Whamcloud - gitweb
EX-9392 sec: use dedicated INTERNAL upcall cache
authorSebastien Buisson <sbuisson@ddn.com>
Tue, 12 Mar 2024 14:12:38 +0000 (15:12 +0100)
committerAndreas Dilger <adilger@whamcloud.com>
Wed, 8 May 2024 06:00:29 +0000 (06:00 +0000)
commitb5e421625be474c74e8467a6fb7089f974898558
tree782a88d34c7da0c5a30f330d2298c80258444056
parent0f45ddb1db8d71a0d1b7d58f9fef258e58549fc2
EX-9392 sec: use dedicated INTERNAL upcall cache

Implement the INTERNAL upcall cache as a dedicated, separate cache.
This makes it distinct from the regular identity upcall cache that can
be defined to use any upcall including NONE, per an MDT side tuning.

The INTERNAL upcall cache becomes accessible only to clients that
belong to a nodemap for which the 'server_upcall' rbac role is not
enabled.
Dedicated mdt-side tunables are created to configure the entry expiry
time and the acquire expire time for INTERNAL, as well as a tunable to
flush the INTERNAL upcall cache.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I0267182fbfa646de40ac62f832e89fbfd8477822
Reviewed-on: https://review.whamcloud.com/c/ex/lustre-release/+/54361
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
lustre/mdt/mdt_handler.c
lustre/mdt/mdt_internal.h
lustre/mdt/mdt_lib.c
lustre/mdt/mdt_lproc.c
lustre/obdclass/upcall_cache.c
lustre/tests/runas.c
lustre/tests/sanity-sec.sh