-
Notifications
You must be signed in to change notification settings - Fork 380
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WIP: Only obtain a bearer token once at a time #1968
Draft
mtrmac
wants to merge
6
commits into
containers:main
Choose a base branch
from
mtrmac:shared-token
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Draft
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
mtrmac
commented
May 29, 2023
mtrmac
force-pushed
the
shared-token
branch
4 times, most recently
from
June 1, 2023 17:50
84d61b4
to
e2c713b
Compare
mtrmac
force-pushed
the
shared-token
branch
2 times, most recently
from
May 30, 2024 19:32
1fd9f89
to
3ec2136
Compare
mtrmac
force-pushed
the
shared-token
branch
2 times, most recently
from
July 9, 2024 20:16
cd3b8ee
to
8636ccc
Compare
The not-directly-related refactoring are now filed separately in #2480. |
... because we will make it more complex. Should not change behavior. Signed-off-by: Miloslav Trmač <[email protected]>
... to decrease indentation and remove a variable. Should not change behavior. Signed-off-by: Miloslav Trmač <[email protected]>
We will want to manage concurrency in more detail. Should not change behavior. Signed-off-by: Miloslav Trmač <[email protected]>
We will want to add a lock to it, so we must stop copying it by value. Should not change behavior. Signed-off-by: Miloslav Trmač <[email protected]>
Instead of having getBearerToken* construct a new bearerToken object, have the caller provide one. This will allow us to record that a token is being obtained, so that others can wait for it. Should not change behavior. Signed-off-by: Miloslav Trmač <[email protected]>
Currently, on pushes, we can start several concurrent layer pushes; each one will check for a bearer token in tokenCache, find none, and ask the server for one, and then write it into the cache. So, we can hammer the server with 6 basically-concurrent token requests. That's unnecessary, slower than just asking once, and potentially might impact rate limiting heuristics. Instead, serialize writes to a bearerToken so that we only have one request in flight at a time. This does not apply to pulls, where the first request is for a manifest; that obtains a token, so subsequent concurrent layer pulls will not request a token again. WIP: Clean up the debugging log entries. Signed-off-by: Miloslav Trmač <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Currently, on pushes, we can start several concurrent layer pushes; each one will check for a bearer token in
tokenCache
, find none, and ask the server for one, and then write it into the cache.So, we can hammer the server with 6 basically-concurrent token requests. That's unnecessary, slower than just asking once, and potentially might impact rate limiting heuristics.
Instead, serialize writes to a bearerToken so that we only have one request in flight at a time.
This does not apply to pulls, where the first request is for a manifest, which obtains a token, so subsequent concurrent layer pulls will not request a token again.
WIP: Clean up the debugging log entries.