Skip to content

[3.1 backport] Introduced setting for disabling denormalized privilege data structures#5484

Closed
nibix wants to merge 1 commit intoopensearch-project:3.1from
nibix:privileges-denormalized-datastructures-switch-3.1-2
Closed

[3.1 backport] Introduced setting for disabling denormalized privilege data structures#5484
nibix wants to merge 1 commit intoopensearch-project:3.1from
nibix:privileges-denormalized-datastructures-switch-3.1-2

Conversation

@nibix
Copy link
Collaborator

@nibix nibix commented Jul 17, 2025

Description

Backport from #5465

This introduces the setting plugins.security.privileges_evaluation.precomputed_privileges.enabled which can be used to disable the creation of denormalized privilege data structures. It is enabled by default to provide the best action throughput. It can make sense to disable the setting when it is seen that the initialisation process takes so much time/resources that it negatively affects the cluster performance (like observed in #5464) . This come at the price of a reduced action throughput.

  • Category: Enhancement
  • Why these changes are required? Operational safety
  • What is the old behavior before changes and new behavior after changes? No behavioral changes.

Testing

  • Unit testing

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

…e data structures

Signed-off-by: Nils Bandener <nils.bandener@eliatra.com>
@nibix
Copy link
Collaborator Author

nibix commented Jul 17, 2025

This replaces #5483 as the CI there seems to be broken without any obvious way to fix

@nibix
Copy link
Collaborator Author

nibix commented Jul 17, 2025

The CI seems to be weird here as well 🤔 possibly I need to do a dummy commit to get a different commit hash.

@nibix nibix closed this Jul 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant