EGI Applications Database VM Operations dashboard

Transcription

1 EGI Applications Database VM Operations dashboard Marios Chatziangelou, et al. Institute of Accelerating Systems and Applications (IASA) EGI-Engage is co-funded by the Horizon 2020 Framework Programme of the European Union under grant number

2 AppDB VM Operations The objective (EGI-Engage) : The EGI Applications Database (AppDB) will evolve from its current role as catalogue of applications and virtual machines (VM) to include a graphical user interface allowing authorized users to perform basic VM management operations AppDB Portal VM operations dashboard 2

3 The AppDB portal Portal Select VMI (=VA version ) or, select VMI (VA version), & VO & site/endpoint & template. and be redirected to the VM ops dashboard for further adjustments and execution 3

4 The VMops dashboard (1/3) Highlighted features for the end-user User identification Based of the aforementioned identification, provide a personalized list of the VMs that are available for him (based on his VO membership and his role within the VO, ex. vm_operator@fedcloud.egi.eu) Create a new topology with one or more instances of a single VM VM addition is on going Attach additional storage to the VM instances Deploy/Un-deploy a topology Start/Stop a topology (=start/stop all the VM instances of a topology) Start/Stop a single VM instance Provide personalized views of Topologies and/or VM instances 4

5 The VMops dashboard (2/3) Highlighted technical features TOSCA compatible Infrastructure Manager [1] as the OCCI communication layer Support for heterogeneous infrastructure (over OCCI) Rest API for integration with other services Single-Sign-On with the portal and the rest of the AppDB sub-services Scalable architecture (one front-end many back-ends for load balancing)??? [1]. 5

6 The VMops dashboard (3/3) lets see in action: 6

7 Status & next steps In a pre-release state VMOps is currently being tested by a group of experts VM Monitoring component is ready Integration with the EGI AAI check-in service has been realized Integration with the EGI ARGO system has been done Working on the contextualization builder What s next. Support of the training.egi.eu VO Finalize the HA VMOps setup (IM issues have to be solved beforehand) Integrate with the AppDB portal Open the dashboard to the public (vm_operator attr should be provided for the supported VOs) 7

8 Items for discussion (1/2) EGI AAI related population of the attribute support for VO roles & membership offline authz attributes/data provisioning/deprovisioning currently, user proxy certificates are issued by PUSP service Security related User-provided key pairs for ssh Policy in case when a user looses the vm_operator role Should be able to login to the VMOps? If so, he should be able to perform only stop/un-deploy? 8

9 Items for discussion (2/2) Operations related Common policy for public IPs assignment/availability Common policy for block storage i.e. storage size, need for device id or not, etc. Information mismatch between Information system and OCCI (i.e. for templates) Image update issue on sites and/or issues on Information system Incompatible image files OCCI problems with regards to the keystone IM (docker setup) hanging issue Contextualization flow (structured, unstructured or mixed?) Contextualization features: add users, add credentials, what else? Configuration using Ansible (over ssh) => appdb needs to store locally the key pairs Support for the training VO (vm_operator role is required) 9

10 Thank you for your attention. Questions? EGI-Engage is co-funded by the Horizon 2020 Framework Programme of the European Union under grant number