Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "HOWTO17 How to use the Catania Science Gateway Framework as Infrastructure Broker"

From EGIWiki
Jump to navigation Jump to search
 
(19 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Fedcloud-tf:Menu}} {{TOC_right}}
{{Template:Op menubar}} {{Template:Doc_menubar}}
[[Category:Deprecated]]
{| style="border:1px solid black; background-color:lightgrey; color: black; padding:5px; font-size:140%; width: 90%; margin: auto;"
| style="padding-right: 15px; padding-left: 15px;" |
|[[File:Alert.png]] This page is '''Deprecated''' and should no longer be used 
|}
 
{{TOC_right}}  
[[Category:Operations_Manuals]]
The [http://www.catania-science-gateways.it/ Catania Science Gateway Framework] (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the [https://documents.egi.eu/document/80 EGI.eu VO Portal] and [https://documents.egi.eu/document/81 User Traceability] policies.
The [http://www.catania-science-gateways.it/ Catania Science Gateway Framework] (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the [https://documents.egi.eu/document/80 EGI.eu VO Portal] and [https://documents.egi.eu/document/81 User Traceability] policies.


The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.
The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.
The MyCloud user is the Cloud Tenant. He is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO.
Only SG registered users can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become cloud tenant, please send an e-mail to the [mailto:credentials-admin@ct.infn.it CSGF Credential Administrators].
The Cloud Tenant through MyCloud manages (start, stop, etc.) virtualised services for his community. MyCloud owns a virtualised service library, the Cloud Tenant can deploy on the underlying cloud infrastructure all the services included in this library.
Virtualised service users can ask the Cloud Tenant to add new services on this library filling a survey. The Cloud Tenant, in collaboration with the Cloud site administrators, wil deploy the new services on behalf of the user.
Below a list of Science Gateways based on the CSGF where the MyCloud service is available:
Below a list of Science Gateways based on the CSGF where the MyCloud service is available:
* [https://aginfra-sg.ct.infn.it/ agINFRA Science Gateway]
* [https://aginfra-sg.ct.infn.it/ agINFRA Science Gateway]
* [http://science-gateway.chain-project.eu/ Chain-Reds Science Gateway]
* [http://science-gateway.chain-project.eu/ CHAIN-REDS Science Gateway]
* [http://sgw.garr.it/ GARR Science Gateway] (in Italian)
* [http://sgw.garr.it/ GARR Science Gateway] (in Italian)


The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the [mailto:sg-licence@ct.infn.it CSGF support team].
The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the [mailto:sg-licence@ct.infn.it CSGF Support Team].


== Use the Catania Science Gateway Framework as IAAS or PAAS ==
== How to use the MyCloud service as Cloud tenant ==
The CSGF foresees two user roles with different rights: the 'Requestor' and the 'Cloud Tenant':
The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services registered in the MyCloud service library. The Cloud Tenant SG rights are bound within the scope offered by the SG and more in general bound to the resources provided by its own VO.
* the Requestor ask for a virtualised service to the Science Gateway manager. This new virtualised service can be a VM with only the OS installed (IAAS model) or a VM with application(s) pre-installed (PAAS model).
* The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services.


In the following sub-sections are described the procedures to use the MyCloud service as requestor or cloud tenant.
Only SG registered user can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become Cloud Tenant, please send an e-mail to the [mailto:credentials-admin@ct.infn.it CSGF Credential Administrator]. The CSGF registration procedure is described [[Fedcloud-tf:How_to_use_the_Catania_Science_Gateway_Framework_as_Application_Broker#Execute_applications_already_integrated_in_a_Science_Gateway|here]].


=== Requestor ===
Once gained this particular role you could access the MyCloud service and you will be able to manage one or many instances of the requested Cloud services over the underlying cloud resources.
Any user registered in one of the Science Gateways where the MyCloud service is available can request a virtualised service (a VM containing any OS and software you need) by following the procedure described below:
 
