Andrew Bogott has uploaded a new change for review.
https://gerrit.wikimedia.org/r/204256
Change subject: Clean up expired keystone tokens.
......................................................................
Clean up expired keystone tokens.
It looks like we've been leaking tokens for ages, which is making the keystone
database gigantic.
Bug T88256 (maybe)
Change-Id: I7a9a858529d66eb2193676945990d54b89ce931f
---
M modules/openstack/manifests/database-server.pp
1 file changed, 10 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/56/204256/1
diff --git a/modules/openstack/manifests/database-server.pp
b/modules/openstack/manifests/database-server.pp
index eebda02..83eeda2 100644
--- a/modules/openstack/manifests/database-server.pp
+++ b/modules/openstack/manifests/database-server.pp
@@ -172,4 +172,14 @@
command => "/usr/bin/mysql -uroot --password='' mysql <
/etc/nova/mysql.sql",
require => [Class['mysql::server::package'],
File['/etc/nova/mysql.sql']];
}
+
+ # Clean up expired keystone tokens, because keystone seems to leak them
+ cron {
+ 'run-jobs':
+ user => 'root',
+ hour => 8,
+ minute => 0,
+ ensure => present,
+ command => '/usr/bin/mysql $keystone_db_name -u${keystone_db_user}
-p${keystone_db_pass} -e 'DELETE FROM token WHERE NOT
DATE_SUB(CURDATE(),INTERVAL 2 DAY) <= expires;';
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/204256
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I7a9a858529d66eb2193676945990d54b89ce931f
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
