yahoo-eng-team team mailing list archive

[Ivan Lozgachev <ilozgachev@xxxxxxxxxxxx>]

Public bug reported:

This request comes from new Rally test case implemented so far but not
delivered yet.

Test case scenario:

Context:
  1. Create tenants
  2. Create users
  3. Assign all users to all projects (i.e. create role for all user/tenant pairs)
  4. Generate tokens
  5. Revoke all users from tenants (i. e. remove roles)
Iterations:
  Validate token

The idea of this test case is to measure validate token operation API
call when revocation tree is big.

But this test has side effect on all other tests that will validate
token (after this test case executed). So it should be possible to
cleanup revocation tree somehow. The proposal is to implement new API
method to do that.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1567900

Title:
  Keystone API has no method to cleanup revocation tree

Status in OpenStack Identity (keystone):
  New

Bug description:
  This request comes from new Rally test case implemented so far but not
  delivered yet.

  Test case scenario:

  Context:
    1. Create tenants
    2. Create users
    3. Assign all users to all projects (i.e. create role for all user/tenant pairs)
    4. Generate tokens
    5. Revoke all users from tenants (i. e. remove roles)
  Iterations:
    Validate token

  The idea of this test case is to measure validate token operation API
  call when revocation tree is big.

  But this test has side effect on all other tests that will validate
  token (after this test case executed). So it should be possible to
  cleanup revocation tree somehow. The proposal is to implement new API
  method to do that.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1567900/+subscriptions