Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "EGI-InSPIRE:Italy-QR6"

From EGIWiki
Jump to navigation Jump to search
 
(18 intermediate revisions by 2 users not shown)
Line 1: Line 1:
__NOTOC__
{{Template:EGI-Inspire menubar}}
 
{{Template:Inspire_reports_menubar}}
{{TOC_right}}


{| border="1" cellspacing="0" cellpadding="2"
{| border="1" cellspacing="0" cellpadding="2"
Line 41: Line 44:
!scope="col"|Date||Location||Title||Participants||Outcome (Short report & Indico URL)  
!scope="col"|Date||Location||Title||Participants||Outcome (Short report & Indico URL)  
|-
|-
|
|test
|
|
|
|
Line 60: Line 63:
|-
|-
| September 19-23, 2011  
| September 19-23, 2011  
| Amsterdam
| Lyon
| EGI-TF  
| EGI-TF  
| 10
| 10
| -
| Participation in different sessions(Presentation: “Storage accounting with DGAS and HLRmon", "An integrated monitoring tool for grid site administrator"). The poster on the IGI portal has been awarded as the best of the event
}
 
<!-- |+Provided by each SA1 partner. Just report events relevant to SA1 activities.-->
|-
!scope="col"|Date||Location||Title||Participants||Outcome (Short report & Indico URL)  
|-
|||||||||
|-
|-
| September 19-23, 2011
| Lyon
| OGF 33
| 1
| Presentation and discussion: “Next Generation Usage Records"
|}
|}


<!--
<!--
Line 91: Line 93:
== 2. ACTIVITY REPORT  ==
== 2. ACTIVITY REPORT  ==
<!--''Note: just report activities relevant to this Quarter.''-->
<!--''Note: just report activities relevant to this Quarter.''-->
==== 2.1.1. GARR  ====
==== 2.1.2. INFN  ====
IGI statutes and legal structure are being finalized, while IGI has started working as INFN Special Project, with expected duration of about 1 year, which will end when IGI will start as an independent legal structure.
The TSA1.2N activities were essentially related to normal operations and support to the sites for vulnerability handling.
Concerning TNA2.3N tasks, we actively participated, inside the SPG group, to the definition of the new document on the "Security Policy for the Endorsement and Operation of Virtual Machine Images", describing the basic requirements for the generation and distribution of virtual machine images.
We also started to contribute to the activities of the Security Assessment Working Group, which should preform a risk analysis and evaluation of the EGI IT infrastructure, possibly following standards like iso27K.
Starting from the end of October, the NGI_IT security officer will take the duty to coordinate the Training and Dissemination subgroup of the EGI-CSIRT.
An extensive activity has also been performed on the study of the EuGRIDPMA policies defining the MICS/SCLS CA profiles and on the security requirements of a On Line MICS Certification Authority. This work will possibly bring to the design of a new accredited CA, to be used with a general purpose Grid Portal which is being prepared in IGI.
While a pre-production release for a security dashboard has been announced, our NGI joined the call for validation enthusiastically, suggesting a possible way on how integrate security dashboard alarms into rod oversight framework and discerning from real and false positive alarms for our NGI sites.
As part of SAM II level support unit we contributed with 6 on duty weeks solving operational problems into SAM instances deployed at NGIs and recorded as GGUS tickets.
We recently joined the EGI Federated Clouds Task Force as Resource Provider, starting to provide a testbed based on the WNoDes solution. This solution allows to integrate Cloud and Grid technologies and permits to expose the same set of computing resources at site level to the user's communities using different interfaces (Grid and Cloud).
*'''Resource centers coordination'''
** Good overall results in the league table for this quarter;
** Operation problems are discussed in the regular coordination meeting. The ROD team works well. Grid services are maintained up-to-date, but services have not been migrated to EMI/UMD yet (more details on Issues and mitigation section).
*'''Core Services'''
** In the reported period the operation team keeps the Grid core services running smoothly and updated in the region.
*'''Early Adopter activity'''
** Early adopter activity has been carried out for several products:
*** WMS
**** 3.3.2 (started at the end of july and finished in the first part of August) rejected from UMD
**** 3.3.3 (~06.09.2011) rejected from UMD
**** 3.3.4 (20.10.2011) was performed for EMI but rejected (did not reached the Staged Rollout in UMD)
*** Since August we carried out SAM updates 12, 13 and 14 as early adopter deploying and testing the new fail over configuration provided from update 13.
*** EMI updates 4 and 7 have been deployed for Argus services.
*** STORM SR: we did the Staged rollout for "EMI1 - Storm 1.7.1", but several problem were discovered (as documented in the EAs report https://documents.egi.eu/public/ShowDocument?docid=779 ) so that this update was rejected


