[MESOS-10057] Perform synchronous authorization for outgoing events on event stream.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.10.0
• Component/s: master
• Epic Link: Operator API v1 Improvements
• Assignee: Andrei Sekretenko
• Reporter: Benjamin Mahler
• Created: 30/Nov/19 17:23
• Updated: 04/Mar/20 08:32
• Resolved: 04/Mar/20 08:32

Description

The master event stream outgoing message authorization becomes very expensive for a large number of subscribers (cc greggomann).

Instead of asynchronously obtaining object approvers for every event multiplied by every subscriber, we can instead always hold on to valid object approvers so that we could synchronously (and cheaply) authorize the outgoing events. These object approvers would be kept up to date in the background, and if authorization fails to keep them up to date, we would treat that the same as an authorization failure is currently treated.

This should improve the performance dramatically.

Issue Links

• is blocked by: MESOS-10056 Perform synchronous authorization for scheduler calls.
• is related to: MESOS-10085 Operator API events are silently dropped on transient authorization failures.