Alexey Serbin has uploaded this change for review. (
http://gerrit.cloudera.org:8080/12653
Change subject: WIP [master] introduced SentryAuthzCache
......................................................................
WIP [master] introduced SentryAuthzCache
This patch incorporate a TTL-based cache into the SentryAuthzProvider.
The cache stores responses received from the authz provider (Sentry in
this case). It's possible to enable or disable using the cache upon
creation of SentryAuthzProvider instance: set the newly introduced
`--sentry_cache_capacity` command-line flag to 0 to disable the cache.
WIP:
* need to add tests
* pre-process raw TListSentryPrivilegesResponse into some sort
of structure to speed up lookups of certain privilege on an
authorizable
* address the 'thundering herd' request pattern (maybe in the
implementation of the TTL cache itself?)
Change-Id: If377cd4a7bae481ffc9a6950cb26862b66e9bab5
---
M src/kudu/master/CMakeLists.txt
A src/kudu/master/sentry_authz_cache.cc
A src/kudu/master/sentry_authz_cache.h
M src/kudu/master/sentry_authz_provider.cc
M src/kudu/master/sentry_authz_provider.h
5 files changed, 227 insertions(+), 12 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/53/12653/1
--
To view, visit http://gerrit.cloudera.org:8080/12653
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: If377cd4a7bae481ffc9a6950cb26862b66e9bab5
Gerrit-Change-Number: 12653
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <[email protected]>
