Merge "Remove custom value of max_allowed_secret_in_bytes" into stable/wallaby

Zuul · openstack-gerrit · commit 1f8f9bd65c34 · 2022-01-21T20:35:30.000Z
diff --git a/ansible/roles/barbican/templates/barbican.conf.j2 b/ansible/roles/barbican/templates/barbican.conf.j2
@@ -10,7 +10,6 @@ bind_host = {{ api_interface_address }}
 host_href = {{ barbican_public_endpoint }}
 
 backlog = 4096
-max_allowed_secret_in_bytes = 10000
 max_allowed_request_size_in_bytes = 1000000
 
 db_auto_create = False
diff --git a/releasenotes/notes/barbican-max-allowed-secret-size-1941307ab5d2a9fd.yaml b/releasenotes/notes/barbican-max-allowed-secret-size-1941307ab5d2a9fd.yaml
@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    Removes custom value of ``max_allowed_secret_in_bytes`` in
+    ``barbican.conf``. The default maximum size in Barbican was doubled to
+    avoid issues with some certificates.
+    `LP #1957795 <https://bugs.launchpad.net/kolla-ansible/+bug/1957795>`__
