pomerium / pomerium / 26511246790

52%

Build Type

push

github

Committed by web-flow

Commit Message

core/databroker: add a cache invalidator and invalidate cache when the storage backend changes (#6357)

## Summary
Clear the cache when the databroker backend changes.

- There's a new cache invalidator that adds gRPC interceptors. For any
message that returns the server version, if we detect that the server
version changes, we invalidate the cache.
- Also invalidate the cache in the databroker server when a new backend
is created.
- Since the cache is global, invalidating it in all-in-one mode is
sufficient to invalidate it for the proxy and authorize services. In
split mode detecting the new server version from gRPC methods should
hopefully also clear the cache fairly quickly since we do `Sync` and
`SyncLatest` streams. When the backend server version changes `Sync`
should abort, and we should try to do a `SyncLatest` which should return
a `Versions` message where we can pick up the new server version.

## Related issues
-
[ENG-4016](https://linear.app/pomerium/issue/ENG-4016/pomerium-does-not-recover-from-a-runtime-databroker-storage-type-swap)

## AI disclosure
none

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

Coverage Stats

55 of 61 new or added lines in 5 files covered. (90.16%)

217 existing lines in 7 files now uncovered.

36791 of 80197 relevant lines covered (45.88%)

305.65 hits per line