Bug #17224

login-sync needs to issue tokens from logincluster

Added by Peter Amstutz 4 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
Login
Target version:
Start date:
01/04/2021
Due date:
% Done:

100%

Estimated time:
(Total: 0.00 h)
Story points:
-
Release relationship:
Auto

Description

Login sync issues tokens created by the local cluster.

As a short term solution, add feature for providing alternate host/token for the login cluster, so we issue tokens from
the login cluster instead.

In other words, get the virtual machine list from the local cluster, but issue tokens from the login cluster.

The environment variables are LOGINCLUSTER_ARVADOS_API_HOST and LOGINCLUSTER_ARVADOS_API_TOKEN.

The longer term solution is to make the token management API more federation aware.


Subtasks

Task #17227: Review 17224-login-syncResolvedPeter Amstutz


Related issues

Related to Arvados - Bug #17225: Ruby SDK cannot connect to multiple clustersResolved01/04/2021

Associated revisions

Revision 96afcc76
Added by Peter Amstutz 3 months ago

Merge branch '17224-login-sync' refs #17224

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <>

History

#1 Updated by Peter Amstutz 4 months ago

  • Status changed from New to In Progress

#2 Updated by Peter Amstutz 4 months ago

  • Related to Bug #17225: Ruby SDK cannot connect to multiple clusters added

#4 Updated by Peter Amstutz 4 months ago

  • Description updated (diff)

#5 Updated by Peter Amstutz 4 months ago

  • Description updated (diff)

#6 Updated by Peter Amstutz 4 months ago

  • Subject changed from login sync problem with logincluster to login-sync needs to issue tokens from logincluster

#7 Updated by Lucas Di Pentima 4 months ago

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

#8 Updated by Peter Amstutz 3 months ago

  • Target version changed from 2021-01-06 Sprint to 2021-01-20 Sprint

#9 Updated by Peter Amstutz 3 months ago

Lucas Di Pentima wrote:

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

Added to shell server install doc.

17224-login-sync @ a622b6980539db9563b6a92e0996197b61dae862

#10 Updated by Lucas Di Pentima 3 months ago

LGTM, thanks!

#11 Updated by Peter Amstutz 3 months ago

  • Status changed from In Progress to Resolved

#12 Updated by Peter Amstutz about 2 months ago

  • Release set to 37

Also available in: Atom PDF