Focus on:  Hide Contributions
Login

Rucio Meeting

→ Europe/Zurich
Dimitrios Christidis (CERN)
    • 15:00 → 15:05
      News 5m
      • 39 Feature freeze since yesterday!
        • Martin: Apologies for slow merging
    • 15:05 → 15:25
      Community News & DevOps roundtable 20m
      • ATLAS
      • CMS
        • Upgraded to 38.5.1
      • Fermilab
        • RUBIN
          • Also upgraded to 38.5.1
        • DUNE
          • Still working on the Rucio upload issue
            • Trying out a different load balancer
            • Results seem promising
      • DaFab
      • CERN IT
      • IHEP
      • MADDEN
      • CTAO
        • Run into an issue during the upgrade to 38.5.1
          • Related to the extract_scope mechanism (#8223)
      • ESCAPE
        • Jupyter extension
          • Few users from ATLAS and CMS
          • Issue fetching PFNs from even medium-sized containers (10K replicas) (#102)
    • 15:25 → 15:55
      Developers roundtable 30m
      • Reflection about ongoing Sprint 6 (Sprint Board) [Maggie]
        • NTR
      • Priority Followup for Rucio 39 "Grand Theft Donkey"
        • We will do a full overview next week when Martin is back 
        • Todo
          • Incorrect RSE shown in FTS Opensearch #7035 [Hugo]
          • API: rendering Enums in docstrings #587 [Maggie]
        • In Progress
          • Rework OIDC user authentication #7310 [Dimitrios, James, Anil]
          • Create a new API endpoint for the clients to request tokens #6638[Dimitrios]
          • More useful client docstrings and CLI help messages (Target: 10/25) #363 [Dimitris]
          • Database: Ensure PostgreSQL ENUM types created during Alembic migrations honor the configured schema #8145 child of #7737 [Dimitris]
          • Rucio Python Client docstrings enhancement (Credentialclient) #7842 child of #363 [Dimitris]
          • Rucio Python Client docstrings enhancement (Scopeclient) #7845 child of #363 [Dimitris]
          • Rucio Python Client docstrings enhancement (Touchclient) #7844 child of #363 [Dimitris]
          • Testing: Make tools/run_tests.sh idempotent #7737 child of #7667 [Dimitris]
          • Database: Introduce a test-suite to detect whether Alembic migration history is inconsistent #8078 child of #7737 [Dimitris]
          • Testing: Introduce a helper functionality for local testing #7928child of #7667 [Dimitris]
          • Document common.constant.RSEAttr #551 [Maggie]
        • In Review
          • Make 0 the top protocol priority #6312 [Dimitrios]
          • Add startup self-check mechanism to block Rucio services when critical diagnostics fail #8197 child of #8011 [Dimitris]
          • Support native json for Oracle DB when compatible version #7648child of #8011 [Dimitris]
          • Prevent multiple Reaper threads from working on the same replicas #6512 [Hugo]
          • Adding a matching pattern for DIDs in list-rules command #7121[Maggie]
          • Rich CLI cannot display RSE information for some RSEs #7693child of #7225 [Maggie]
          • REST API: Add query parameter endpoint for listing accounts by identity to support OIDC identities with slashes #8159 [Mayank]
          • Dependencies: deprecate setup.py and move to pyproject.toml#6971 [Riccardo]
          • No way to check or change ownership of a scope using Rucio client #7830 [Maggie]
            • New PR that is backward compatible
        • Done
          • use literal to store allowed algorithm names for type hints and validation #7858 [James]
          • Confusing log message ‘Policy algorithm module XXX could not be loaded’ #7941 [James]
          • Add tests for default policy algorithm fallbacks #7881 [James]
          • Enforce Conventional Commits in CI #7945 child of #7667[Karan]
          • Unused request gateway functions #7625 [Maggie]
          • Validate account type at account creation #6957 [Maggie]
          • Add docs for daemon arguments #499 [Maggie]
          • Unused config gateway functions #7624 [Maggie]
          • [EPIC: Release 39] UX improvements #621 [Mayank]
          • Integrate OIDC endpoints for Authorization Code Grant Type #507 [Mayank]
        • Delayed
          • Implement new token authentication for download #7029[Dimitrios]
          • Rucio support for full-structure metadata #8011 [Dimitris]
          • Make available + Add to Notebook features failing #83 [Giovanni]
          • Token refresh after expiration #73 [Giovanni]
          • DIDs not being shown correctly in the extension after a successful download #95 [Giovanni]
          • Do not use regex to split did, use scope extraction method #7519[James]
          • Test stability on LTS branches #7964 child of #7667 [Karan]
          • Generate "Configuration parameters" documentation page automatically, to avoid mismatches between documentation and code #325 [Maggie]
          • Change mixed prometheus_client and probe_metric approachs to use PrometheusPusher #129 [Maggie]
          • Migrate probes to use SQLAlchemy #165 [Maggie]
          • Developer Guidelines for Reviews, Testing Requirements #538[Martin]
          • Simplify what we run on CI (test suites, OS, Python versions, DB, …) #7965 child of #7667 [Mayank, Karan]
          • [ EPIC: Release 39 ] : Mutation Operations and Role Based Access to pages/features #622 [Mayank]
          • Fix static code analysis behaviour for functions decorated with @transactional_session, @read_session and @stream_session #6986 [Riccardo]
          • session parameter in *_session decorated functions is required, but effectively treated as optional #6989 child of #6986 [Riccardo]
          • Rucio dependencies in test environments should be installed the same way they are installed when Rucio is installed as a package #344 child of #7667 [Riccardo]
      • General roundtable
          • Ingress nginx retirement discussion
            • Traefik is widely used, but works quite differently for some SSL-related headers
              • SSL termination also a potential problem
            • HAProxy also widely used, closer to nginx
            • Need to decide and implement an alternative by March 2026
              • Or risk a security issue
            • Maybe we should hope for a community-maintained fork?
            • Is the use of a loadbalancer service (i.e. no ingress) a realistic alternative?
    • 15:55 → 16:00
      AOB 5m