Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "PROC02 Operations Centre creation"

From EGIWiki
Jump to navigation Jump to search
(remove deprecated content)
Tag: Replaced
 
(31 intermediate revisions by 4 users not shown)
Line 1: Line 1:
{{Template:Op menubar}} {{Template:Doc_menubar}} {{TOC_right}}
{{Template:Op menubar}} {{Template:Doc_menubar}}
 
[[Category:Deprecated]]
{{Ops_procedures
{| style="border:1px solid black; background-color:lightgrey; color: black; padding:5px; font-size:140%; width: 90%; margin: auto;"
|Doc_title = Operations Centre creation
| style="padding-right: 15px; padding-left: 15px;" |  
|Doc_link = [[PROC02|https://wiki.egi.eu/wiki/PROC02]]
|[[File:Alert.png]] This page is '''Deprecated'''; the content has been moved to https://confluence.egi.eu/display/EGIPP/PROC02+Operations+Centre+creation
|Version = 19 August 2014
|Policy_acronym = OMB
|Policy_name = Operations Management Board
|Contact_group = operations@egi.eu
|Doc_status = Approved
|Approval_date = 26.10.2010
|Procedure_statement = The purpose of this document is to clearly describe the actions and the relative steps to be undertaken for integrating a Operations Centre into the EGI operational structure.
}}
 
= Overview  =
 
The purpose of this document is to clearly describe actions and relative steps to be undertaken for integrating an Operations Centre into the EGI operational structure.
 
= Definitions  =
 
'''The Integration Process Coordinator''' (IPC) is the entity responsible for integrating a new Operations Centre within EGI.
 
Please refer to the [[Glossary|EGI Glossary]] for the definitions of the terms used in this procedure.
 
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119.
 
= Validation  =
 
First step for validating an Operations Centre is to be politically approved as formed from an official partner of the EGI infrastructure.
 
After this step, the Operations Centre needs to be technically validated. The Operations team is responsible for performing this validation. <br>
 
== Political Validation  ==
 
CASE 1. If an Operations Centre is already represented within the EGI Council we recommend that the Operations Centre political representative within the EGI Council notifies the EGI Chief Operations Officer that the respective Operations Centre is entering its validation cycle. At this point, technical validation can start.
 
CASE 2. If an Operations Centre is not represented within the EGI Council, and it is willing to be represented there, the Operations Centre needs to submit a request for admission to the Council. After the Operations Centre has been accepted by the Council, CASE 1 applies.
 
CASE 3. If a new Operations Centre is not represented within the EGI Council and is not interested in being part of it, but would still like to be a consumer of the EGI Global Services, then an MoU must be established with EGI. Once an MoU is in place technical validation can start.
 
== Technical Validation  ==
 
#The Operations Centre Operations manager(s) sends an email to the Chief Operations Officer (COO) that the Council was informed about the creation of a new Operations Centre, and (if applicable) also that the Council has approved it. The Operations Centre Operations manager(s) should also indicate the IPC responsible for the validation in the email.
 
#The Chief Operations Officer opens a [[GGUS]] ticket to the IPC to start the validation process.
 
= Start of the integration  =
 
*The integration of a new Operations Centre starts when the COO opens an Operations Centre validation ticket to the IPC (via GGUS).
 
*Once the COO ticket is filed, the IPC can start the validation process. In order to trigger the actions described in this document the IPC creates a set of new child tickets that are assigned to the individual partners that are responsible for the various validation steps. Thereby, the integration process should be as transparent as possible to all parties involved. The required actions are described below.
 
<br> An example/template for the Operations Centre creation ticket is provided here:
<pre>Subject: Creation of &lt;Operations Centre name&gt;
 
 
Required information for the creation of the Operations Centre:
Management mailing list&nbsp;: management@xxx.org
Operations Centre Operations manager contact data&nbsp;: Person Surname (email) +phone contact,
Deputy: Person Surname (email) +phone contact,
 
Operations Centre security officer contact data&nbsp;: Person Surname (email) +phone contact,
Operations Centre security mailing list&nbsp;: abuse@xxx.org
 
ROD team mailing list&nbsp;: ngi-support@xxx.org
Operations Centre nagios monitoring system details&nbsp;: https://mon-ngi.xxx.org/nagios
Mailing list for GGUS tickets if using GGUS directly&nbsp;: xxxticket@xxx.org
 
The FAQ document for the Operations Centre provided by the GGUS team as described in [[GGUS:FAQ_Responsible_Units]]
 
</pre>
== Pre-requisites  ==
 
Before opening an '''Operations Centre creation''' GGUS ticket, the Operations Centre should:
 
