[CASSANDRA-16914] Implement Virtual Tables for Auth Caches

• Type: Improvement
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 4.1-alpha1, 4.1
• Component/s: Feature/Authorization, Feature/Virtual Tables
• Change Category: Operability
• Complexity: Low Hanging Fruit
• Platform: All

Source Control Link

https://github.com/apache/cassandra/commit/63292292b8dbe3bb4f691f82823dcdc0172d2291

Test and Documentation Plan

All the changes are covered by unit tests. Documentation has been updated as well.

• Assignee: Aleksei Zotov
• Reporter: Aleksei Zotov

Authors

Aleksei Zotov

Reviewers

Benjamin Lerer, Sam Tunnicliffe

• Created: 03/Sep/21 08:31
• Updated: 27/May/22 19:25
• Resolved: 10/Nov/21 08:29

Description

NodeTool commands for Auth Caches invalidation were implemented as a part of CASSANDRA-16404 ticket. While discussing that ticket it was agreed that there is a need to develop the same kind of functionality through Vitrual Tables. Unfortunately, VT did not have TRUNCATE and DELETE support. And CASSANDRA-16806 was created for that reason. Once it is completed, further work can be started.

The goal of this ticket is to create VTs for the following caches:

• CredentialsCache
• JmxPermissionsCache
• NetworkPermissionsCache
• PermissionsCache
• RolesCache

The VTs should support reading from and modification of the in the Auth Caches.

Issue Links

• is blocked by: CASSANDRA-16806 Allow DELETE and TRUNCATE to work on Virtual Tables if the implementation allows it
• is related to: CASSANDRA-17062 Refactor structure of caching metrics and expose auth cache metrics via JMX
• is related to: CASSANDRA-17063 Make capacity/validity/updateinterval/activeupdate for Auth Caches configurable via nodetool
• relates to: CASSANDRA-16404 Provide a nodetool way of invalidating auth caches
• links to: CI-1271
• links to: PR-1208