Mark Goddard 09e29d0db9 Don't rotate keystone fernet keys during deploy ...

When running deploy or reconfigure for Keystone,
ansible/roles/keystone/tasks/deploy.yml calls init_fernet.yml,
which runs /usr/bin/fernet-rotate.sh, which calls keystone-manage
fernet_rotate.

This means that a token can become invalid if the operator runs
deploy or reconfigure too often.

This change splits out fernet-push.sh from the fernet-rotate.sh
script, then calls fernet-push.sh after the fernet bootstrap
performed in deploy.

Change-Id: I824857ddfb1dd026f93994a4ac8db8f80e64072e
Closes-Bug: #1833729

2019-06-27 08:41:27 +00:00

..

crontab.j2

Fix keystone fernet file exchange via ssh

2016-10-12 16:29:34 +00:00

fernet-node-sync.sh.j2

Use internal interface to connect with keystone_ssh

2017-10-10 06:57:42 +00:00

fernet-push.sh.j2

Don't rotate keystone fernet keys during deploy

2019-06-27 08:41:27 +00:00

fernet-rotate.sh.j2

Don't rotate keystone fernet keys during deploy

2019-06-27 08:41:27 +00:00

id_rsa

Fix keystone fernet file exchange via ssh

2016-10-12 16:29:34 +00:00

id_rsa.pub

Fix keystone fernet file exchange via ssh

2016-10-12 16:29:34 +00:00

keystone-fernet.json.j2

Don't rotate keystone fernet keys during deploy

2019-06-27 08:41:27 +00:00

keystone-ssh.json.j2

Change default permissions in jinja templates.

2017-05-26 12:29:02 +01:00

keystone.conf.j2

Fix keystone fernet key rotation scheduling

2019-05-17 14:05:48 +01:00

keystone.json.j2

Fix keystone domains directory permissions

2018-10-23 07:24:49 +02:00

ssh_config.j2

Fix keystone fernet file exchange via ssh

2016-10-12 16:29:34 +00:00

sshd_config.j2

Generalize api_interface_address variable usage

2017-05-23 08:35:15 +00:00

wsgi-keystone.conf.j2

Fix ubuntu binary deploys

2019-04-10 08:55:25 +01:00