yahoo-eng-team team mailing list archive

[Clint Byrum <clint@xxxxxxxxxx>]

*** This bug is a duplicate of bug 1257723 ***
    https://bugs.launchpad.net/bugs/1257723

David this is definitely a known issue in Keystone.

Note that one way to work around the extremely poor performance of
token_flush, is to use percona toolkit's 'pt-archiver' command:

https://git.openstack.org/cgit/openstack/tripleo-image-
elements/tree/elements/keystone/cleanup-keystone-tokens.sh

This deletes 500 at a time.

The long term vision is to use ephemeral tokens that don't have to live
in a database inside keystone:

https://blueprints.launchpad.net/keystone/+spec/non-persistent-tokens

I'm going to mark this bug as a duplicate of bug #1257723 because it is
just a symptom of the same problem.

** This bug has been marked a duplicate of bug 1257723
   "Timed out trying to delete user" resolved by heat-engine restart

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1371801

Title:
  Clouds with high usage gets slower because of token table size getting
  bigger

Status in Orchestration API (Heat):
  Invalid
Status in OpenStack Identity (Keystone):
  New

Bug description:
  Hi guys,

      Clouds with high usage gets slower because of token table size
  getting bigger and bigger without any automated cleanup of any kind.
  The problem affects keystone but also nova-network (where the security
  group listing will get increasingly slower because there're no
  automated cleanup either).

  This request has been running for 394 seconds and everything is locked in the cloud when this happens:
  | 82659 | keystone | 192.168.2.121:56197 | keystone | Query   |  394 | Sending data | SELECT token.id AS token_id, token.expires AS token_expires, token.extra AS token_extra, token.valid AS token_valid, token.user_id AS token_user_id, token.trust_id AS token_trust_id
  FROM token
  WHERE token.valid = 1 AND token.expires > '2014-09-19 21:15:25' AND token.trust_id = '6297a1b419b04813a77c9d56c93f7eb4' |

  Dave

To manage notifications about this bug go to:
https://bugs.launchpad.net/heat/+bug/1371801/+subscriptions