Add Support for PG PUT Batch

lib/backend/pgbk/put_batch.go

@@ -0,0 +1,80 @@
+/*
+ * Teleport
+ * Copyright (C) 2025  Gravitational, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package pgbk
+
+import (
+	"context"
+	"slices"
+
+	"github.com/gravitational/trace"
+	"github.com/jackc/pgx/v5/pgtype/zeronull"
+
+	"github.com/gravitational/teleport/lib/backend"
+	pgcommon "github.com/gravitational/teleport/lib/backend/pgbk/common"
+)
+
+const (
+	defaultUpsertBatchChunk = 100
+	putBatchStmt            = `
+INSERT INTO kv (key, value, expires, revision)
+SELECT * FROM UNNEST(
+  $1::bytea[],
+  $2::bytea[],
+  $3::timestamptz[],
+  $4::uuid[]
+)
+ON CONFLICT (key) DO UPDATE
+SET
+	value    = EXCLUDED.value,
+	expires  = EXCLUDED.expires,
+	revision = EXCLUDED.revision;
+`
+)
+
+// PutBatch puts multiple items into the backend in a single transaction.
+func (b *Backend) PutBatch(ctx context.Context, items []backend.Item) ([]string, error) {
+	if len(items) == 0 {
+		return []string{}, nil
+	}
+	revOut := make([]string, 0, len(items))
+	for chunk := range slices.Chunk(items, defaultUpsertBatchChunk) {
+		keys := make([][]byte, 0, len(chunk))
+		values := make([][]byte, 0, len(chunk))
+		expires := make([]zeronull.Timestamptz, 0, len(chunk))
+		revs := make([]revision, 0, len(chunk))
+
+		for _, item := range chunk {
+			keys = append(keys, nonNilKey(item.Key))
+			values = append(values, nonNil(item.Value))
+			expires = append(expires, zeronull.Timestamptz(item.Expires.UTC()))
+
+			revVal := newRevision()
+			revs = append(revs, revVal)
+			revOut = append(revOut, revisionToString(revVal))
+		}
+
+		if _, err := pgcommon.Retry(ctx, b.log, func() (struct{}, error) {
+			_, err := b.pool.Exec(ctx, putBatchStmt, keys, values, expires, revs)
+			return struct{}{}, trace.Wrap(err)
+		}); err != nil {
+			return nil, trace.Wrap(err)
+		}
+	}
+	return revOut, nil
+}

