add caching to 'get_opa_user_roles'

Author: labrenbe

superset-opa-integration/superset-custom-opa.yaml

@@ -8,7 +8,7 @@ metadata:
   }
 spec:
   image:
-    custom: docker.stackable.tech/sandbox/superset:4.0.2-stackable0.0.0-dev-opaV2
+    custom: docker.stackable.tech/stackable/superset:4.0.2-stackable0.0.0-dev-opa
     productVersion: 4.0.2
     pullPolicy: Never
   clusterConfig:

superset/stackable/opa-authorizer/opa_authorizer/opa_manager.py

@@ -1,8 +1,10 @@
 # pylint: disable=missing-module-docstring
 import logging
+import os
 
 from http.client import HTTPException
 from typing import List, Optional, Tuple
+from cachetools import cached, TTLCache
 from flask import current_app, g
 from flask_appbuilder.security.sqla.models import (
     Role,
@@ -49,6 +51,10 @@ def get_user_roles(self, user: Optional[User] = None) -> List[Role]:
         return user.roles
 
 
+    @cached(cache=TTLCache(
+        maxsize = 1024,
+        ttl = int(os.getenv('STACKABLE_OPA_CACHE_TTL', '10'))
+        ))
     def get_opa_user_roles(self, username: str) -> set[str]:
         """
         Queries an Open Policy Agent instance for the roles of a given user.

superset/stackable/opa-authorizer/poetry.lock

@@ -11,6 +11,7 @@ apache-superset = "==4.0.2"
 flask = "^2.2.5"
 flask-appbuilder = "^4.4.1"
 opa-python-client = "^2.0.2"
+cachetools = "^5.5.0"
 
 
 [tool.poetry.group.dev.dependencies]