OSCARS meeting (MADDEN+ETAP)

Europe/Rome

Summary of the meeting:

Both the TORINO and the LOUVAIN RSEs used by ET Rucio are now configured to accept tokens. Lia and Andres were able to download/upload files from/to the RSEs using tokens. The instructions on how to use tokens in the rucio client are already in https://gitlab.et-gw.eu/eib/div1/oscars/madden/et-rucio-client. Lia will complete the instructions with stuff that she put so far in another documentation page.

Nikita finished to setup the CE Rucio server with userpass and x509 auth methods. The TORINO RSE for CE Rucio with x509 is also ready. With the lelp of Lia he needs to configure both Rucio and the RSE to work with tokens.

Rucio client distribution: no news from Patrice about having an ET github account, and ET gitlab will not support container registry in the short term, so we will proceed with putting our rucio client docker image(s) in the VRE ghcr. We have the green light from Enrique and Giovanni.

Matti has a Rucio server setup in his laptop where he is testing changes to allow more than one token issuers. He encountered an issue when adding a second provider. He is waiting for a meeting with a developer from the Rucio Auth team.

Nikita reminded that we wanted to have the Rucio WebUI available.

 

Actions items:

  • Need to configure CE Rucio server to work with tokens (Lia, Nikita).
  • The TORINO RSE used by the CE Rucio server needs to be configured to work with tokens (Lia, Nikita).
  • Need to create a LOUVAIN RSE for the CE Rucio server (Lia, Andres).
  • Upload Rucio client image for ET Rucio in the VRE ghcr (Andres).
  • Issue about Rucio replication rules (Lia, Andres) -> follow up in gitlab issue.
  • Investigate about RucioFS/multiRI authentication (Matti): created document with roadmap 
There are minutes attached to this event. Show them.
    • 11:00 11:20
      Discussion 20m
    • 11:20 11:40
      MADDEN status report 20m
      Speakers: Andres Tanasijczuk (Universite catholique de Louvain), Federica Legger, Lia Lavezzi (INFN Torino), Nikita Avdeev

      TOKEN (Lia) - The implementation of the auth/authz with tokens in RUCIO is complete and ready for testing. The token auth/authz procedure for the xrootd server is in place (many thanks Andres!) and it is possible to write-read using tokens. The documentation page on the server side is here.  while the one on the client side (user) was added in the rucio client README file.

    • 11:40 12:00
      ETAP status report 20m
      Speaker: Paul Laycock