrap.yml
- name: Flush handlers
meta: flush_handlers
- include_tasks: distribute_fernet.yml
when:
- keystone_token_provider == 'fernet'
- include_tasks: register.yml
- include_tasks: check.yml