Skip to content

Use AuthorizedProjectRefresh::ProjectCreateWorker for project create

Imre Farkas requested to merge if-215385-project_create_service_auth_update into master

What does this MR do?

AuthorizedProjectRefresh::ProjectCreateWorker as a specialized worker use much less resource to update project authorizations but it could lead to synchronization issues because it doesn't serialize simultaneous update events. The previous approach of AuthorizedProjectsWorker is not bulletproof either, inconsistencies do accumulate in the project authorization cache over time. For now, we also use the previous approach as a safety measure but with some delay and lower priority (AuthorizedProjectUpdate::UserRefreshWithLowUrgencyWorker).

#215385 (closed)

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Imre Farkas

Merge request reports