Trilaterale SD-Storage-User support

Thursday 22 Apr 2021, 14:30 → 16:00 Europe/Rome

Link a Teams

Minute disponibili qui:

https://confluence.infn.it/display/CNAF/22-04-2021+Meeting+Notes

 

14:30 → 14:40 Introduction

14:40 → 15:00 Performance storm-webdav e migrazione

Come sono andate le cose con xs-201==> webdav

15:00 → 15:20 Stato Deployment istanza Vault

• https://issues.infn.it/jira/browse/CNTRI-13

• https://confluence.infn.it/display/CNAF/Vault+Testing

15:20 → 15:30 ACL for local groups of the same VO

ACL for local groups of the same VO that wrote the file:

https://issues.infn.it/jira/projects/STOR/issues/STOR-1350

it seems that acl are set to allow the write operation (RW) and never changed also after the put done. It could be the wanted behaviour but we need to discuss how to address the requirements (i.e from JUNO) that asks to inhibit writing for local users
should we use different groups, i.e. JUNO_local or can be managed via storm?
LHCb seems to expect the R only for the lhcb group after the write operation in /storage/gpfs_lhcb/lhcb/user:

        <aclMode>AoT</aclMode>
        <default-acl>
            <acl-entry>
              <groupName>lhcb</groupName>
              <permissions>R</permissions>
            </acl-entry>
        </default-acl>

15:30 → 15:40 Idee e proposte per offrire un endpoint S3

Cominciano ad arrivare richieste per una offerta S3. La riciesta attuale è data dal "CYGNO Use Case - access S3 interface from infncloud".

CYGNO ha un pledge di 80TB al cnaf e instanzia jupyter nb su cloud@infn quindi potenzialmente su qualsiasi sito.

Il loro modello di accesso ai dati adesso è basato su S3 attraverso minio (eventualmente con l'aggiunta di minio gateway).

Possiamo sfruttare gli endpoint webdav in qualche modo senza installare da zero un servizio s3 (via minio ceph o gpfs)? proposte?

15:40 → 15:50 Tape endpoint per storm testbed

come includere nel testbed storm un endpoint tape

15:50 → 16:00 AoB

Revisione task