Comment 4 for bug 1856876

Revision history for this message
Alvaro Uria (aluria) wrote :

Since bumping the default token-expiration time is mentioned in the how-to about live migration operations (see [1]), should this bug be marked as "Won't fix" due to the security concerns that the default value of 1d would involve?

1. https://docs.openstack.org/charm-guide/latest/admin/ops-live-migrate-vms.html#avoid-expired-keystone-tokens