Actions
Bug #59495
opensts: every AssumeRole writes to the RGWUserInfo
% Done:
0%
Source:
Community (user)
Tags:
sts metadata backport_processed
Backport:
pacific quincy reef
Regression:
No
Severity:
3 - minor
Reviewed:
Description
RGWSTSAssumeRole::execute() calls STSService::assumeRole() calls STSService::storeARN() to save the role's ARN in RGWUserInfo::assumed_role_arn. it doesn't look that field is used anywhere. it also doesn't make sense to store a role ARN on the user, because that would prevent us from assuming multiple roles at the same time
metadata writes are expensive because they invalidate the metadata cache, and we rely heavily on that cache for things like request authorization. in multisite, every metadata write also triggers metadata sync from each peer zone
Actions