yahoo-eng-team team mailing list archive

[OpenStack Infra <1775207@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/572446
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=4abd9926ab7fb79bbe86a22657a2474790a8fcb8
Submitter: Zuul
Branch:    master

commit 4abd9926ab7fb79bbe86a22657a2474790a8fcb8
Author: Pavlo Shchelokovskyy <shchelokovskyy@xxxxxxxxx>
Date:   Wed May 30 21:27:58 2018 +0300

    Filter by entity_type in get_domain_mapping_list
    
    with many users and groups in a domain fetching all mappings (for both
    users and groups) may become inefficient.
    
    In an environment with approx 125k users and 150 groups in the mapping
    table and SAML2+LDAP auth/backend, this patch reduced the time
    for first (uncached) 'openstack token issue' command from 12 to 3 seconds.
    Similar improvements were seen with time to login to Horizon as well.
    
    Change-Id: Iccbef534ff7e723f8b1461bb1169e2da66cc1dea
    Closes-Bug: #1775207


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1775207

Title:
  Fetching all mappings may become too slow

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  While fixing bug 1582585 the change
  I2c266e91f2f05be760f8a3eea3738868243cc9c6 started fetching all
  mappings from SQL and performing in-memory joins.

  However, with many users and groups mappings such fetching may become
  too slow -  for instance, with ~125k users CLI command "openstack
  domain list" takes up to 7 seconds and login to the Horizon - up to 20
  seconds.

  Additionally filtering the corresponding query in
  get_domain_mapping_list method by entity_type speeds up things
  somewhat.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1775207/+subscriptions