Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "HOWTO17 How to use the Catania Science Gateway Framework as Infrastructure Broker"

From EGIWiki
Jump to navigation Jump to search
 
(30 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Fedcloud-tf:Menu}} {{TOC_right}}
{{Template:Op menubar}} {{Template:Doc_menubar}}
The Catania Science Gateway Framework (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the EGI.eu VO Portal and User Traceability policies.
[[Category:Deprecated]]
{| style="border:1px solid black; background-color:lightgrey; color: black; padding:5px; font-size:140%; width: 90%; margin: auto;"
| style="padding-right: 15px; padding-left: 15px;" |
|[[File:Alert.png]] This page is '''Deprecated''' and should no longer be used 
|}
 
{{TOC_right}}  
[[Category:Operations_Manuals]]
The [http://www.catania-science-gateways.it/ Catania Science Gateway Framework] (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the [https://documents.egi.eu/document/80 EGI.eu VO Portal] and [https://documents.egi.eu/document/81 User Traceability] policies.


The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.
The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.
The MyCloud user is the Cloud Tenant. He is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO.
Only SG registered users can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become cloud tenant, please send an e-mail to the [mailto:credentials-admin@ct.infn.it CSGF Credential Administrators].
The Cloud Tenant through MyCloud manages (start, stop, etc.) virtualised services for his community. MyCloud owns a virtualised service library, the Cloud Tenant can deploy on the underlying cloud infrastructure all the services included in this library.
Virtualised service users can ask the Cloud Tenant to add new services on this library filling a survey. The Cloud Tenant, in collaboration with the Cloud site administrators, wil deploy the new services on behalf of the user.
Below a list of Science Gateways based on the CSGF where the MyCloud service is available:
Below a list of Science Gateways based on the CSGF where the MyCloud service is available:
* [https://aginfra-sg.ct.infn.it/ agINFRA Science Gateway]
* [https://aginfra-sg.ct.infn.it/ agINFRA Science Gateway]
* [http://science-gateway.chain-project.eu/ Chain-Reds Science Gateway]
* [http://science-gateway.chain-project.eu/ CHAIN-REDS Science Gateway]
* [http://sgw.garr.it/ GARR Science Gateway] (in Italian)
* [http://sgw.garr.it/ GARR Science Gateway] (in Italian)


The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the [mailto:sg-licence@ct.infn.it CSGF support team].
The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the [mailto:sg-licence@ct.infn.it CSGF Support Team].


== Use the Catania Science Gateway Framework as IAAS or PAAS ==
== How to use the MyCloud service as Cloud tenant ==
The CSGF foresees three distinct figures: the 'Requestor', the 'Cloud Tenant' and the 'Cloud Manager' interacting each other as expressed below:
The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services registered in the MyCloud service library. The Cloud Tenant SG rights are bound within the scope offered by the SG and more in general bound to the resources provided by its own VO.


* Requestor: Any SG registered user can request a virtualised service by filling an online survey accessible by a dedicated section of the SG. The request form has three different set of questions: Requestor' generalities, Cloud resources and the Acceptable usage Policy (AUP). The most important part of the survey consists of the Cloud service description which is splitted in two different parts: The user request one of the available generic templates or a user requests to deploy its own virtual service. Depending on the kind of request the survey questions may differ. At the end of the survey the user must agree and sign to the AUP.
Only SG registered user can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become Cloud Tenant, please send an e-mail to the [mailto:credentials-admin@ct.infn.it CSGF Credential Administrator]. The CSGF registration procedure is described [[Fedcloud-tf:How_to_use_the_Catania_Science_Gateway_Framework_as_Application_Broker#Execute_applications_already_integrated_in_a_Science_Gateway|here]].


* Cloud Tenant: The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO. Only SG registered user can become a Cloud Tenant applying for the specific authorization flag during the portal registration phase. Once gained this particular role it will be possible to access a special portlet named MyCloud. This portlet is capable to manage one or many instances of the requested Cloud services over the Federated Cloud available resources.
Once gained this particular role you could access the MyCloud service and you will be able to manage one or many instances of the requested Cloud services over the underlying cloud resources.


* Cloud Manager: This figure is not stricly related to the SG, it rather depends on the physical resources being shared by the VO. This kind of users are the responsible to phisically define the virtual machine templates that will be instantiable by the Cloud tenants through the MyCloud portlet. In small SGs/VOs the Cloud Tenant fully matches with the Cloud Manager and it could be or not a registered member of the SG.
== Adding a new virtualised service on the MyCloud service library ==
Any user of a community adopting the MyCloud service can request a new virtualised service to his Cloud tenant (a VM containing any OS and software you need) by following the procedure described below:
* Fill in the survey available at http://grid.ct.infn.it/surveys/index.php/89695/lang-en. In this survey you should specify if you would like to use a service already available in the CSGF virtualised service library or to deploy a new virtualised service.
* Your request will be sent to your Cloud tenant. He/she will examine it and inform you if it is accepted or rejected. This is a manual procedure and you could wait for 1/2 working days until your request will be examined.
* If your request is accepted, the Science Gateway administrator will contact you to have any other needed details. After that he deploys (in case of a new service) and starts your virtualised service through the MyCloud service.
* You are now able to use the service.

Latest revision as of 13:48, 10 September 2021

Main EGI.eu operations services Support Documentation Tools Activities Performance Technology Catch-all Services Resource Allocation Security


Documentation menu: Home Manuals Procedures Training Other Contact For: VO managers Administrators
Alert.png This page is Deprecated and should no longer be used

The Catania Science Gateway Framework (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the EGI.eu VO Portal and User Traceability policies.

The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.

The MyCloud user is the Cloud Tenant. He is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO. Only SG registered users can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become cloud tenant, please send an e-mail to the CSGF Credential Administrators.

The Cloud Tenant through MyCloud manages (start, stop, etc.) virtualised services for his community. MyCloud owns a virtualised service library, the Cloud Tenant can deploy on the underlying cloud infrastructure all the services included in this library.

Virtualised service users can ask the Cloud Tenant to add new services on this library filling a survey. The Cloud Tenant, in collaboration with the Cloud site administrators, wil deploy the new services on behalf of the user.

Below a list of Science Gateways based on the CSGF where the MyCloud service is available:

The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the CSGF Support Team.

How to use the MyCloud service as Cloud tenant

The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services registered in the MyCloud service library. The Cloud Tenant SG rights are bound within the scope offered by the SG and more in general bound to the resources provided by its own VO.

Only SG registered user can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become Cloud Tenant, please send an e-mail to the CSGF Credential Administrator. The CSGF registration procedure is described here.

Once gained this particular role you could access the MyCloud service and you will be able to manage one or many instances of the requested Cloud services over the underlying cloud resources.

Adding a new virtualised service on the MyCloud service library

Any user of a community adopting the MyCloud service can request a new virtualised service to his Cloud tenant (a VM containing any OS and software you need) by following the procedure described below:

  • Fill in the survey available at http://grid.ct.infn.it/surveys/index.php/89695/lang-en. In this survey you should specify if you would like to use a service already available in the CSGF virtualised service library or to deploy a new virtualised service.
  • Your request will be sent to your Cloud tenant. He/she will examine it and inform you if it is accepted or rejected. This is a manual procedure and you could wait for 1/2 working days until your request will be examined.
  • If your request is accepted, the Science Gateway administrator will contact you to have any other needed details. After that he deploys (in case of a new service) and starts your virtualised service through the MyCloud service.
  • You are now able to use the service.