Skip to content

feat: Spit role from assignment provider#565

Merged
gtema merged 1 commit intomainfrom
split_role_provider
Feb 17, 2026
Merged

feat: Spit role from assignment provider#565
gtema merged 1 commit intomainfrom
split_role_provider

Conversation

@gtema
Copy link
Collaborator

@gtema gtema commented Feb 17, 2026

In python Keystone roles and assignments are part of the same module,
but they implement different provider APIs. It is also possible to have
both providers managed by different drivers (i.e. roles from sql while
assignments from OPA or OpenFGA).

Closes: #537

@github-actions
Copy link

github-actions bot commented Feb 17, 2026

🦢 Load Test Results

Goose Attack Report

Plan Overview

Action Started Stopped Elapsed Users
Increasing 26-02-17 16:06:44 26-02-17 16:06:46 00:00:02 0 → 4
Maintaining 26-02-17 16:06:46 26-02-17 16:07:16 00:00:30 4
Decreasing 26-02-17 16:07:16 26-02-17 16:07:16 00:00:00 0 ← 4

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET 8016 0 14.47 8 49 267.20 0.00
Aggregated 8016 0 14.47 8 49 267.20 0.00

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET 12 13 19 19 20 21 22 49
Aggregated 12 13 19 19 20 21 22 49

Status Code Metrics

Method Name Status Codes
GET 8,016 [200]
Aggregated 8,016 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
ListUsers
0.0 0 0 0.00 0 0 0.00 0.00
0.1 5050 0 11.42 8 42 168.33 0.00
ValidateToken
1.0 0 0 0.00 0 0 0.00 0.00
1.1 2966 0 19.80 15 49 98.87 0.00
Aggregated 8016 0 14.47 8 49 267.20 0.00

Scenario Metrics

Transaction # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
ListUsers 2 5048 11.42 8 42 168.27 2524.00
ValidateToken 2 2964 19.80 16 49 98.80 1482.00
Aggregated 4 8012 14.52 8 49 267.07 4006.00

View full report

In python Keystone roles and assignments are part of the same module,
but they implement different provider APIs. It is also possible to have
both providers managed by different drivers (i.e. roles from sql while
assignments from OPA or OpenFGA).

Closes: #537
@gtema gtema force-pushed the split_role_provider branch from 97cea0d to 9fc7605 Compare February 17, 2026 15:58
@gtema gtema merged commit 130ed95 into main Feb 17, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Split assignment backend into assignments and roles

1 participant

Comments