* Go to the home page of the chosen Science Gateway and ask for an account. The registration procedure is described [[Fedcloud-tf:How_to_use_the_Catania_Science_Gateway_Framework_as_Application_Broker#Execute_applications_already_integrated_in_a_Science_Gateway|here]].
== Adding a new virtualised service on the MyCloud service library ==
Any user of a community adopting the MyCloud service can request a new virtualised service to his Cloud tenant (a VM containing any OS and software you need) by following the procedure described below:
* Fill in the survey available at http://grid.ct.infn.it/surveys/index.php/89695/lang-en. In this survey you should specify if you would like to use a service already available in the CSGF virtualised service library or to deploy a new virtualised service.
* Fill in the survey available at http://grid.ct.infn.it/surveys/index.php/89695/lang-en. In this survey you should specify if you would like to use a service already available in the CSGF virtualised service library or to deploy a new virtualised service.
* You request will be sent to the Science Gateway administrator. He will examin your request and inform you if it is accepted or rejected. This is a manual procedure and you could wait for 1/2 working days until your request will be examined.
* Your request will be sent to your Cloud tenant. He/she will examine it and inform you if it is accepted or rejected. This is a manual procedure and you could wait for 1/2 working days until your request will be examined.
* If your request is accepted, the Science Gateway administrator will contact you to have any other needed details. After that he starts to deploy your virtualised service in the Science Gateway.
* If your request is accepted, the Science Gateway administrator will contact you to have any other needed details. After that he deploys (in case of a new service) and starts your virtualised service through the MyCloud service.
* When the virtualised service will be available on the Science Gateway, you will receive a notification by e-mail.
* You are now able to use the service.
* To use your new virtualised service, go to the Science Gateway, log-in and select the MyCloud service on the SG main menu
 
=== Cloud Tenant ===
The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO.
Only SG registered user can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become cloud tenant, please send an e-main to the [mailto:credentials-admin@ct.infn.it CSGF Credential Administrator].
Once gained this particular role it will be possible to access the MyCloud service with additional privileges. You will be able to manage one or many instances of the requested Cloud services over the Federated Cloud available resources.

Latest revision as of 13:48, 10 September 2021

Main EGI.eu operations services Support Documentation Tools Activities Performance Technology Catch-all Services Resource Allocation Security


Documentation menu: Home Manuals Procedures Training Other Contact For: VO managers Administrators
Alert.png This page is Deprecated and should no longer be used

The Catania Science Gateway Framework (CSGF) has been developed by INFN, Division of Catania (Italy), to provide application developers with a tool to create Science Gateways (SGs) in short time and in a very easy way. CSGF is made of a set of libraries to manage Authentication & Authorization mechanisms and to interact with several different kinds of DCIs (grid, cloud, HPC, local, etc.). The CSGF is based on well established and widely adopted standards, such as SAGA, SAML, OCCI, JSR 286, etc. and it is fully compliant with both the EGI.eu VO Portal and User Traceability policies.

The CSGF allows users to instanciate virtual services on the EGI Federated Cloud through web portals/SGs. The Science Gateways based on CSGF provide users with intuitive web interface to manage virtualised services such as instantiating, moving them around different physical resources; interact with and terminate them. This can been done using the CSGF service named MyCloud.

The MyCloud user is the Cloud Tenant. He is a special SG user having the rights to manage the instances of the virtualised services. The Cloud Tenant SG rights are bounded within the scope offered by the SG and more in general bounded to the resources provided by its own VO. Only SG registered users can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become cloud tenant, please send an e-mail to the CSGF Credential Administrators.

The Cloud Tenant through MyCloud manages (start, stop, etc.) virtualised services for his community. MyCloud owns a virtualised service library, the Cloud Tenant can deploy on the underlying cloud infrastructure all the services included in this library.

Virtualised service users can ask the Cloud Tenant to add new services on this library filling a survey. The Cloud Tenant, in collaboration with the Cloud site administrators, wil deploy the new services on behalf of the user.

Below a list of Science Gateways based on the CSGF where the MyCloud service is available:

The MyCloud service can be installed in any Science Gateway based on Liferay 6.1. If you are interested, please, contact the CSGF Support Team.

How to use the MyCloud service as Cloud tenant

The Cloud Tenant is a special SG user having the rights to manage the instances of the virtualised services registered in the MyCloud service library. The Cloud Tenant SG rights are bound within the scope offered by the SG and more in general bound to the resources provided by its own VO.

Only SG registered user can become a Cloud Tenant applying for the "Cloud Manager" role during the portal registration phase. If you are already registered in a Science Gateway and would like to become Cloud Tenant, please send an e-mail to the CSGF Credential Administrator. The CSGF registration procedure is described here.

Once gained this particular role you could access the MyCloud service and you will be able to manage one or many instances of the requested Cloud services over the underlying cloud resources.

Adding a new virtualised service on the MyCloud service library

Any user of a community adopting the MyCloud service can request a new virtualised service to his Cloud tenant (a VM containing any OS and software you need) by following the procedure described below:

  • Fill in the survey available at http://grid.ct.infn.it/surveys/index.php/89695/lang-en. In this survey you should specify if you would like to use a service already available in the CSGF virtualised service library or to deploy a new virtualised service.
  • Your request will be sent to your Cloud tenant. He/she will examine it and inform you if it is accepted or rejected. This is a manual procedure and you could wait for 1/2 working days until your request will be examined.
  • If your request is accepted, the Science Gateway administrator will contact you to have any other needed details. After that he deploys (in case of a new service) and starts your virtualised service through the MyCloud service.
  • You are now able to use the service.