ELIXIR Competence Center meeting (teleconference)

Monday 19 Dec 2016, 12:00 → 13:00 Europe/Amsterdam

TBA

Please join the meeting from your computer, tablet or smartphone: https://www.gotomeeting.com/join/997716685 You can also dial in using your phone. Global access numbers: http://www.btconferencing.com/gotomeeting/itfn.asp Meeting Access Code: 997-716-685

Slides ELIXIR-VO-EGI-AAI-20161219.pptx

ELIXIR - CC Monthly Meeting

19.12. 2016

 

Present:

Dario Vianello (EBI, 
Kostas Koumantaros (GRNET)
Kimmo Mattila (CSC)
Gergely Sipos (EGI)
Enol Fernandez (EGI)
Amelie Cornelis (EBI)
Mohamed Berdi (CNRS)

 

Agenda/Minutes.

1. Items from previous meeting

1.1. Extension of the Elixir-CC project

- The extension request for ELIXIR CC project was approved.
- The duration of the project was extended for 6 months (Until the end of August 2016)

1.2 Mapping  ELIXIR projects to EGI VOs

Geregely and Enol gave a presentation about the current apporach how EGI VO:s could be mapped to the projects used in ELIXIR. (See the attached slides)

- On 2016 EGI has started to do formal SLA:s with research communities. These SLA define and secure the resources of the community specific Virtual Organizatios (VOs). SLA includes several node specific OLAs.

-Only 10 out of about 200 VO:s have already SLA

- ELIXIR has one VO: vo.elixir-europe.org. (no SLA yet, manager: Steven Newouse).

- To support several ELIXIR projects EGI could do a special SLA that would be generic for the whole ELIXIR comminity.  This way EGI  would not assign the resources for individual ELIXIR projects. ELIXIR would then have a process (e.g. evaluation board) that would allocate resources form the VO to individual projects. New project specific VO:s would then be created for these resource allocations in the EGI federated cloud.  To populate the new VO with the project members, a suitable attribute must be transmitted through the AAI interface from ELIXIR to EGI. ( Is two roles, manager an user, enough?)

Kimmo will check, if this matches the expectations of ELIXIR community?
How ELIXIR wants to do the capacity allocations?

Enol presented three optios for thechnical implementation of this linking:

1. The current setup of using resources. This requires that the personal DN of the VO user is registered in ELIXIR AAI. This is not supported at the moment.

2. User gets automatically generated DN when he/she registers to the ELIXIR platform. This DN is transported to the VO in EGI side. As user does not have a certificate he/she needs to ask for proxy certificate through the ELIXIR AAI for the DN  to allow user to access the EGI resources.( CILogon is used for this. EBI is using CILogon too. Amelie will send information about the CILogon system EBI is using).

3. OpenID connect with EGI CheckIn. Once user has registered to a VO he/she can use the EGI CheckIn service to choose identity provider (for example ELIXIR AAI) to be used for authentication. The EGI CheckIn service sends the information about the user (e.g. name, level of assurance , project memberships) further to the EGI FedCloud VO:s. This methodology is currently under testing on OpenStack Dashboard and later on in EBI. Open Nebula implementation of this is not yet clear. CESNET will study this 1Q 2017.

Kostas: OpenID connect will be tested in Synnefo early 2017.

Enol: SAML can be used in stead of OpenID connect if needed.

Gergely: We can use the old fashioned certificate approach for use cases until the EGI CheckIn becomes available. FedCould VO is already working and available for use cases (X509-based access). Use cases can move on to the FedCloud in stages:
     * Move to fedcloud.egi.eu VO --> This already works, CRNS use case already reached this stage    
    * Use vo.elixir-europe.org VO    
     ** with X509 personal certificates (not CILogon!) --> Enol to test
         ** OpenStack sites --> Enol is testing this with EBI
         ** OpenNebula and Synnefo sites --> Depending on assessment of
integration by CESNET, GRNET

2. Use case status reports

2.1  cBioPortal replication
2.2  Marine metagenomics

  - no news to report

2.3  Insyght Comparative Genomics (Mohamed)

  - Application is available in the AppDB market palace. In the single VM mode only at the moment. Implementation of the cluster mode is under construction.

2.4 PhenoMeNal project (Dario Vianello)

- Packaging of the applications to the local cloud portal has started.
- Terraform integration to OCCI should later of enable extension to EGI Federated Cloud.
 

2.5  JetStream interoperability (Robert Quick)

 

 

3. Coming events

- ELIXIR f2f meeting in Stockholm, February 2017. : This meeting is more internal meeting of ELIXIR that will focus on summarising the progress of the last year. Thus this is not very relevant meeting for ELIXIR CC.

 

- Elixir All hands: March 21.-23. 2017, Rome

 

4. Next meeting

Date will be decided in January 2017