| commit | 147c308bbde5aba78058022ee5dec23317798632 | [log] [tgz] |
|---|---|---|
| author | Prudhvi Akhil Alahari <prudhvi.alahari@linaro.org> | Thu Oct 05 10:48:00 2023 +0530 |
| committer | Prudhvi Akhil Alahari <prudhvi.alahari@linaro.org> | Sat Oct 21 12:13:05 2023 +0530 |
| tree | fb614be4042667a5e73c7094c38af8b7d323721d | |
| parent | c9df881a3e9a7e6e89c7dc4b6f9bddfb11da2389 [diff] |
Add remote-gerrit-account-cache lib The remote-gerrit-account-cache lib provides a way to sync accounts from a remote Gerrit system. This library overrides the Accounts cache implementation from core and loads accounts from a remote Gerrit system using /accounts/ REST APIs. Upon fetching the account info from the remote Gerrit REST API, the account is saved into NoteDb and re-indexed. If the remote Gerrit REST API fails to return the account, the cache falls back to the account stored in NoteDb. Change-Id: If9a5ea1e2d2fd071e0765ebab844c8a87f3c2fbc
The remote-gerrit-account-cache lib provides a way to sync accounts from a remote Gerrit system. This library overrides the Accounts cache implementation from core and loads accounts from a remote Gerrit system using /accounts/ REST APIs. Upon fetching the account info from the remote Gerrit REST API, the account is saved into NoteDb and re-indexed. If the remote Gerrit REST API fails to return the account, the cache falls back to the account stored in NoteDb.
The HTTP user needs to have ‘View All Accounts’, ‘Modify Account’ and ‘View Secondary Emails’ Capabilities in remote gerrit site inorder to fetch account details using /accounts/{account-id}/detail and /accounts/{account-id}/external.ids REST APIs.
Add new email address for a user in the remote Gerrit site. The new email address must be visible on the internal site either after accounts cache expiry or flushing the accounts cache.
Update preferred email for a user in the remote Gerrit site. The update must be visible on the internal site either after accounts cache expiry or flushing the accounts cache.
Delete an email for a user in the remote Gerrit site. The update must be visible on the internal site either after accounts cache expiry or flushing the accounts cache.
Add a new account in the remote Gerrit site. The new account must be visible on the internal site whenever the new account is queried for.
Delete an account in the remote Gerrit site. The internal Gerrit site continues to return the account as it falls-back to NoteDB when /accounts/ API fails to return an account.
The entries in the accounts cache must be evicted after maxAge duration reaches.
This lib can be built either standalone or in-tree.
Example:
bazel build remote-gerrit-account-cache
The output module jar is created in:
bazel-bin/remote-gerrit-account-cache.jar
Copy the remote-gerrit-account-cache.jar into the ${GERRIT_SITE}/lib/ so that it is being loaded when the Gerrit instance is started. Note that the following configuration options need to be added.
AccountCache module which will be overriding the core AccountCache implementation. By default, unset.
Example:
[gerrit]
installModule = com.googlesource.gerrit.plugins.remotegerritaccountcache.AccountCacheImpl$AccountCacheModule
The remote Gerrit site base URL. By default, unset.
Example:
[remote-gerrit-account-cache]
remoteGerritBaseUrl = https://gerrit.example.com
The remote Gerrit site HTTP username. By default, unset.
Example:
[remote-gerrit-account-cache]
httpUsername = example
The remote Gerrit site HTTP password. By default, unset.
Example:
[remote-gerrit-account-cache]
httpPassword = ***
Maximum age to keep an entry in the accounts cache. By default, the entries in accounts cache expire in a day.
Example:
[cache "accounts"]
maxAge = 1d
Duration after which account cache entries are eligible for asynchronous refresh. By default, set to 23h.
Example:
[cache "accounts"]
refreshAfterWrite = 23h