Skip to content

Commit e477227

Browse files
committed
Remove custom value of max_allowed_secret_in_bytes
Barbican has recently bumped max_allowed_secret_in_bytes from 10 KB to 20 KB since the original value was too small for some certificates [1]. Remove custom value from the barbican.conf template, which anyway was the same as the default configuration before the recent upstream change. The upstream change was backported to Wallaby and has been proposed to Victoria, Ussuri and Train [2], so this change should be backported too. [1] https://review.opendev.org/c/openstack/barbican/+/783381 [2] https://review.opendev.org/q/I59d11c5c9c32128ab9d71eaecdf46dd2d789a8d1 Change-Id: I83e4cb48192c8024650a8d347363f6babb75ad90 Closes-Bug: #1957795 (cherry picked from commit 20a3b14)
1 parent 506bf6f commit e477227

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

ansible/roles/barbican/templates/barbican.conf.j2

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,6 @@ bind_host = {{ api_interface_address }}
1010
host_href = {{ barbican_public_endpoint }}
1111

1212
backlog = 4096
13-
max_allowed_secret_in_bytes = 10000
1413
max_allowed_request_size_in_bytes = 1000000
1514

1615
db_auto_create = False
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
fixes:
3+
- |
4+
Removes custom value of ``max_allowed_secret_in_bytes`` in
5+
``barbican.conf``. The default maximum size in Barbican was doubled to
6+
avoid issues with some certificates.
7+
`LP #1957795 <https://bugs.launchpad.net/kolla-ansible/+bug/1957795>`__

0 commit comments

Comments
 (0)