keystone: add cronjob for flushing expired tokens

By default expired keystone tokens are not removed
out of the keystone table in keystone database.
This will cause the keystone database to grow in
size due.  So this patch adds new package named
keystone-cronjobs which will register a cronjob
to invoke command "keystone-manage token_flush"
for flushing out any expired token.

Signed-off-by: Vu Tran <vu.tran@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>

1 files changed, 14 insertions, 1 deletions

diff --git a/meta-openstack/recipes-devtools/python/python-keystone_git.bb b/meta-openstack/recipes-devtools/python/python-keystone_git.bb
index cde670c..6825461 100644
--- a/meta-openstack/recipes-devtools/python/python-keystone_git.bb
+++ b/meta-openstack/recipes-devtools/python/python-keystone_git.bb
@@ -81,10 +81,22 @@ pkg_postinst_${SRCNAME}-setup () {
     # end python-keystone postinst
 }
 
-PACKAGES += " ${SRCNAME}-tests ${SRCNAME} ${SRCNAME}-setup"
+# By default tokens are expired after 1 day so by default we can set
+# this token flush cronjob to run every 2 days
+KEYSTONE_TOKEN_FLUSH_TIME ??= "0 0 */2 * *"
+
+pkg_postinst_${SRCNAME}-cronjobs () {
+    # By default keystone expired tokens are not automatic removed out of the
+    # database.  So we create a cronjob for cleaning these expired tokens.
+    echo "${KEYSTONE_TOKEN_FLUSH_TIME} root /usr/bin/keystone-manage token_flush" >> /etc/crontab
+}
+
+PACKAGES += " ${SRCNAME}-tests ${SRCNAME} ${SRCNAME}-setup ${SRCNAME}-cronjobs"
 
 ALLOW_EMPTY_${SRCNAME}-setup = "1"
 
+ALLOW_EMPTY_${SRCNAME}-cronjobs = "1"
+
 FILES_${PN} = "${libdir}/*"
 
 FILES_${SRCNAME}-tests = "${sysconfdir}/${SRCNAME}/run_tests.sh"
@@ -119,6 +131,7 @@ RDEPENDS_${PN} += " \
 
 RDEPENDS_${SRCNAME} = "${PN} postgresql postgresql-client python-psycopg2"
 RDEPENDS_${SRCNAME}-setup = "postgresql sudo ${SRCNAME}"
+RDEPENDS_${SRCNAME}-cronjobs = "cronie ${SRCNAME}"
 
 INITSCRIPT_PACKAGES = "${SRCNAME}"
 INITSCRIPT_NAME_${SRCNAME} = "keystone"