It seems fernet keys are fixed at image creation.
Once a day docker container is rotating fernet keys.
Some problems in HA balanced scenarios could happend if nodes does not share fernet keys or uses sticky sessions.
https://docs.openstack.org/keystone/pike/admin/identity-fernet-token-faq.html
How enable sticky sessions: https://thisinterestsme.com/haproxy-sticky-sessions/
A workaround could be not rotate fernet keys by default.
It seems fernet keys are fixed at image creation.
Once a day docker container is rotating fernet keys.
Some problems in HA balanced scenarios could happend if nodes does not share fernet keys or uses sticky sessions.
https://docs.openstack.org/keystone/pike/admin/identity-fernet-token-faq.html
How enable sticky sessions: https://thisinterestsme.com/haproxy-sticky-sessions/
A workaround could be not rotate fernet keys by default.