WLCG AuthZ Call

Thursday 4 Feb 2021, 15:00 → 16:00 Europe/Zurich

Proposed agenda: 

• Announcements/Info
  • vCHEP Submission 
• Discussions:
  • IAM support migration to CERN (IT-CDA)
• Ongoing points:
  • Plan for VOMS Admin deprecation 
  • Token Propagation Workflow Doc 

Zoom meeting:

Please ensure you are signed up to project-lcg-authz@cern.ch to receive the meeting password!

Join Zoom Meeting
https://cern.zoom.us/j/94718857994

Meeting ID: 947 1885 7994
Password: <see email>
One tap mobile
+41432107042,,94718857994# Switzerland
+41432107108,,94718857994# Switzerland

Dial by your location
        +41 43 210 70 42 Switzerland
        +41 43 210 71 08 Switzerland
        +41 31 528 09 88 Switzerland
        +33 1 7037 9729 France
        +33 7 5678 4048 France
        +33 1 7037 2246 France
Meeting ID: 947 1885 7994
Find your local number: https://cern.zoom.us/u/abjrVtLBu4

Join by SIP
94718857994@188.184.85.92
94718857994@188.184.89.188

Join by H.323
188.184.85.92
188.184.89.188
Meeting ID: 947 1885 7994
Password: <see email>

Attendees: Maarten, Hannah, Jeny, Jim, Andrea, Federica, Enrico, Tom, DavidC, Federica, Jeffrey, Julie, Mine, Marcelo, Petr, Paul,

Notes:

• X.509 -> Tokens transition
  • Small task force is drafting list of missing features and analysing timeframe 
  • Preparing for MB end of Feb
  • Will be shared with relevant mailing lists (us and others)
• CHEP Submission
  • Thanks for edits :)
  • Due end of Feb
  • Brian has raised with Alessandra for DOMA TPC
  • Focus around progression towards token based workflows?
• IAM support migration to CERN
  • EUGridPMA next week to discuss issuing 
  • CMS and ATLAS are deployed, a few small aspects remain
  • Scaling up requires a little more work
  • Size of openshift cluster must be increased
  • Need something on paper about reliance on CERN IT
    • CMS specific
    • Openshift, DB on Demand
  • Consider Knowledge Base article on IAM at CERN

Actions:

• Hannah send link to doc for migration strategy, Maarten offers to help coordinate
• Andrea provide WLCG IAM test roles (already done) so that people can test (and/or clear documentation)
  • Should be usable by Petr
• Andrea to add example of FTS Rucio flow to CHEP submission (with nice pictures)
• Hannah to think about pre-emptive KB article on IAM
• Andrea/Hannah send slides on IAM and GlideinWMS -> https://indico.cern.ch/event/970568/contributions/4153785/attachments/2180128/3682437/GlideinWMSAndIAM-IAMUsers2021.pdf