===2.1. Progress Summary===
===2.2. Main Achievements===
===2.2. Main Achievements===
At the 23rd EUGridPMA meeting the IGI portal architecture has been presented. The portal satisfied an important use case, where the end-users do now have software or experitise to handle any kind of key material or proxies, and this use case is universal and must be supported in some way and the PMA approved the solution adopted. The poster on the IGI portal has also been awarded as the best of the EGI-TF.


Concerning TNA2.3N tasks, we started to contribute to the activities of the Security Assessment Working Group, which should preform a risk analysis and evaluation of the EGI IT infrastructure, possibly following standards like iso27K. From the end of October, the NGI_IT security officer will take the duty to coordinate the Training and Dissemination subgroup of the EGI-CSIRT.


===2.3. Issues and mitigation===
===2.3. Issues and mitigation===
Line 100: Line 136:
{| border="1" cellspacing="0" cellpadding="2"
{| border="1" cellspacing="0" cellpadding="2"
|-
|-
!scope="col"| Issue Description
! scope="col" | Issue Description  
!scope="col"| Mitigation Description
! scope="col" | Mitigation Description
|-
|-
| GARR: No issues have emerged so far.
|-
| INFN: EMI/UMD upgrade status
| Due to the IGI start-up activities, the Grid core services and the Grid site services have not be migrated to EMI/UMD release yet. The IGI release (local repositories, ad-hoc documentation for site admis, DGAS integration) is expected in the next week and the complete upgrade of the infrastructure is expected during the next quarter.
|}
|}
<!--
Please, fill the table below. You can add a line copyng the two lines
|-
| Issue Description || Issue mitigation
-->

Latest revision as of 17:44, 22 January 2015

EGI Inspire Main page


Inspire reports menu: Home SA1 weekly Reports SA1 Task QR Reports NGI QR Reports NGI QR User support Reports



Quarterly Report Number NGI Name Partner Name Author
QR6 IGI GARR M. Reale
QR6 IGI INFN L. Gaido, P. Veronesi


1. MEETINGS AND DISSEMINATION

1.1. CONFERENCES/WORKSHOPS ORGANISED

Date Location Title Participants Outcome (Short report & Indico URL)
test

1.2. OTHER CONFERENCES/WORKSHOPS ATTENDED

Date Location Title Participants Outcome (Short report & Indico URL)
September 19-23, 2011 Lyon EGI-TF 10 Participation in different sessions(Presentation: “Storage accounting with DGAS and HLRmon", "An integrated monitoring tool for grid site administrator"). The poster on the IGI portal has been awarded as the best of the event
September 19-23, 2011 Lyon OGF 33 1 Presentation and discussion: “Next Generation Usage Records"


1.3. PUBLICATIONS

Publication title Journal / Proceedings title Journal references
Volume number
Issue

Pages from - to
Authors
1.
2.
3.
Et al?

2. ACTIVITY REPORT

2.1.1. GARR

2.1.2. INFN

IGI statutes and legal structure are being finalized, while IGI has started working as INFN Special Project, with expected duration of about 1 year, which will end when IGI will start as an independent legal structure.

