Skip to content

Commit bc4b328

Browse files
authored
Update users_in_keeper.md
1 parent 64b441b commit bc4b328

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

content/en/altinity-kb-setup-and-maintenance/users_in_keeper.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,7 @@ Pros:
5555
Cons:
5656
- Writes depend on Keeper availability. `CREATE/ALTER/DROP USER` and `CREATE/ALTER/DROP ROLE`, plus `GRANT/REVOKE`, fail if Keeper is unavailable, while existing authentication/authorization may continue from already loaded cache until restart.
5757
- Operational complexity increases (Keeper health directly affects RBAC operations).
58+
- Keeper data loss or accidental Keeper path damage can remove replicated RBAC state, and users may lose access; keep regular RBAC backups and test restore procedures.
5859
- Can conflict with `ON CLUSTER` if both mechanisms are used without guard settings.
5960
- Invalid/corrupted payload in Keeper can be skipped or be startup-fatal, depending on `throw_on_invalid_replicated_access_entities`.
6061
- Very large RBAC sets (thousands of users/roles or very complex grants) can increase Keeper/watch pressure.

0 commit comments

Comments
 (0)