Merge pull request ceph#63271 from rafaelweingartner/parameter_to_externalize_secret_key_ttl-upstream-2

rgw: Externalize Keystone secret key cache TTL

Reviewed-by: Matt Benjamin <[email protected]>
Reviewed-by: Adam C. Emerson <[email protected]>
Reviewed-by: Tobias Urdin <[email protected]>

Author: ivancich

src/common/options/rgw.yaml.in

@@ -844,6 +844,16 @@ options:
   services:
   - rgw
   with_legacy: true
+- name: rgw_keystone_token_cache_ttl
+  type: int
+  level: advanced
+  desc: Keystone token secret key cache TTL
+  long_desc: The TTL for secret keys that are loaded from Keystone and stored in the cache system.
+  fmt_desc: The maximum TTL that a secret loaded from Keystone is maintained in the token cache system.
+  default: 300
+  services:
+  - rgw
+  with_legacy: true
 - name: rgw_keystone_verify_ssl
   type: bool
   level: advanced

src/rgw/rgw_auth_keystone.h

@@ -102,7 +102,7 @@ class SecretCache {
     : cct(g_ceph_context),
       lock(),
       max(cct->_conf->rgw_keystone_token_cache_size),
-      s3_token_expiry_length(300, 0) {
+      s3_token_expiry_length(cct->_conf->rgw_keystone_token_cache_ttl, 0) {
   }
 
   ~SecretCache() {}