Skip to content

feat(kas): add configurable SRT skew tolerance and diagnostics [backport to release/service/v0.11] #2913

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
strantalis merged 1 commit into from
Nov 14, 2025
Merged

feat(kas): add configurable SRT skew tolerance and diagnostics [backport to release/service/v0.11] #2913

strantalis merged 1 commit into from
Nov 14, 2025

Conversation

@opentdf-automation
Copy link
Contributor

@opentdf-automation opentdf-automation bot commented Nov 14, 2025

Description

Backport of #2886 to release/service/v0.11.

@opentdf-automation opentdf-automation bot requested review from a team as code owners November 14, 2025 20:07
@opentdf-automation opentdf-automation bot mentioned this pull request Nov 14, 2025
Merged
3 tasks
@opentdf-automation
feat(kas): add configurable SRT skew tolerance and diagnostics (#2886)
9ac01e7 
### Proposed Changes

*

### Checklist

- [ ] I have added or updated unit tests
- [ ] I have added or updated integration tests (if appropriate)
- [ ] I have added or updated documentation

### Testing Instructions

(cherry picked from commit 1a57227)
@opentdf-automation opentdf-automation bot force-pushed the backport-2886-to-release/service/v0.11 branch from 4022852 to 9ac01e7 Compare November 14, 2025 20:07
@github-actions github-actions bot added comp:kas Key Access Server docs Documentation labels Nov 14, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Nov 14, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 173.33315ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 104.385121ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 365.29447ms
Throughput 273.75 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.145093618s
Average Latency 389.429411ms
Throughput 127.73 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.424268483s
Average Latency 273.277325ms
Throughput 182.32 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 14, 2025

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 188.79674ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 106.649878ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 359.296996ms
Throughput 278.32 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.676542304s
Average Latency 395.255413ms
Throughput 126.02 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.83295535s
Average Latency 277.229872ms
Throughput 179.64 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Nov 14, 2025

X-Test Results

opentdfplatformC1WSUA.dockerbuild
✅ java-v0.4.34
cukes-report
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-4022852e2076a63778635b862ac1cf8e3f6c43b0
✅ java-4022852e2076a63778635b862ac1cf8e3f6c43b0
✅ go-4022852e2076a63778635b862ac1cf8e3f6c43b0

@github-actions
Copy link
Contributor

github-actions bot commented Nov 14, 2025

X-Test Results

opentdfplatformKG4SMD.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2913
✅ java-pull-2913
✅ go-pull-2913

@strantalis strantalis merged commit cac20cd into release/service/v0.11 Nov 14, 2025
34 checks passed
@strantalis strantalis deleted the backport-2886-to-release/service/v0.11 branch November 14, 2025 20:28
@opentdf-automation opentdf-automation bot mentioned this pull request Nov 14, 2025
Merged
jakedoublev pushed a commit that referenced this pull request Nov 14, 2025
@opentdf-automation
chore(release): release service 0.11.4 (#2898)
7ebb535 
🤖 I have created a release *beep* *boop*
---


##
[0.11.4](service/v0.11.3...service/v0.11.4)
(2025-11-14)


### Features

* **kas:** add configurable SRT skew tolerance and diagnostics [backport
to release/service/v0.11]
([#2913](#2913))
([cac20cd](cac20cd))


### Bug Fixes

* **authz:** deny resources granularly when attribute value FQNs not
found [backport to release/service/v0.11]
([#2897](#2897))
([225627d](225627d))
* **core:** add obligations X-Rewrap-Additional-Context to default CORS
allowed headers [backport to release/service/v0.11]
([#2902](#2902))
([b9586b4](b9586b4))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@strantalis strantalis strantalis approved these changes

@jakedoublev jakedoublev jakedoublev approved these changes

Assignees

No one assigned

Labels

comp:kas Key Access Server docs Documentation size/m

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@strantalis @jakedoublev