URL: https://github.com/freeipa/freeipa/pull/1116 Author: rcritten Title: #1116: Enable ephemeral KRA requests Action: opened

PR body: """ Enabling ephemeral KRA requests will reduce the amount of LDAP write operations and improve overall performance.

https://pagure.io/freeipa/issue/6703

NOTE: I'm not 100% sure on the upgrade for existing instances. My logic is that tomcat is always stopped and then within that block the CA (if any) will be updated. Given that the KRA runs in the same service that is why I stuck that update code there. It worked in my testing. """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1116/head:pr1116 git checkout pr1116