• Reflection about ongoing Sprint 6 (Sprint Board) [Maggie]
  • NTR
• Priority Followup for Rucio 39 "Grand Theft Donkey"
  • We will do a full overview next week when Martin is back 
  • Todo
    • Incorrect RSE shown in FTS Opensearch #7035 [Hugo]
    • API: rendering Enums in docstrings #587 [Maggie]
  • In Progress
    • Rework OIDC user authentication #7310 [Dimitrios, James, Anil]
    • Create a new API endpoint for the clients to request tokens #6638[Dimitrios]
    • More useful client docstrings and CLI help messages (Target: 10/25) #363 [Dimitris]
    • Database: Ensure PostgreSQL ENUM types created during Alembic migrations honor the configured schema #8145 child of #7737 [Dimitris]
    • Rucio Python Client docstrings enhancement (Credentialclient) #7842 child of #363 [Dimitris]
    • Rucio Python Client docstrings enhancement (Scopeclient) #7845 child of #363 [Dimitris]
    • Rucio Python Client docstrings enhancement (Touchclient) #7844 child of #363 [Dimitris]
    • Testing: Make tools/run_tests.sh idempotent #7737 child of #7667 [Dimitris]
    • Database: Introduce a test-suite to detect whether Alembic migration history is inconsistent #8078 child of #7737 [Dimitris]
    • Testing: Introduce a helper functionality for local testing #7928child of #7667 [Dimitris]
    • Document common.constant.RSEAttr #551 [Maggie]
  • In Review
    • Make 0 the top protocol priority #6312 [Dimitrios]
    • Add startup self-check mechanism to block Rucio services when critical diagnostics fail #8197 child of #8011 [Dimitris]
    • Support native json for Oracle DB when compatible version #7648child of #8011 [Dimitris]
    • Prevent multiple Reaper threads from working on the same replicas #6512 [Hugo]
    • Adding a matching pattern for DIDs in list-rules command #7121[Maggie]
    • Rich CLI cannot display RSE information for some RSEs #7693child of #7225 [Maggie]
    • REST API: Add query parameter endpoint for listing accounts by identity to support OIDC identities with slashes #8159 [Mayank]
    • Dependencies: deprecate setup.py and move to pyproject.toml#6971 [Riccardo]
    • No way to check or change ownership of a scope using Rucio client #7830 [Maggie]
      • New PR that is backward compatible
  • Done
    • use literal to store allowed algorithm names for type hints and validation #7858 [James]
    • Confusing log message ‘Policy algorithm module XXX could not be loaded’ #7941 [James]
    • Add tests for default policy algorithm fallbacks #7881 [James]
    • Enforce Conventional Commits in CI #7945 child of #7667[Karan]
    • Unused request gateway functions #7625 [Maggie]
    • Validate account type at account creation #6957 [Maggie]
    • Add docs for daemon arguments #499 [Maggie]
    • Unused config gateway functions #7624 [Maggie]
    • [EPIC: Release 39] UX improvements #621 [Mayank]
    • Integrate OIDC endpoints for Authorization Code Grant Type #507 [Mayank]
  • Delayed
    • Implement new token authentication for download #7029[Dimitrios]
    • Rucio support for full-structure metadata #8011 [Dimitris]
    • Make available + Add to Notebook features failing #83 [Giovanni]
    • Token refresh after expiration #73 [Giovanni]
    • DIDs not being shown correctly in the extension after a successful download #95 [Giovanni]
    • Do not use regex to split did, use scope extraction method #7519[James]
    • Test stability on LTS branches #7964 child of #7667 [Karan]
    • Generate "Configuration parameters" documentation page automatically, to avoid mismatches between documentation and code #325 [Maggie]
    • Change mixed prometheus_client and probe_metric approachs to use PrometheusPusher #129 [Maggie]
    • Migrate probes to use SQLAlchemy #165 [Maggie]
    • Developer Guidelines for Reviews, Testing Requirements #538[Martin]
    • Simplify what we run on CI (test suites, OS, Python versions, DB, …) #7965 child of #7667 [Mayank, Karan]
    • [ EPIC: Release 39 ] : Mutation Operations and Role Based Access to pages/features #622 [Mayank]
    • Fix static code analysis behaviour for functions decorated with @transactional_session, @read_session and @stream_session #6986 [Riccardo]
    • session parameter in *_session decorated functions is required, but effectively treated as optional #6989 child of #6986 [Riccardo]
    • Rucio dependencies in test environments should be installed the same way they are installed when Rucio is installed as a package #344 child of #7667 [Riccardo]
• General roundtable
  
  • • Ingress nginx retirement discussion
      • Traefik is widely used, but works quite differently for some SSL-related headers
        • SSL termination also a potential problem
      • HAProxy also widely used, closer to nginx
      • Need to decide and implement an alternative by March 2026
        • Or risk a security issue
      • Maybe we should hope for a community-maintained fork?
      • Is the use of a loadbalancer service (i.e. no ingress) a realistic alternative?