Rucio Meeting

Thursday 4 Sept 2025, 15:00 → 16:00 Europe/Zurich

Martin Barisits (CERN)

15:00 → 15:05 News

• September release schedule
  • Sep-01 38.1.0
  • Sep-08 35.? LTS
  • Sep-15 38.?
  • Sep-29 38.?
• Rucio workshop

15:05 → 15:25 Community News & DevOps roundtable

• ATLAS
• CMS
  • 38.1 running on integration
• Fermilab RUBIN / DUNE / ...
  • DUNE
    • 38.1 also on integration
    • Meeting with DUNE compute people
  • RUBIN
    • Sending data to more sites
• EPIC
• DaFab
• PIC
  • MAGIC
    • Has been frozen (due to personpower)
      • Getting familiar with deployment and the service running
      • Going for the LTS releases
  • CTA
    • Testing, but can be deployed anywhere else (on 35 LTS -> 38 LTS)
      • Some certificate issues
• MADDEN
  • Feedback for the design/implementation
  • Uploading file issue
    • Not enough space
• CTA
  • 35 -> 38 update
    • rucio upload/download belle2 check
      • Needs to be fixed
    • policy package regular expression
    • migration in rucio helm charts
      • At some point the upgrade chain is broken
• IHEP
  • Finished all transfers for HERD, all smooth
• ESCAPE
  • EOSC tokens

15:25 → 15:35 SIG Tokens monthly update

Speaker: Dimitrios Christidis (CERN)

• WLCG Token profile update (v1.1)
  • Doesn't change anything for us really
  • Recommendations a bit clearer
• Q: Difference to "supported" IdPs (like IAM or CiLogon) to others (Keycloak, EGI Checkin, ...)
  • Main limitation is support of profiles (WLCG Profile) for storage token interaction
  • Also handling of aud claims is a little different in some IdPs, which is currently a limitation 
    • New RFC to be implemented in the IdPs (RFC 8707)

15:35 → 15:55 Developers roundtable

• Reflection about ongoing Sprint 1 (Sprint Board) [Martin]
  • • Going well
• Priority Followup for Rucio 39 "Grand Theft Donkey"
  • Todo
    • Test stability on LTS branches #7964 [Karan]
    • Simplify what we run on CI (test suites, OS, Python versions, DB, …) #7965 [Karan]
    • Developer Guidelines for Reviews, Testing Requirements #538 [Martin]
    • Create a new API endpoint for the clients to request tokens #6638 [Dimitrios]
    • Implement new token authentication for download #7029 [Dimitrios]
    • Migrate probes to use SQLAlchemy #165 [Eric]
    • DIDs not being shown correctly in the extension after a successful download #95 [Enrique]
    • Make available + Add to Notebook features failing #83 [Enrique]
    • More useful client docstrings and CLI help messages #363 [Dimitris]
    • Refactor current Metadata-related classes #7716 [Dimitris]
    • Do not use regex to split did, use scope extraction method #7519 [James]
    • Add tests for default policy algorithm fallbacks #7881 [James]
    • Prevent multiple Reaper threads from working on the same replicas #6512 [Hugo]
    • Incorrect RSE shown in FTS Opensearch #7035 [Hugo]
    • Integrate OIDC endpoints for Authorization Code Grant Type #507 [Mayank]
    • [EPIC: Release 39] UX improvements #621 [Mayank]
    • [ EPIC: Release 39 ] : Mutation Operations and Role Based Access to pages/features #622 [Mayank]
    • Fix static code analysis behaviour for functions decorated with @transactional_session, @read_session and @stream_session #6986 [Riccardo]
    • session parameter in *_session decorated functions is required, but effectively treated as optional #6989 [Riccardo]
    • Rucio dependencies in test environments should be installed the same way they are installed when Rucio is installed as a package #344 [Riccardo]
    • Rich CLI cannot display RSE information for some RSEs #7693 [Maggie]
    • No way to check or change ownership of a scope using Rucio client #7830 [Maggie]
    • Document common.constant.RSEAttr #551 [Maggie]
    • Generate "Configuration parameters" documentation page automatically, to avoid mismatches between documentation and code #325 [Maggie]
    • API: rendering Enums in docstrings #587 [Maggie]
    • Validate account type at account creation #6957 [Maggie]
    • Unused request gateway functions #7625 [Maggie]
    • Unused config gateway functions #7624 [Maggie]
    • Adding a matching pattern for DIDs in list-rules command #7121 [Maggie]
    • Change mixed prometheus_client and probe_metric approachs to use PrometheusPusher #129 [Maggie]
  • In Progress
    • Rework OIDC user authentication #7310 [Anil]
    • Token refresh after expiration #73 [Giovanni]
  • In Review
    • Enforce Conventional Commits in CI #7945 [Karan]
      • Ticket number in the trailer/subject
    • Make 0 the top protocol priority #6312 [Dimitrios]
      • Wait until the end of the release
    • use literal to store allowed algorithm names for type hints and validation #7858 [James]
    • Confusing log message ‘Policy algorithm module XXX could not be loaded’ #7941 [James]
    • Dependencies: deprecate setup.py and move to pyproject.toml #6971 [Riccardo]
      • Needs some rebase
    • Add docs for daemon arguments #499 [Maggie]
  • Done
  • Delayed
• Miscellaneous
  • • Integrating Rucio extension in SWAN (CERN)
      • @all please provide feedback here: https://docs.google.com/document/d/1Jxzvs_CXSnsZkIWMIGFAwHDC3H4S_lgkaAQvRvxhJ78/edit?usp=sharing
    • PR on Abacus
      • Add test results to PR
      • Add test cases

15:55 → 16:00 AOB