OpenStack Compute (nova)

Excessive number of calls to keystone auth on instance boot

Bug #862853 reported by Antony Messerli
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Invalid
Medium
Matt Dietz

Bug Description

Using commit ebec34e374bd9ec5354e3648a6e8f3ce26c951b5 and the keystone middleware, I'm noticing an excessive number of auth requests to the keystone server occurring on a simple boot of an instance from both Nova and Glance. Because of this, I'm seeing some 9-10 second times when running a nova boot.

Watching the keystone server logs from this, a single boot can generate 8000 lines of verbose logs for a single boot in keystone (700k in size).

Matt Dietz (cerberus)
Changed in nova:
assignee: nobody → Matt Dietz (cerberus)
Thierry Carrez (ttx)
Changed in nova:
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Kevin L. Mitchell (klmitch) wrote :

I think this has been mitigated somewhat…

Revision history for this message
Russell Bryant (russellb) wrote :

I believe we can close this out. PKI tokens are now the default, which don't require as many round trips. There may have been improvements from before PKI tokens, as well.

Changed in nova:
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.