membphis commented on PR #13529: URL: https://github.com/apache/apisix/pull/13529#issuecomment-4988999840
[P1] The local watcher snapshot does not enforce auth-key uniqueness Could we reserve the auth key in `shdict` before writing the consumer or credential, then release or refresh that reservation after the watcher observes the write? Today, two back-to-back or concurrent Admin API writes can both pass before the local watcher catches up. A `shdict` reservation would close the same-node race window, but please also define TTL and rollback cleanup and how cross-node Admin API writers are handled. If uniqueness must hold cluster-wide, an etcd-backed atomic reservation or index may still be required. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