#Make sure your operational organization is able to fulfill RP OLA https://documents.egi.eu/secure/ShowDocument?docid=463
#Decide about the Operations Centre name. In case of national European Operations Centres, the name should start with "NGI_"  
#Decide whether to use the Operations Centre's own help desk system or use GGUS directly. If the Operations Centre wants to set up their own system they need to provide an interface for interaction to GGUS with the local ticketing system and follow the recommendations available at https://ggus.eu/pages/ggus-docs/interfaces/docu_ggus_interfaces.php.
#Set the following contact points:  
##Management mailing list
##Operations Centre operations manager contact data
##Operations Centre security officer contact data
##Operations Centre security mailing list
##ROD team mailing list (including people responsible for monitoring and supporting the Operations Centre infrastructure)
##Mailing list for GGUS tickets IF GGUS is used directly for the helpdesk system
#All certified Operations Centre sites need to be under Nagios monitoring. The Nagios monitoring infrastructure can be directly operated by the Operations Centre (see https://tomtools.cern.ch/confluence/display/SAMDOC/SAM-Nagios+Administrator+Guide and [[PROC05 Validation of a Operations Centre Nagios]]), or alternative by a third party Operations Centre.
#Fill the FAQ document for the Operations Centre. The template is provided by the GGUS team: [[GGUS:FAQ Responsible Units|GGUS:FAQ_Responsible_Units]]
#Staff in the Operations Centre that should be granted a management role (manager, deputy manager, security officer) should first register a user account in the GOCDB. The user registration procedure is described in the GOCDB user documentation at https://twiki.cern.ch/twiki/bin/view/EMI/Glite-APELInstallation, section 4.1.1
#Staff in Operations Centre is familiar with [https://documents.egi.eu/public/ShowDocument?docid=15 Operational Procedures]  
#People who are responsible for operations should be subscribed to following mailing lists (unless differently specified):<br>
##Operations Centre manager:'''<br>''' noc-managers [at] mailman.egi.eu - registration through https://mailman.egi.eu/mailman/listinfo'''<br>'''  
##ROD team:'''<br>'''All-operator-on-duty [at] mailman.egi.eu - list which integrate all Operations Centres ROD mailing list. <br>Mailing list is populated automatically from GOCDB. New Operations Centres should make sure to record accurate information in GOCDB.
##Regional Nagios administrator:'''<br>'''tool-admins [at] mailman.egi.eu - registration through https://mailman.egi.eu/mailman/listinfo'''<br>'''
##Regional Helpdesk administrator:'''<br>'''ggus-if-devs [at] cern.ch - mailing list designed for coordination of changes in the interface<br>To register please send a request (through for example GGUS system) to GGUS support staff.
##Security staff:'''<br>'''ngi-security-contacts [at] mailman.egi.eu, NGI or OC security officers subscribe to this mailing list<br>site-security-contacts [at] mailam.egi.eu, Site (only certified site) security officers subscribe to this mailing list<br><br>Both mailing lists are populated automatically from GOCDB. New Operations Centres should make sure to record accurate information in GOCDB.
##(Recommended) Site administrators:'''<br> '''<span class="gI">LCG-ROLLOUT [at] jiscmail.ac.uk</span> - list gathers all site admins and is designed for technical discussions - membership not mandatory but useful'''<br> '''Subscription is possible through https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=LCG-ROLLOUT&amp;A=1'''<br>'''
 
= Steps  =
 
{| width="100%"
|-
| width="70%" style="vertical-align: top;" |
Some steps of the process can be done in parallel as they are independent, so all steps grouped within the same task number can be performed concurrently (several different child tickets will be created in order to speed up the process). The general idea is that these tickets must be closed before being able to move on to the next step.
 
