[JIRA] (JENKINS-61211) QueueItemAuthenticator causes Build Queue contention

[aburdajew...@cloudbees.com (JIRA)]

Title: Message Title

Allan BURDAJEWICZ created an issue   Jenkins / JENKINS-61211 QueueItemAuthenticator causes Build Queue contention Issue Type: Improvement Assignee: Unassigned Components: core Created: 2020-02-25 02:16 Environment: core:2.222 Labels: performance Priority: Major Reporter: Allan BURDAJEWICZ When using the Authorize Project plugin to configure authorization for build execution, this has severe consequences on the overall performances of a Jenkins master because it request information repeatedly "trying to get user details for impersonation" from the Security Realm. This can happen during in a thread that hold the Queue.Lock An instance will periodically become unavailable or take a very long time in builds especially when the build queue becomes large or when a lot of builds are happening all at the same time. If start a fresh instance with 2 master executors, configure a "Project default Build Authorization" under *Manage Jenkins > configure Global Security*, then create a single pipeline and execute it, you will see through FINE logging of hudson.model.User that the {{User#getUserDetailsForImpersonation} is requested 8 times: eb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Feb 24, 2020 2:42:42 PM FINE hudson.model.User getUserDetailsForImpersonation Impersonation of the user admin was a success Workaround Caching can be configured at the Security Realm level depending on the solution (for example for LDAP / Active directory). Improvement Proposal I do however think that something could be improved and that since impersonation is happening so frequently, maybe the UserDetailsCache can be used to improve performance. Add Comment   This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.204764.1582597010000.5807.1582597020101%40Atlassian.JIRA.