Rucio Meeting

Thursday 25 Jun 2026, 15:00 → 16:00 Europe/Zurich

Martin Barisits (CERN)

15:00 → 15:05 News

• July & August meeting schedule
  • Jul-02
  • Jul-09 MCP Talk
  • Jul-16 Rucio 41 retrospective
  • Jul-23 Rucio 42 planning
  • Jul-30 CANCELLED
  • Aug-06
  • Aug-13 CANCELLED
  • Aug-20
  • Aug-27 CANCELLED
• July release schedule
  
  • Jul-06 Rucio 41 feature freeze
  • Jul-06 40.5.0
  • Jul-13 41.0.0rc1
  • Jul-20 41.0.0 final
  • Jul-27 41.?

15:05 → 15:25 Community News & DevOps roundtable

• ATLAS
  • DUNE dumps for consistency checking questions
    • Can the DUNE solution be integrated in the auditor?
      • Perhaps, needs different parsing of the dump
      • Could investigate, but would need some work on the auditor in general
• CMS
  • Tapes and tokens is there an update?
    
    • Dimitrios working on it, but not done yet
      • Patch welcome, but difficult to isolate a single conveyor-submitter to TAPEs
• Fermilab DUNE / RUBIN / etc
• DUNE
• ePIC
• DaFab
• INFN Datalake
  • Rucio instance update for Euclid and cygno -> 38 LTS & Argo
• RI-SCALE
  • More RI-SCALE deployments (outside of CERN)
  • data transfers under user identity development
  • S3 header authentication
• MADDEN / ETAP
  • Tested multi-ri successfully
    • autotests do not work
    • Difficult to debug since no working local dev env
    • Documentation
• CTAO
  • xrootd (instead of gridftp) for ONSITE instance now working

15:25 → 15:55 Developers roundtable

• Reflection about ongoing Sprint 5 (Sprint Board)
  • Martin still fixing annoyances in sprint bot
  • Not daily, every couple of days
    • Thu and following Monday
• PR review sprint/marathon
  • 39 -> 37
• Rucio 41 priority followup
  • Todo
    • XS: npm_and_yarn dependabot jobs failing #123 [Francesc]
    • XS: Cannot authenticate to account with given credentials [x509 proxy] #98 [Francesc]
    • L: Token refresh after expiration #73 [Giovanni]
  • In Progress
    • XL: Rucio support for full-structure metadata #8011 [Dimitris, Reviewer: Martin]
    • L: Create a new API endpoint for the clients to request tokens #6638 [Dimitrios, Reviewer: Martin]
    • XS: Rucio Python Client docstrings enhancement (`ConfigClient`) #8612 child of #363 [Dimitris, Maggie]
    • XS: Rucio Python Client docstrings enhancement (`RuleClient`) #8619 child of #363 [Dimitris, Maggie]
    • XL: Finalise CLI command structure #8349 [Maggie, Reviewer: Dimitrios]
    • XL: Simplify what we run on CI (test suites, OS, Python versions, DB, …) #7965 child of #7667 [Mayank, Reviewer: Ben]
    • XL: Feature Flags Subsystem for Page/View Enablement #752 [Mayank]
  • In Review
    • XS: Wrong documentation for `dids/scope/name/files` call #8053 [Dimitris]
    • S: Rucio Python Client docstrings enhancement (`RSEClient`) #8607 child of #363 [Dimitris, Maggie]
    • S: Rucio Python Client docstrings enhancement (`AccountClient`) #8608 child of #363 [Dimitris, Maggie]
    • M: Do not use regex to split did, use scope extraction method #7519 [James]
    • S: Remove SRM and GridFTP protocols #8497 [Maggie]
    • M: Replace some "add" and "update" CLI commands with "set" #8547 [Maggie, Reviewer: Dimitrios]
    • M: Generate "Configuration parameters" documentation page automatically, to avoid mismatches between documentation and code #325 [Maggie]
    • M: Change mixed prometheus_client and probe_metric approachs to use PrometheusPusher #129 [Maggie]
    • S: `get_metadata_bulk` ignores `plugin` when `inherit=False` #7323 child of #8011 [Max, Dimitris]
  • Done
    • S: Rucio WebUI authentication cookie without HttpOnly flag #8475 [ASHISHTOMER0817, Reviewer: Ben]
    • M: remove auto feature for oidc auth #8318 child of #7310 [Anil]
    • M: Datasets erased through the Reaper do not produce any messages #8022 [Ben]
    • M: Old WebUI OIDC must not use Host header for authentication flow #8473 [Ben]
    • XL: Fix flaky tests #8270 [Ben, Reviewer: Dimitris]
    • S: Improve Juptyerlab extension operator guide #768 [Giovanni]
    • M: Schema values overridden in policy package are not picked up unless at top level #7731 [James]
    • M: rucio upload does not check that the user has permission to add DIDs #6058 [James]
    • XL: Test stability on LTS branches #7964 child of #7667 [Karan, Reviewer: Martin]
    • S: Make loaded CLI options configurable #8494 child of #8349 [Maggie]
    • XL: [EPIC] UX improvements (Target 22) #621 [Mayank]
  • Delayed
    • M: Implement new token authentication for download #7029 [Dimitrios]
    • XL: Convert RSE availabilities from a boolean to an enum #6660 [Ben, Reviewer: Dimitrios]
    • XL: Fixing dependency management #8500 [Ben, Reviewer: Martin]
    • L: Prevent multiple Reaper threads from working on the same replicas #6512 [Hugo, Reviewer: Dimitrios]
    • L: Make scope optional in all API endpoints using scope + name information #8196 [Maggie, Reviewer: Max]
    • XL: Replace Env Generator Tool and EnvConfigGateway with Zod Schema-Based Env Validation #753 [Mayank]
    • XL: Permission Management based on the server side Policy #739 [Mayank]
    • M: Let metadata plugins implement `get_metadata_bulk` #7324 [Max]
    • L: allow wildcard * on a scope level for list_dids #6070 [Max, Reviewer: Mario] ---> XL
      • Dimitris might have a look on this, time allowing
• Issue management guideline and migration
  • PR: https://github.com/rucio/documentation/pull/829
• Other discussion
  • Can #8566 be included in 41?
    • Yes, that's the plan, but some testing issues
  • SAML authentication deprecation `/auth/saml` asap?
    • repeated question: is anyone in the communit currently using SAML authentication?
      • last week (June 18th), no-one reported that they use SAML
      • There are some defects in the implementation and we are unsure whether to fix them or remove SAML compatibility entirely
    • -> take it out 41 --> Ben creates issue
      • What to do with 38?
  •  

15:55 → 16:00 AOB

• SAML authentication deprecation /auth/saml asap?
  • repeated question: is anyone in the communit currently using SAML authentication?
    • last week (June 18th), no-one reported that they use SAML
  • There are some defects in the implementation and we are unsure whether to fix them or remove SAML compatibility entirely