keystone/releasenotes/notes/filter-mappings-by-entity-77162a146d375385.yaml
Pavlo Shchelokovskyy 4abd9926ab Filter by entity_type in get_domain_mapping_list
with many users and groups in a domain fetching all mappings (for both
users and groups) may become inefficient.

In an environment with approx 125k users and 150 groups in the mapping
table and SAML2+LDAP auth/backend, this patch reduced the time
for first (uncached) 'openstack token issue' command from 12 to 3 seconds.
Similar improvements were seen with time to login to Horizon as well.

Change-Id: Iccbef534ff7e723f8b1461bb1169e2da66cc1dea
Closes-Bug: #1775207
2018-06-20 21:18:42 +03:00

12 lines
494 B
YAML

---
upgrade:
- |
As a performance improvement, the base mapping driver's method
``get_domain_mapping_list`` now accepts an optional named argument
``entity_type`` that can be used to get the mappings for a given
entity type only.
As this new call signature is already used in the ``identity.core``
module, authors/maintainers of out-of-tree custom mapping drivers
are expected to update their implementations of ``get_domain_mapping_list``
method accordingly.