For those wondering why operators can’t always upgrade sooner, I can add a
little bit of color: In our clouds, we have a couple vendors (one network
plugin, one cinder driver) and those vendors typically are 1-3 releases behind
‘cutting edge’. By the time they support the version we want to
resources.
We recommend that you use cron to configure a periodic task that purges expired
tokens
hourly:
# (crontab -l -u keystone 21 | grep -q token_flush) || \
echo '@hourly /usr/bin/keystone-manage token_flush /var/log/keystone/
keystone-tokenflush.log 21' \
/var/spool/cron/keystone
Mike
