DOMA/Token Transition

Plot below shows the breakdown of token-vs-certificate transfers through current (Monit link; filtered on destination=USA, group by auth_method).  During DC24, token usage peaked at >50% token-based transfers by volume.

Many thanks to all the sites for their hard work!

Currently, post-DC24 retrospectives are ongoing.  Request: Can sites please send us any issues they observed with tokens during the DC24 period?  We would like to sort through the issues and make sure we upstream / work on your issues.

Pacing items for this year to watch out for:

• CERN IAM services to be migrated to a new infrastructure.

• Mature / release the FTS version that supports tokens.

Working with WLCG to update a community timeline.

Software

• Release

  • XRootD 5.6.8 expected within the week

• Kubernetes Accounting

  • How flexible is the wording of the milestone “Deploy monitoring, alerting and APEL accounting for UTA k8s cluster using Prometheus”?

  • Effort is beginning.

  • Met with others working on the same things (AUDITOR, KAPEL).  There are certainly differences:

    • Existing KAPEL only uses summarized data, not per job data that GRACC expects.

  • But, we can certainly build off their existing code.

  • ATLAS k8s access for the Software Team
    • Working on access to NET2
    • Need to verify access to SWT2/UTA Google k8s
    • Status on UTA creds?