| [[Image:Operations Centre creation.jpg|thumb|right]] Creation procedure for new Operations Centre if the Operations Centre wasn't part of a ROC <br>
|}
|}
<br> Validation steps:
{| class="wikitable"
|-
! Step
! Substep
! Action on
! Action
! Required data
! Notes
|-
| 1
| <br>
| IPC
| Verification of the validity of the request (were all needed data provided?)
| <br>
| To check is all needed information are provided to make the process quick
|-
| 2
| <br>
| IPC
| Create child tickets in the order given as follows:
| <br>
| <br>
|-
| <br>
| 1
| GOCDB
| '''Creation of a new Operations Centre entry in the ''(with no site attached)''.<br>'''
|
*Operations Centre name: &lt;Operations Centre name&gt;
*Operations Centre management mailing list: foo@bar.org
*Operations Centre security mailing list:
*Operations Centre Operations manager:
*Operations Centre security officer:
| To register new&nbsp; OC in official EGI database
|-
| <br>
| 2
| Operations Portal
| '''Enter the new Operations Centre in the''' '''Operations dashboard''' (also add ROD mailing list)
| ROD email list
| To allow new OC to use operations dashboard which is <span lang="en" id="result_box" class="short_text"><span class="hps">required to perform grid oversight activity/span&gt;</span></span>
|-
| <br>
| 3
| GGUS
| '''Create a new support unit in '''[[GGUS|'''GGUS''']]<br>
<br>
|
OC should fill in <span class="solution"><nowiki>https://wiki.egi.eu/wiki/GGUS:NGI_XXX_FAQ</nowiki> or <nowiki>https://wiki.egi.eu/wiki/GGUS:XXX_FAQ</nowiki></span>
Instruction how to create GGUS wiki page [[GGUS:FAQ Responsible Units]]
| To make possible to ceate tickets in official EGI&nbsp;ticketing system to new OC
|-
| <br>
| 4
| Operations
| '''Certification of new ROD team'''
[[Grid operations oversight/WI01|Procedure_to_handle_new_ROD_certification_GGUS_tickets]]
|
Include in the GGUS ticket for&nbsp;:
*Country
*Operations Centre acronym
*ROD email list
| To verify if the future ROD team members are properly trained to perform their duties
|-
| 3
| <br>
| The newly created Operations Centre
|
'''Confirmation that Operations Centre read, accept and agree to fulfill the RP OLA'''&nbsp;
https://documents.egi.eu/secure/ShowDocument?docid=463
| <br>
| <br>
|-
| 4
| <br>
| Dteam VO manager
| '''Create a branch/group in Dteam VO '''for Operations Centre and assign DN of people who will be dteam VO representative for the Operations Centre, Operations Centre Group owner and Operations Centre Group manager.
''Responsibilities and terminology''
''VO representative: A person that can approve or deny dteam VO membership requests. This person is selected by the applicant during the registration phase.''
''Group owner: A person that can approve or deny Group membership requests. In addition he can create subgroups within his Group.''
''Group manager: A person that can approve or deny Group membership requests.''<br>
These responsibilities can be assigned to the same person(s).
How to assign the child ticket: assign the ticket to "VO support" after the selection of "dteam" in the concerned VO field
This step is not blocking the process and can be done in parallel. It is required to finish this step before closing parent ticket.
| Following data about each responsible person:
*Name and Surname
*DN
*email
|
To make possible to register operations staff from new NGI to register in Dteam VO.
This VO gather all operations staff and allow them to access the grid.
|-
| 5
| <br>
| The newly created Operations Centre
|
''(This step only applies to Operations Centres running an Operations Centre Nagios instance)''
'''Include the NAGIOS host in the GOCDB '''as a 'ngi.SAM' service.
| <br>
| To validate Nagios instance it has to be first &nbsp; registered in GOC&nbsp;DB&nbsp;
|-
| 6
| <br>
| ''<br>''
The newly created Operations Centre / IPC
|
'''Configure the Operations Cente in the Nagios instance'''
| <br>
| <br>
|-
| 7<br>
| <br>
| Nagios team
|
''(This step only applies to Operations Centres running an Operations Centre Nagios instance)''
'''Include the Operations Centre level Nagios in the central ops-monitor Nagios instance. '''
| <br>
| <br>
|-
| 8
| <br>
| The newly created Operations Centre
| '''Final confirmation that the new Operations Centre can start the operations'''
| <br>
| The confirmation means that NGI will provide all services required in OLA
|-
| rowspan="2" | 9
| rowspan="2" | <br>
| GOCDB
|
*''[If the Operations Centre was part of a OC]''
'''GOCDB transfers related sites''' from the source ROC to the new Operations Centre structure.<br>
| <br>
| The sites moving across to the new NGI in the ticket indicated in the ticket.
|-
| The newly created Operations Centre
|
*''[If the Operations Centre wasn't part of a OC]''
'''Newly created Operations Centre should insert at least one sites'''
| <br>
| Nagios system need at least one site to be validated.
|-
| 10
| <br>
| The newly created Operations Centre
|
''[If the Operations Centre was part of a OC]'' '''Transfer all open operational tickets to the new Operations Centre in GGUS'''.
| <br>
