5 Commits

Author	SHA1	Message	Date
Marcin Maliszkiewicz	c11eb73a59	auth: add cache size metrics	2026-02-17 18:18:40 +01:00
Marcin Maliszkiewicz	7eedf50c12	auth: ldap: add permissions reload to unified cache ... The LDAP server may change role-chain assignments without notifying Scylla. As a result, effective permissions can change, so some form of polling is required. Currently, this is handled via cache expiration. However, the unified cache is designed to be consistent and does not support expiration. To provide an equivalent mechanism for LDAP, we will periodically reload the permissions portion of the new cache at intervals matching the previously configured expiration time.	2026-02-17 17:56:27 +01:00
Marcin Maliszkiewicz	10996bd0fb	auth: add permissions cache to auth/cache ... We want to get rid of loading cache because its periodic refresh logic generates a lot of internal load when there is many entries. Also our operation procedures involve tweaking the config while new unified cache is supposed to work out of the box.	2026-02-17 17:56:27 +01:00
Marcin Maliszkiewicz	3c1e1f867d	raft: auth: add semaphore to auth_cache::load_all ... Auth cache loading at startup is racing between auth service and raft code and it doesn't support concurrency causing it to crash. We can't easily remove any of the places as during raft recovery snapshot is not loaded and it relies on loading cache via auth service. Therefore we add semaphore. Fixes https://github.com/scylladb/scylladb/issues/27540 Closes scylladb/scylladb#27573	2025-12-24 10:56:24 +02:00
Marcin Maliszkiewicz	bd7c87731b	auth: add unified cache implementation ... It combines data from all underlying auth tables. Supports gentle full load and per role reloads. Loading is done on shard 0 and then deep copies data to all shards.	2025-11-26 12:00:50 +01:00