lib/backend/test/put_batch.go

@@ -0,0 +1,202 @@
+/*
+ * Teleport
+ * Copyright (C) 2025  Gravitational, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package test
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+
+	"github.com/gravitational/teleport/api/types"
+	"github.com/gravitational/teleport/lib/backend"
+)
+
+type PutBatcher interface {
+	PutBatch(ctx context.Context, items []backend.Item) ([]string, error)
+}
+
+const (
+	watchInitTimeout  = 10 * time.Second
+	watchEventTimeout = 3 * time.Second
+)
+
+func runPutBatch(t *testing.T, newBackend Constructor) {
+	t.Helper()
+
+	ctx := context.Background()
+	bk, _, err := newBackend()
+	require.NoError(t, err)
+	t.Cleanup(func() { _ = bk.Close() })
+
+	batcher, ok := bk.(PutBatcher)
+	if !ok {
+		t.Skip("backend does not implement PutBatch; skipping PutBatch suite")
+	}
+
+	prefix := MakePrefix()
+	rangeStart := prefix("")
+	rangeEnd := backend.RangeEnd(prefix(""))
+
+	itemEqual := func(a, b backend.Item) bool {
+		return a.Key.String() == b.Key.String() &&
+			a.Revision == b.Revision &&
+			string(a.Value) == string(b.Value) &&
+			a.Expires.Equal(b.Expires)
+	}
+
+	assertItemsEqual := func(t *testing.T, want, got []backend.Item) {
+		t.Helper()
+		require.Len(t, want, len(got))
+		for i := range want {
+			require.True(t, itemEqual(want[i], got[i]))
+		}
+	}
+
+	buildWant := func(items []backend.Item, rev []string) []backend.Item {
+		out := make([]backend.Item, 0, len(items))
+		for i, it := range items {
+			out = append(out, backend.Item{
+				Key:      it.Key,
+				Value:    it.Value,
+				Revision: rev[i],
+				Expires:  it.Expires,
+			})
+		}
+		return out
+	}
+
+	newTestItems := func() []backend.Item {
+		return []backend.Item{
+			{Key: prefix("a"), Value: []byte("A"), Expires: time.Now().Add(1 * time.Hour)},
+			{Key: prefix("b"), Value: []byte("B")},
+			{Key: prefix("c"), Value: []byte("C"), Expires: time.Now().Add(2 * time.Hour)},
+		}
+	}
+	t.Run("put batch items should be propagated in event stream", func(t *testing.T) {
+		w, err := bk.NewWatcher(t.Context(), backend.Watch{})
+		require.NoError(t, err)
+		t.Cleanup(func() { w.Close() })
+
+		select {
+		case <-w.Done():
+			t.Fatal("watcher closed immediately")
+		case ev := <-w.Events():
+			require.Equal(t, types.OpInit, ev.Type)
+		case <-time.After(watchInitTimeout):
+			t.Fatal("timed out waiting for init event")
+		}
+
+		items := newTestItems()
+		rev, err := batcher.PutBatch(ctx, items)
+		require.NoError(t, err)
+		require.NotEmpty(t, rev)
+
+		got := waitForEvents(t, w, len(items), watchEventTimeout)
+		want := buildWant(items, rev)
+		assertItemsEqual(t, want, got)
+		require.NoError(t, bk.DeleteRange(ctx, rangeStart, rangeEnd))
+	})
+
+	t.Run("put-create-update", func(t *testing.T) {
+		items := newTestItems()
+		rev1, err := batcher.PutBatch(ctx, items)
+		require.NoError(t, err)
+		require.NotEmpty(t, rev1)
+
+		res, err := bk.GetRange(ctx, rangeStart, rangeEnd, backend.NoLimit)
+		require.NoError(t, err)
+
+		want := buildWant(items, rev1)
+		got := res.Items
+		assertItemsEqual(t, want, got)
+
+		items[0].Value = []byte("A2")
+		items[1].Value = []byte("B2")
+		items[2].Value = []byte("C2")
+
+		rev2, err := batcher.PutBatch(ctx, items)
+		require.NoError(t, err)
+		require.NotEmpty(t, rev2)
+		require.NotEqual(t, rev1, rev2)
+
+		res, err = bk.GetRange(ctx, rangeStart, rangeEnd, backend.NoLimit)
+		require.NoError(t, err)
+
+		want = buildWant(items, rev2)
+		got = res.Items
+		assertItemsEqual(t, want, got)
+
+		require.NoError(t, bk.DeleteRange(ctx, rangeStart, rangeEnd))
+	})
+
+	t.Run("over-chunk-size", func(t *testing.T) {
+		const itemCount = 1000
+		const payloadSize = 300 * 1024 // 300 KiB
+		items := make([]backend.Item, 0, itemCount)
+		for i := 0; i < itemCount; i++ {
+			items = append(items, backend.Item{
+				Key:     prefix(fmt.Sprintf("item/%04d", i)),
+				Value:   bytes.Repeat([]byte(fmt.Sprintf("%d", i)), payloadSize),
+				Expires: time.Now().Add(5 * time.Minute),
+			})
+		}
+
+		rev, err := batcher.PutBatch(ctx, items)
+		require.NoError(t, err)
+		require.NotEmpty(t, rev)
+
+		res, err := bk.GetRange(ctx, rangeStart, rangeEnd, backend.NoLimit)
+		require.NoError(t, err)
+
+		want := buildWant(items, rev)
+		got := res.Items
+		assertItemsEqual(t, want, got)
+
+		require.NoError(t, bk.DeleteRange(ctx, rangeStart, rangeEnd))
+	})
+}
+
+func waitForEvents(t *testing.T, w backend.Watcher, wantCount int, timeout time.Duration) []backend.Item {
+	t.Helper()
+
+	var out []backend.Item
+	deadline := time.NewTimer(timeout)
+	defer deadline.Stop()
+
+	for len(out) < wantCount {
+		select {
+		case ev, ok := <-w.Events():
+			if !ok {
+				t.Fatalf("watcher closed before receiving all events: got=%d want=%d", len(out), wantCount)
+			}
+			if ev.Type == types.OpPut {
+				out = append(out, ev.Item)
+			}
+		case <-w.Done():
+			t.Fatalf("watcher done before receiving all events: got=%d want=%d", len(out), wantCount)
+		case <-deadline.C:
+			t.Fatalf("timed out waiting for events: got=%d want=%d", len(out), wantCount)
+		}
+	}
+	return out
+}

lib/backend/test/suite.go

@@ -198,6 +198,10 @@ func RunBackendComplianceSuite(t *testing.T, newBackend Constructor) {
 	t.Run("ConditionalDelete", func(t *testing.T) {
 		testConditionalDelete(t, newBackend)
 	})
+
+	t.Run("PutBatch", func(t *testing.T) {
+		runPutBatch(t, newBackend)
+	})
 }
 
 // RequireItems asserts that the supplied `actual` items collection matches