[CASSANDRA-16958] Prewarm role and credentials caches to avoid timeouts at startup

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 4.1-alpha1, 4.1
• Component/s: Feature/Authorization
• Change Category: Operability
• Complexity: Normal
• Platform: All

Source Control Link

https://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=commit;h=89c6addb505392ef3434597b61f83da25d13e3e2

Test and Documentation Plan

Added unit tests. New properties should be good at defaults so no yaml changes or documentation needed there.

• Assignee: Josh McKenzie
• Reporter: Josh McKenzie

Authors

Josh McKenzie

Reviewers

Caleb Rackliffe

• Created: 15/Sep/21 14:14
• Updated: 27/May/22 19:25
• Resolved: 13/Jan/22 20:48

Description

With our current auth querying setup, you can end up with a thundering herd on reconnect due to delays on auth resolution.

We should instead allow the ability to do a 'select' on all roles and pre-load the cache before turning on native transport. Notably, this could present some unacceptable delays on start with a very large count of users (thousands), or someone who uses a third party auth system rather than the built-in authorizer so this should be configurable and opt-in.

Issue Links

• depends upon: CASSANDRA-16957 Actively update auth caches in the background