October 2017 - glue-wg - lists.ogf.org

New class and attributes for GLUE 2.1/cloud extensions
by Baptiste Grenier 30 Nov '17

30 Nov '17

Dear all, Please find here a proposition for the creation of a new clas and some attributes to replace the use of OtherInfo to represent some usefull cloud-related information. We would like to discuss this with you in order to integrate it in the GLUE2.1 draft as soon as possible. The names should be quite self explanatory, please let me know if you need any clarification. Best regards, Baptiste ## For CloudComputingEndpoint * GLUE2CloudComputingEndpointAuthentication * EndpointAuthentication_t * New type * Mandatory * Open enumeration * Default Values: X509-VOMS, OIDC ? * Replacing: * GLUE2EntityOtherInfo : Authn=X509-VOMS ## For CloudComputingImage * GLUE2CloudComputingImageDescription * New type * Mandatory * String * Replacing: * GLUE2EntityOtherInfo: description:Image for TinyCoreLinux * GLUE2CloudComputingImageVersion * New type * Mandatory * String * Replacing: * GLUE2EntityOtherInfo version:XXX * ContextualizationName_t * Existing type, just need to update default values * Open enumeration * Default Values: cloudinit (without a -), bash * Changing cloudinit to cloud-init (official name) * GLUE2CloudComputingImageNetworkInput / GLUE2CloudComputingImageNetworkOuput * Used to represent communication ports used/required/exposed by the image * Custom objectClass: NetworkTraffic * Optional * Can be specified multiple times * Replacing: * GLUE2EntityOtherInfo traffic-in:XXXXX * GLUE2EntityOtherInfo traffic-out:XXXXX * ObjectClass NetworkTraffic * New object class * inheriting from Entity * under/related to CloudCompoutingImage * Name * CloudCompoutingImageNetworkTraffic? * CloudCompoutingNetworkTraffic? * Attributes * NetworkTrafficProtocol_t: * Custom type * Mandatory * Closed enumeration * Values: all, tcp, udp, cmp, ipsec * NetworkTrafficType_t: * Custom type * Mandatory * Closed enumeration * Values: inbound, outbound * NetworkTrafficRange_t: * Custom type * Mandatory * String * Example (default?): 0.0.0.0/0 * NetworkTrafficPort_t: * Custom type * Mandatory * String * Example: 443 -- Baptiste Grenier EGI Foundation - Operations Officer Phone: +31 627 860 852 Skype: baptiste.grenier.egi

2 6

Handling VO specific information in Glue 2.1
by Enol Fernández 19 Oct '17

19 Oct '17

Hi *, as we start to implement v2.1 of the GlueSchema for the EGI federated cloud we have realised that we miss some VO specific information and we are unsure how/where is the best way to publish this: Users belong to several VOs and sites may support more than one of those. When users authenticate against a given endpoint, the endpoint will return a list of local projects/groups that the users is allowed to use. Each project/group supports a VO in our current implementation. While in the past this was not an issue since the user authenticated with a VOMS proxy that only contained information a single VO and therefore the endpoint would just return a single project. Now with the transition to federated identity, the endpoint will receive claims on every VO the user is member of and there is no way for the user to determine which local project/group to use. We would need a way to publish a site-defined identifier of the project/group that supports each VO at a given site, so user could just match the VO with that id and select the appropriate one during authentication. We have checked the current draft of the schema and haven't seen a clear place to publish this kind of information. Our current guess would be to include this in the AccessPolicy or MappingPolicy. Since in our implementation we are using shares as a way to express VO information probably for us the MappingPolicy is the best fit, but would like to get your input on the best way to proceed. PS: I tried to submit this email before being subscribed, so apologies if it gets sent twice. > -- Enol Fernández | Cloud Technologist | EGI Foundation enol.fernandez(a)egi.eu

4 6

new version of UML class diagrams for GLUE2.1
by Alessandro Paolini 02 Oct '17

02 Oct '17

Dear all, I've made a first version of the UML class diagrams (htc and cloud) comprising the new classes and other changes, for replacing the ones currently included in the GLue2.1 Specification draft document. Please have a look at them and let me know if you have any comment: https://docs.google.com/document/d/1x2gUt2lJNevle8evQu6LcKr9xs5NHRd6FbNzb1y… cheers, Alessandro -- Dr. Alessandro Paolini Operations Officer - EGI Foundation Science Park 140 1098 XG Amsterdam The Netherlands skype: alessandro.paolini.egi ********************************* "I believe in the power of laughter and tears" "as an antidote to hatred and terror" "A day without laughter" "is a wasted day" >>> Charlie Chaplin

1 0