| To <span lang="en" class="short_text" id="result_box"><span class="hps">ensure that non of the GGUS tickets were forgotten durign the process.</span></span>
|-
| 11
| <br>
| IPC
|
''[This step only applies to Operations Centres running an Operations Centre Nagios instance]''
'''Validation process of the new Operations Centre Nagios''', as described at&nbsp;:
[[PROC05 Validation of a Operations Centre Nagios]].
| <br>
| <br>
|-
| 12
| <br>
| Nagios team
| '''Validation that sites/Operations Centre shown up correctly in Central DBs'''
| <br>
| <br>
|-
| 13
| <br>
| ''<br>''
Nagios team
|
''[If the Operations Centre was part of a OC]''
''(This step only applies to Operations Centres running an Operations Centre Nagios instance)''
'''Migrating alerts from OC to Operations Centre Nagios instance. '''
| <br>
| <br>
|-
| 14<br>
| OPTIONAL
| The newly created Operations Centre
| '''All sites should configured GIIS''' according to the instructions at:
[[MAN01|MAN1_How_to_publish_Site_Information]]
  GlueSiteOtherInfo: EGI_NGI=&lt;Operations Centre name&gt;
GlueSiteOtherInfo: GRID=EGI
This step can be performed at any time from this point.
| <br>
| To confirm that all sites publish proper data in information system about new NGI.
|-
| 15<br>
| <br>
| The newly created Operations Centre
|
''[If the Operations Centre was part of a OC]''
'''Inform managers of regional VOs to change the VO scope of their VOs''' to the relevant Operations Centre (national). This action require only confirmation from Operations Centre manager that information was passed.
Information which should be pass to VO managers: "The Vo scope can be changes by creating a ticket to Operations portal SU in GGUS."
| <br>
| To spread among Vo information
|-
| 16
| <br>
| The newly created Operations Centre
| '''NGI_XX_SERVICES service group'''
The newly created Operations Centre should create in GOC DB NGI_XX_SERVICES service group and attached services listed on page: [[NGI services in GOCDB]]
| <br>
| <br>
|-
| 17
| <br>
| The newly created Operations Centre
| '''Create a GGUS ticket to "Operations"''' SU&nbsp;with information about newly created service group and official NGI&nbsp;Top-BDII, SAM, Argus instance. Ask to add NGI manager to NGI managers mailing list.&nbsp;
| <br>
|
''&nbsp;''
|-
| 18
| <br>
| IPC
| '''Final checks by the IPC. '''
| <br>
|
''Were all steps taken and finished properly?&nbsp;''
|-
| 19
| <br>
| Operations <br>
|
'''Final checks '''should be verified.
The information that the Operations Centre is ready should be sent in Monthly broadcast and announced during OMB&nbsp;by EGI&nbsp;Operations team.
''(This broadcast should be sent to VO managers ('''except Ops and Dteam VO''') and NOC/ROC managers)''
See the template below for an indication of the message content.
<pre>Subject: &lt;Operations Centre name&gt; is operational
Dear All,
We would like to announce that &lt;Operations Centre name&gt; is now fully operational
and that we have finished its integration procedure. All necessary operational
teams and tools are established in our Operations Centre and we are ready for production.
This Operations Centre is visible in all operational tools as &lt;Operations Centre name&gt;
and is responsible for all &lt;COUNTRY&gt; sites.
Best regards,
</pre>
| <br>
| <br>
|}
= Revision history  =
{| class="wikitable"
|-
! Version
! Authors
! Date
! Comments
|-
| 2.10
| Alessandro Paolini
| 2016-
| made distinction between NGI (national entity) and Operations Centre (international entity, it could include also more NGIs)
|-
| 2.09
| Alessandro Paolini
| 2016-06-07
| "EGI Operations Support" was decommissioned, changed all the references to "Operations"
|-
| 2.08
| Malgorzata Krakowian
| 2014-10-06
| step 17 - providing information to Operations about NGI core services
|-
| 2.07<br>
| Malgorzata Krakowian<br>
| 2011-11-15<br>
| Reordered to have all Nagios related steps as close as possible. Added new column with explanation why the step should be taken.<br>
|-
| 2.06
| Malgorzata Krakowian
| 2011-11-02
| Step for RP OLA acceptance added; New point to prerequisites about RP OLA added
|-
| 2.05
| Malgorzata Krakowian
| 2011-09-28
| Cleaning; GGUS require wiki page not a faq document etc.
|-
| 2.04
| Malgorzata Krakowian
| 2011-04-1
| Step concerning SAMAP tool was removed due to tool decommission
|-
| 2.03
| Gonçalo Borges
| 2011-03-31
| Operations Centre creation process visualization
|-
| 2.02
| T. Ferrari
| 2011-03-17
| Assignment of procedure number, update of title "Operations Centre creation coordination procedure" to "Operations Centre Creation", small editorial improvements
|-
| 2.02
| Małgorzata Krakowian
| 2011-01-27
| Name change from NGI to Operations Centre
|-
| 2.01
| Dimitris Zilaskos
| 2010-12-06
| Clarification concerning dteam VO branch creation step
|-
| 2.00
| Małgorzata Krakowian, M. Radecki
| 2010-10-26
| Approved by OMB
|-
|
| M. Krakowian
| 19 August 2014
| Change contact group -&gt; Operations support
|}
[[Category:Operations_Procedures]]

Latest revision as of 09:41, 15 April 2022