From 776885fcaf52e6356491784fd244632880f9a1f2 Mon Sep 17 00:00:00 2001 From: ZhongShengping Date: Thu, 29 Dec 2016 13:33:46 +0800 Subject: [PATCH] Remove pki support Change-Id: I12359451e4116d1ff2b522f7fd0c43dd6fc64053 Implements: blueprint remove-pki --- templates/ironic.conf.j2 | 5 ----- 1 file changed, 5 deletions(-) diff --git a/templates/ironic.conf.j2 b/templates/ironic.conf.j2 index 0717c007..f59562f4 100644 --- a/templates/ironic.conf.j2 +++ b/templates/ironic.conf.j2 @@ -80,7 +80,6 @@ region_name = {{ ironic_service_region }} [keystone_authtoken] insecure = {{ keystone_service_internaluri_insecure | bool }} auth_type = {{ ironic_keystone_auth_plugin }} -signing_dir = {{ ironic_system_home_folder }}/cache/api auth_url = {{ keystone_service_adminuri }} auth_uri = {{ keystone_service_internaluri }} project_domain_id = {{ ironic_service_project_domain_id }} @@ -93,15 +92,11 @@ region_name = {{ keystone_service_region }} memcached_servers = {{ memcached_servers }} token_cache_time = 300 -revocation_cache_time = 60 # if your memcached server is shared, use these settings to avoid cache poisoning memcache_security_strategy = ENCRYPT memcache_secret_key = {{ memcached_encryption_key }} -# if your keystone deployment uses PKI, and you value security over performance: -check_revocations_for_cached = False - [matchmaker_redis] [neutron]