The TSA1.2N activities were essentially related to normal operations and support to the sites for vulnerability handling. Concerning TNA2.3N tasks, we actively participated, inside the SPG group, to the definition of the new document on the "Security Policy for the Endorsement and Operation of Virtual Machine Images", describing the basic requirements for the generation and distribution of virtual machine images. We also started to contribute to the activities of the Security Assessment Working Group, which should preform a risk analysis and evaluation of the EGI IT infrastructure, possibly following standards like iso27K. Starting from the end of October, the NGI_IT security officer will take the duty to coordinate the Training and Dissemination subgroup of the EGI-CSIRT.

An extensive activity has also been performed on the study of the EuGRIDPMA policies defining the MICS/SCLS CA profiles and on the security requirements of a On Line MICS Certification Authority. This work will possibly bring to the design of a new accredited CA, to be used with a general purpose Grid Portal which is being prepared in IGI.

While a pre-production release for a security dashboard has been announced, our NGI joined the call for validation enthusiastically, suggesting a possible way on how integrate security dashboard alarms into rod oversight framework and discerning from real and false positive alarms for our NGI sites.

As part of SAM II level support unit we contributed with 6 on duty weeks solving operational problems into SAM instances deployed at NGIs and recorded as GGUS tickets.

We recently joined the EGI Federated Clouds Task Force as Resource Provider, starting to provide a testbed based on the WNoDes solution. This solution allows to integrate Cloud and Grid technologies and permits to expose the same set of computing resources at site level to the user's communities using different interfaces (Grid and Cloud).

  • Resource centers coordination
    • Good overall results in the league table for this quarter;
    • Operation problems are discussed in the regular coordination meeting. The ROD team works well. Grid services are maintained up-to-date, but services have not been migrated to EMI/UMD yet (more details on Issues and mitigation section).
  • Core Services
    • In the reported period the operation team keeps the Grid core services running smoothly and updated in the region.
  • Early Adopter activity
    • Early adopter activity has been carried out for several products:
      • WMS
        • 3.3.2 (started at the end of july and finished in the first part of August) rejected from UMD
        • 3.3.3 (~06.09.2011) rejected from UMD
        • 3.3.4 (20.10.2011) was performed for EMI but rejected (did not reached the Staged Rollout in UMD)
      • Since August we carried out SAM updates 12, 13 and 14 as early adopter deploying and testing the new fail over configuration provided from update 13.
      • EMI updates 4 and 7 have been deployed for Argus services.
      • STORM SR: we did the Staged rollout for "EMI1 - Storm 1.7.1", but several problem were discovered (as documented in the EAs report https://documents.egi.eu/public/ShowDocument?docid=779 ) so that this update was rejected

2.2. Main Achievements

At the 23rd EUGridPMA meeting the IGI portal architecture has been presented. The portal satisfied an important use case, where the end-users do now have software or experitise to handle any kind of key material or proxies, and this use case is universal and must be supported in some way and the PMA approved the solution adopted. The poster on the IGI portal has also been awarded as the best of the EGI-TF.

Concerning TNA2.3N tasks, we started to contribute to the activities of the Security Assessment Working Group, which should preform a risk analysis and evaluation of the EGI IT infrastructure, possibly following standards like iso27K. From the end of October, the NGI_IT security officer will take the duty to coordinate the Training and Dissemination subgroup of the EGI-CSIRT.

2.3. Issues and mitigation

Issue Description Mitigation Description
GARR: No issues have emerged so far.
INFN: EMI/UMD upgrade status Due to the IGI start-up activities, the Grid core services and the Grid site services have not be migrated to EMI/UMD release yet. The IGI release (local repositories, ad-hoc documentation for site admis, DGAS integration) is expected in the next week and the complete upgrade of the infrastructure is expected during the next quarter.