Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cache checkpoint for inactive shards #2332

Merged
merged 3 commits into from
Jan 21, 2025

Conversation

haydentherapper
Copy link
Contributor

@haydentherapper haydentherapper commented Jan 16, 2025

Summary

On service startup, Rekor will sign checkpoints for the
inactive shards, since inactive tree lengths do not
change.

The calls to CreateAndSignCheckpoint that were not
updated are because the checkpoint is being signed
only for the active shard, e.g. on entry upload
and when returning the active shard checkpoint.

Any deployment using KMS will see a reduction in KMS
calls.

Signed-off-by: Hayden Blauzvern [email protected]

Release Note

Documentation

@haydentherapper haydentherapper requested a review from a team as a code owner January 16, 2025 23:33
@haydentherapper
Copy link
Contributor Author

Pending #2330

See the last commit for relevant changes.

Copy link

codecov bot commented Jan 17, 2025

Codecov Report

Attention: Patch coverage is 35.89744% with 25 lines in your changes missing coverage. Please review.

Project coverage is 49.88%. Comparing base (488eb97) to head (af60c05).
Report is 292 commits behind head on main.

Files with missing lines Patch % Lines
pkg/api/api.go 11.11% 15 Missing and 1 partial ⚠️
pkg/api/entries.go 60.00% 3 Missing and 3 partials ⚠️
pkg/api/tlog.go 0.00% 3 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff             @@
##             main    #2332       +/-   ##
===========================================
- Coverage   66.46%   49.88%   -16.58%     
===========================================
  Files          92      192      +100     
  Lines        9258    24751    +15493     
===========================================
+ Hits         6153    12348     +6195     
- Misses       2359    11302     +8943     
- Partials      746     1101      +355     
Flag Coverage Δ
e2etests 46.50% <35.89%> (-1.06%) ⬇️
unittests 41.92% <7.69%> (-5.76%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

On service startup, Rekor will sign checkpoints for the
inactive shards, since inactive tree lengths do not
change.

The calls to CreateAndSignCheckpoint that were not
updated are because the checkpoint is being signed
only for the active shard, e.g. on entry upload
and when returning the active shard checkpoint.

Signed-off-by: Hayden Blauzvern <[email protected]>
Signed-off-by: Hayden Blauzvern <[email protected]>
bobcallaway
bobcallaway previously approved these changes Jan 17, 2025
pkg/api/api.go Outdated Show resolved Hide resolved
Signed-off-by: Hayden Blauzvern <[email protected]>
@haydentherapper haydentherapper merged commit f3db95b into sigstore:main Jan 21, 2025
15 checks passed
@haydentherapper haydentherapper deleted the cache-checkpoint branch January 21, 2025 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants