gitea

public/gitea

0 Fork 0

mirror of https://github.com/go-gitea/gitea.git synced 2026-10-26 06:16:56 +09:00

Files

T

History

Lunny Xiaoandsilverwind 5129ad5439 perf(actions): cache successful runner token verification (#39934 )

Every Actions runner RPC (`FetchTask` polling, `UpdateTask`,
`UpdateLog`, ...) goes through the `withRunner` interceptor, which
verifies the runner token with PBKDF2 (`auth_model.HashToken`, ~2 ms).
In a 60s CPU profile of a production instance with many runners, this
accounted for ~49% of all CPU samples.

- Cache successful verifications in a dedicated LRU of up to 10000
runners, keyed by the stored salt and hash and holding only a SHA-256
digest of the token. A hit costs ~100 ns.
- The runner is still loaded from the DB on every RPC and failures are
never cached, so deleted runners and wrong tokens never pass.
- The shared `auth_model.TokenCache` is not used because its default 20
entries miss on every poll once more runners poll in turn.

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-10-23 03:59:11 +00:00

ping

chore(deps): update dependencies, migrate to connectrpc.com/connect v2 (#39854 )

2026-10-22 01:48:49 +00:00

runner

perf(actions): cache successful runner token verification (#39934 )

2026-10-23 03:59:11 +00:00

actions.go

enhance(actions): add OIDC workload identity support (#39052 )

2026-10-18 07:08:55 +00:00

artifact.pb.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )