Skip to content

Extend certificate-based-cluster feature for certain users via a new table

João Alexandre Cunha requested to merge jcunha-debug-batch-update into master

Instead of using simply a FF to turn the feature off, we'll re-enable the feature for certain users because reenabling for thousands of users through FF actors is not scalable.

This new table will store all the root level namespaces which have at least one group cluster or project cluster. This table will be loaded only once and will not be getting anymore inserts after this. This is because we want to disable all the certificate_based_clusters feature to all users that don't have a cluster. So the feature only stays for users which already had at least one.

That's what we're doing with:

  def certificate_based_clusters_enabled?
    cluster_enabled_granted? || certificate_based_clusters_enabled_ff?
  end

In 15.6, we plan to drop this table then finally remove the features for 100% of users.

The reason why we created this table and didn't user FF actors to re-enable the features for a specific set of users, is that we have about 30_000 users in this group. Our FF framework cannot handle so many actors, it was not build to deal with this.

Edited by João Alexandre Cunha

Merge request reports