Elukey has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301365
Change subject: Increase AQS default auth permission caching to 30s.
......................................................................
Increase AQS default auth permission caching to 30s.
The CassandraAuthorizer mandates non trivial checks for
each read/write ops. This could be a problem in already
heavy loaded clusters like AQS causing timeouts during
read/write ops.
Bug: T140869
Change-Id: Id37ac40c00e75bdd56f8d9065e1976864a037761
---
M hieradata/role/common/aqs.yaml
1 file changed, 7 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/65/301365/1
diff --git a/hieradata/role/common/aqs.yaml b/hieradata/role/common/aqs.yaml
index 6567e67..60f4b21 100644
--- a/hieradata/role/common/aqs.yaml
+++ b/hieradata/role/common/aqs.yaml
@@ -29,6 +29,13 @@
cassandra::concurrent_writes: 18
cassandra::concurrent_reads: 18
+# The CassandraAuthorizer Auth mandates non trivial checks for
+# each read/write operation to make sure that permissions are honored.
+# This could be a problem in already heavy loaded clusters like AQS,
+# so we need to increase caching to allow better performances
+# (default value 2s).
+cassandra::permissions_validity_in_ms: 60000
+
cassandra::dc: "%{::site}"
cassandra::cluster_name: "Analytics Query Service Cassandra"
--
To view, visit https://gerrit.wikimedia.org/r/301365
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Id37ac40c00e75bdd56f8d9065e1976864a037761
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Elukey <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
