Difference between revisions of "EGI-InSPIRE:Sa1 2013-06-04"

From EGIWiki
Jump to: navigation, search
(SA1.2 Security)
 
(21 intermediate revisions by 8 users not shown)
Line 1: Line 1:
{{Template:Op menubar}}  
+
{{Template:EGI-Inspire menubar}}
 +
 
 
{{Template:Inspire_reports_menubar}}
 
{{Template:Inspire_reports_menubar}}
 
{{TOC_right}}  
 
{{TOC_right}}  
[[Category:SA1 weekly report]]
+
 
 
=Progress of SA1 issues=  
 
=Progress of SA1 issues=  
 
<!-- T. Ferrari -->
 
<!-- T. Ferrari -->
Line 9: Line 10:
 
=Milestones/Deliverables=
 
=Milestones/Deliverables=
 
<!-- T. Ferrari -->
 
<!-- T. Ferrari -->
 
+
* MS431 DMSU: it is in internal review, first internal review provided today to the authors
  
 
=SA1.1 Activity Management=  
 
=SA1.1 Activity Management=  
Line 15: Line 16:
  
 
MEETINGS
 
MEETINGS
 +
* Federated cloud taskforce
 +
* JRA1/SA1 meeting for PY3 review preparation
 +
* meeting to followup the progress of desktop grid accounting
 +
* WLCG operations meeting
 +
* meeting with Availability/Reliability Mini Project, discussion of wider adoption of the software product by EUDAT
 +
* DRIHM meeting: agenda preparation and kickoff of meeting
  
 
ACTIVITIES
 
ACTIVITIES
 +
* Produced NGI core services A/R tables
 +
* Opened a GGUS ticket for misconfigured services in GOCDB (ARMGRID)
 +
* Opened a bug in GGUS for GOCDB (services can be unlinked from their parent site), fix already planned for next release
 +
* 'Updating VO ID cards' campaign and decommission of obsoleted VOs
 +
* restart of South Africa integration activities
 +
* final review of periodic report and SA1 metrics
 +
* status assessment of EMI-1 decommissioning campaign (it is proceeding very well)
 +
* review of MS431 (DMSU)
 +
* revision of GOCDB registration information of EGI.eu central tools
 +
* handling of GGUS tickets
 +
* revision of ROD performance metric
 +
* definition of revision plan of A/R threshold of sites and related suspension policy
 +
* revision of May availability statistics
  
 
=SA1.2 Security=  
 
=SA1.2 Security=  
 
<!-- D. Kelsey -->
 
<!-- D. Kelsey -->
* ongoing handling of current vulnerability
+
* lots of ongoing work handling the current kernel vulnerability (CVE-2013-2094)
* updating of monitoring to handle this vuln
+
* updating of monitoring to handle this vulnerability
* updating compromised certs and security suspension document
+
* updating the Compromised certificates and emergency security suspension document
* SVG had some new vulns - how many?
+
* SVG: one new vulnerability
* preparing for EU review
+
* preparing for EGI-InSPIRE EU review
* discussions on Cloud security
+
* run security forensics training course in the UK for GridPP staff
 +
* discussions on EGI federated cloud security
 
* work on security emergency suspension mini-project
 
* work on security emergency suspension mini-project
 +
* cleanup of EGI-CSIRT communication channels
 +
* discussions on a VO security contact email list and the publishing of security contact details
  
 
= SA1.3 Staged rollout =
 
= SA1.3 Staged rollout =
 
<!-- J. Pina -->
 
<!-- J. Pina -->
 +
 +
* Release of the EGI Trust Anchor release 1.53-1
 +
* SR announcement for the CREAM-SGE (UMD-2 and UMD-3)
 +
* Preparation of the UMD-3 update 1. Products that ready to be released:
 +
** EMI px 1.3.32
 +
** EMI lb 4.0.92
 +
** EMI wms 3.5.1
  
 
=SA1.3 Integration=
 
=SA1.3 Integration=
 
<!-- M. Krakowian  -->
 
<!-- M. Krakowian  -->
* ongoing work on cloud resources integration - attending Fedcloud meeting
+
* ongoing work on cloud resources integration  
 +
**attending Fedcloud meeting
 +
** meeting with security team
 +
** clarifying status of cloud resources monitoring
 +
** meeting with 100 Percent IT company towards site certification
 
* DRIHM collaboration meeting
 
* DRIHM collaboration meeting
 +
* phone meeting between Accounting team and Desktop Grids developers
 +
* following up accounting integration of QCG
  
 
=SA1.4 Central tools=  
 
=SA1.4 Central tools=  
 
<!--E. Imamagic -->
 
<!--E. Imamagic -->
 +
 +
* proposed changes to cloudmon monitoring instance
 +
** new accounting test
 +
* work on monitoring non-registered MPI service endpoints
 +
* analysis of User DN publishing probe
 +
* SAM team removed agreed tests from ROC profile (details in OMB presentation https://indico.egi.eu/indico/materialDisplay.py?contribId=7&materialId=slides&confId=1236)
  
 
=SA1.5 Accounting=  
 
=SA1.5 Accounting=  
'''<!--A. Packer--> Repository '''
+
No report received
 
 
'''<!--A. Packer--> Portal'''
 
  
 
=SA1.6 Helpdesk=  
 
=SA1.6 Helpdesk=  
Line 53: Line 93:
 
=SA1.7 Support=
 
=SA1.7 Support=
 
<!--  Trompert -->
 
<!--  Trompert -->
 +
* followup of new sites with new EMI-1 alarms for software retirement
 +
* follow up of RPI, sites to be suspended, top BDII A/R, Unknowns
 +
* handling topics of the SAM nagios WG.
 +
* handling requests to review SE probes
 +
* attending the OMB
  
