openstack/openstack-ansible-os_ironic
Code Issues Proposed changes

Remove pki support

Browse Source 
Change-Id: I12359451e4116d1ff2b522f7fd0c43dd6fc64053
Implements: blueprint remove-pki
This commit is contained in:
ZhongShengping 2016-12-29 13:33:46 +08:00
parent 39adb20596
commit 776885fcaf
1 changed files with 0 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/ironic.conf.j2
View File

@ -80,7 +80,6 @@ region_name = {{ ironic_service_region }}
[keystone_authtoken]
insecure = {{ keystone_service_internaluri_insecure | bool }}
auth_type = {{ ironic_keystone_auth_plugin }}
signing_dir = {{ ironic_system_home_folder }}/cache/api
auth_url = {{ keystone_service_adminuri }}
auth_uri = {{ keystone_service_internaluri }}
project_domain_id = {{ ironic_service_project_domain_id }}
@ -93,15 +92,11 @@ region_name = {{ keystone_service_region }}
memcached_servers = {{ memcached_servers }}
token_cache_time = 300
revocation_cache_time = 60
# if your memcached server is shared, use these settings to avoid cache poisoning
memcache_security_strategy = ENCRYPT
memcache_secret_key = {{ memcached_encryption_key }}
# if your keystone deployment uses PKI, and you value security over performance:
check_revocations_for_cached = False
[matchmaker_redis]
[neutron]