Fail to start WSGI service with revocation_cache_time set

Fix proposed to branch: master
Review: https://review.openstack.org/112756

This very well may be an Olso.config bug as you've set an Int value in the config to an inttype option. Second this is not a security fix and therefore should be proposed to keystonemiddleware first. We can evaluate if it will be accepted to keystoneclient's copy of the code (currently frozen and will not receive anything except security updates).

Also, what release of OpenStack are you using and what version of keystoneclient?

Ok, so looking over the code, the issue is that the oslo.config options are not used to process the config data passed in from the paste-ini. If the option is set in the nova.conf it should get the correct type.

This should be fixed (if at all possible) by forcing the options to be loaded into the oslo config object and use the type management of oslo.config instead of accepting *whatever* the paste config ends up being.

Hi Morgan,

Yes, that's the reason why using revocation_cache_time inside paste-ini has type errors.

Since many paste-ini variables are handled by explicit type conversion (such as auth_port), do you think it worth to submit my previous fix to keystonemiddleware? Cause for oslo.config, type validation only happens when reading conf file and parsing options. There's no easy way to force one value to be loaded into Opt object at runtime.

There is another related bug 1353315 it might make sense to combine efforts and/or see if that fix can be used to fix this one as well.

In either case, you are welcome to submit your fix to keystonemiddleware. It is definitely a bug.

Change abandoned by Qiu Yu (<email address hidden>) on branch: master
Review: https://review.openstack.org/112756

I am going to mark this as a duplicate of bug 1353315, it looks like as long as you're using the latest oslo.config and the keystonemiddleware package this should now be resolved. Please don't hesitate to reopen this/discuss in IRC if this is not the case.