 
== Software Support ==
 
== Software Support ==
 
<!-- A Krenek -->
 
<!-- A Krenek -->
  
 +
MS431 is ready for internal review,
 +
[https://documents.egi.eu/document/1775]
 +
 +
{| class="wikitable"
 +
|-
 +
! DMSU tickets flow May 26-Jun 1
 +
|-
 +
| assigned
 +
| 13
 +
|-
 +
| back to tpm
 +
| 2
 +
|-
 +
| reassigned to 3rd level
 +
| 8
 +
|-
 +
| solved
 +
| 4
 +
|}
 +
 +
{| class="wikitable"
 +
|-
 +
! open DMSU tickets status
 +
|-
 +
| assigned
 +
| 0
 +
|-
 +
| in progress
 +
| 1
 +
|-
 +
| waiting for reply
 +
| 2
 +
|-
 +
| on hold
 +
| 2
 +
|}
  
 
== Network Support  ==
 
== Network Support  ==
 
<!-- Mario Reale -->
 
<!-- Mario Reale -->
 +
On hold. Future IPv6 testing coordination activities being revised
  
 
=SA1.8 Availability and core services=
 
=SA1.8 Availability and core services=
 
<!--C. Kanellopoulos-->
 
<!--C. Kanellopoulos-->
 +
Distribution of May statistics, revision of current minimum A/R availability and reliability thresholds and related suspension
 +
Definition of VOMRS (DTEAM) upgrade plan
 +
 
== Documentation ==
 
== Documentation ==
 
<!-- M. Krakowian -->
 
<!-- M. Krakowian -->
Line 71: Line 156:
 
= Meetings=
 
= Meetings=
 
<!--all-->
 
<!--all-->
 +
No face to face meeting currently planned

Latest revision as of 17:25, 6 January 2015

EGI Inspire Main page


Inspire reports menu: Home SA1 weekly Reports SA1 Task QR Reports NGI QR Reports NGI QR User support Reports



Progress of SA1 issues

Nothing new to report.

Milestones/Deliverables

  • MS431 DMSU: it is in internal review, first internal review provided today to the authors

SA1.1 Activity Management

MEETINGS

  • Federated cloud taskforce
  • JRA1/SA1 meeting for PY3 review preparation
  • meeting to followup the progress of desktop grid accounting
  • WLCG operations meeting
  • meeting with Availability/Reliability Mini Project, discussion of wider adoption of the software product by EUDAT
  • DRIHM meeting: agenda preparation and kickoff of meeting

ACTIVITIES

  • Produced NGI core services A/R tables
  • Opened a GGUS ticket for misconfigured services in GOCDB (ARMGRID)
  • Opened a bug in GGUS for GOCDB (services can be unlinked from their parent site), fix already planned for next release
  • 'Updating VO ID cards' campaign and decommission of obsoleted VOs
  • restart of South Africa integration activities
  • final review of periodic report and SA1 metrics
  • status assessment of EMI-1 decommissioning campaign (it is proceeding very well)
  • review of MS431 (DMSU)
  • revision of GOCDB registration information of EGI.eu central tools
  • handling of GGUS tickets
  • revision of ROD performance metric
  • definition of revision plan of A/R threshold of sites and related suspension policy
  • revision of May availability statistics

SA1.2 Security

  • lots of ongoing work handling the current kernel vulnerability (CVE-2013-2094)
  • updating of monitoring to handle this vulnerability
  • updating the Compromised certificates and emergency security suspension document
  • SVG: one new vulnerability
  • preparing for EGI-InSPIRE EU review
  • run security forensics training course in the UK for GridPP staff
  • discussions on EGI federated cloud security
  • work on security emergency suspension mini-project
  • cleanup of EGI-CSIRT communication channels
  • discussions on a VO security contact email list and the publishing of security contact details

SA1.3 Staged rollout

  • Release of the EGI Trust Anchor release 1.53-1
  • SR announcement for the CREAM-SGE (UMD-2 and UMD-3)
  • Preparation of the UMD-3 update 1. Products that ready to be released:
    • EMI px 1.3.32
    • EMI lb 4.0.92
    • EMI wms 3.5.1

SA1.3 Integration

  • ongoing work on cloud resources integration
    • attending Fedcloud meeting
    • meeting with security team
    • clarifying status of cloud resources monitoring
    • meeting with 100 Percent IT company towards site certification
  • DRIHM collaboration meeting
  • phone meeting between Accounting team and Desktop Grids developers
  • following up accounting integration of QCG

SA1.4 Central tools

SA1.5 Accounting

No report received

SA1.6 Helpdesk

  • Ticket monitoring
  • Preparation of the next GGUS release
  • Testing of new features on GGUS test instance
  • Attending OMB

SA1.7 Support

  • followup of new sites with new EMI-1 alarms for software retirement
  • follow up of RPI, sites to be suspended, top BDII A/R, Unknowns
  • handling topics of the SAM nagios WG.
  • handling requests to review SE probes
  • attending the OMB

Software Support

MS431 is ready for internal review, [1]

DMSU tickets flow May 26-Jun 1
assigned 13
back to tpm 2
reassigned to 3rd level 8
solved 4
open DMSU tickets status
assigned 0
in progress 1
waiting for reply 2
on hold 2

Network Support

On hold. Future IPv6 testing coordination activities being revised

SA1.8 Availability and core services

Distribution of May statistics, revision of current minimum A/R availability and reliability thresholds and related suspension Definition of VOMRS (DTEAM) upgrade plan

Documentation

  • reviewing PROC09 in terms of cloud sites certification, identification of possible simplification of the procedure
  • reviewing PROC13 - identification of possible simplification of the procedure

Meetings

No face to face meeting currently planned