OpenStack Identity (Keystone) Middleware

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Branch: master

master

stable/pike

stable/queens

stable/rocky

stable/stein

stable/train

stable/ussuri

stable/victoria

stable/wallaby

stable/xena

1.0.0

1.1.0

1.1.1

1.2.0

1.3.0

1.3.1

1.3.2

1.4.0

1.5.0

1.5.1

1.5.2

1.5.3

1.6.0

1.6.1

2.0.0

2.1.0

2.2.0

2.3.0

2.3.1

2.3.2

2.3.3

2.3.4

2.4.0

2.4.1

3.0.0

4.0.0

4.1.0

4.10.0

4.11.0

4.12.0

4.13.0

4.13.1

4.14.0

4.15.0

4.16.0

4.17.0

4.17.1

4.18.0

4.19.0

4.2.0

4.20.0

4.21.0

4.22.0

4.3.0

4.4.0

4.4.1

4.5.0

4.5.1

4.6.0

4.7.0

4.8.0

4.9.0

4.9.1

5.0.0

5.1.0

5.2.0

5.2.1

5.2.2

5.3.0

6.0.0

6.0.1

6.1.0

7.0.0

7.0.1

8.0.0

9.0.0

9.1.0

9.2.0

9.3.0

juno-eol

kilo-eol

liberty-eol

mitaka-eol

newton-eol

ocata-em

ocata-eol

pike-em

queens-em

rocky-em

stein-em

train-em

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'master'

${ noResults }

keystonemiddleware/keystonemiddleware

History

Michal Arbet 788d3c4969 Switch to eventlet-safe oslo.cache's MemcacheClientPool In past days there were discussions about various issues with memcached connections [1][2][3]. After investigation it looks like common root cause for above problems is keystonemiddleware. More precisely said the way how keystonemiddleware is caching tokens. Currently it's using some home-made CachePool with direct usage of memcached library, moreover it looks like its approach is not eventlet-safe. Discussion can be mainly found in [4]. Fortunately keystonemiddleware can use "advanced cache pool", which is oslo.cache's implementation and was added long time ago [5], but it is turned on only if memcache_use_advanced_pool=True. This patch is switching to more elaborated oslo.cache CachePool and adding deprecation warning about eventlet-unsafe variant of keystonemiddleware's memcache pool. How to reproduce ? with memcache_use_advanced_pool=False 1. Build clean ENV of openstack 2. Deploy core projects (keystone,glance,nova,placement...) 3. Run while true; do COMMAND FOR SERVICE; done - several bashes, in parallel (5-7) COMMAND FOR SERVICE: - openstack network list - openstack volume list - openstack server list - openstack image list 4. Check memcached connections (which will grow up): - ss | grep 11211 | wc -l every second How to fix and test it ? Repeat above, to fix: - with memcache_use_advanced_pool=True OR - apply this patch Compare measurements in graph. [1] https://bugs.launchpad.net/keystonemiddleware/+bug/1892852 [2] https://bugs.launchpad.net/oslo.cache/+bug/1888394 [3] https://bugs.launchpad.net/keystonemiddleware/+bug/1883659 [4] https://review.opendev.org/c/openstack/oslo.cache/+/742193 [5] https://review.opendev.org/c/openstack/keystonemiddleware/+/268664 Closes-Bug: #1883659 Closes-Bug: #1892852 Closes-Bug: #1888394 Change-Id: I0e96334b65a0bf369ebf1d88651d13feb8d2ecac		7 months ago
..
_common	Fix misspell word	2 years ago
audit	Make sure audit middleware use own context	3 years ago
auth_token	Imported Translations from Zanata	7 months ago
echo	Replace six.iteritems() with .items()	4 years ago
locale	Imported Translations from Zanata	2 years ago
tests	Merge "Use unittest.mock instead of third party mock"	1 year ago
__init__.py	Moving middleware to new location	7 years ago
ec2_token.py	Change ec2 URLs to v3	2 years ago
exceptions.py	Create a Config object	5 years ago
fixture.py	Remove use of positional decorator	4 years ago
i18n.py	Update URLs in documentation	4 years ago
opts.py	Move auth token opts calculation into auth_token	5 years ago
s3_token.py	Rename auth_uri to www_authenticate_uri	4 years ago