yahoo-eng-team team mailing list archive

[Adam Young <1555137@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

To minimize downtime, the conversion from persisted to ephemeral tokens
should happen in two steps.  The first migrates tokens over to the
Fernet format, but will fall back to persisted store if the requested
token is not in Fernet format.  The second removes persistence.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1555137

Title:
  Transition from UUID/PKI to Fernet without dumping all tokens

Status in OpenStack Identity (keystone):
  New

Bug description:
  To minimize downtime, the conversion from persisted to ephemeral
  tokens should happen in two steps.  The first migrates tokens over to
  the Fernet format, but will fall back to persisted store if the
  requested token is not in Fernet format.  The second removes
  persistence.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1555137/+subscriptions