Bug #17224

login-sync needs to issue tokens from logincluster

Added by Peter Amstutz 23 days ago. Updated 8 days ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
Login
Target version:
Start date:
01/04/2021
Due date:
% Done:

100%

Estimated time:
(Total: 0.00 h)
Story points:
-

Description

Login sync issues tokens created by the local cluster.

As a short term solution, add feature for providing alternate host/token for the login cluster, so we issue tokens from
the login cluster instead.

In other words, get the virtual machine list from the local cluster, but issue tokens from the login cluster.

The environment variables are LOGINCLUSTER_ARVADOS_API_HOST and LOGINCLUSTER_ARVADOS_API_TOKEN.

The longer term solution is to make the token management API more federation aware.


Subtasks

Task #17227: Review 17224-login-syncResolvedPeter Amstutz


Related issues

Related to Arvados - Bug #17225: Ruby SDK cannot connect to multiple clustersResolved01/04/2021

Associated revisions

Revision 96afcc76
Added by Peter Amstutz 8 days ago

Merge branch '17224-login-sync' refs #17224

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <>

History

#1 Updated by Peter Amstutz 23 days ago

  • Status changed from New to In Progress

#2 Updated by Peter Amstutz 13 days ago

  • Related to Bug #17225: Ruby SDK cannot connect to multiple clusters added

#4 Updated by Peter Amstutz 13 days ago

  • Description updated (diff)

#5 Updated by Peter Amstutz 13 days ago

  • Description updated (diff)

#6 Updated by Peter Amstutz 13 days ago

  • Subject changed from login sync problem with logincluster to login-sync needs to issue tokens from logincluster

#7 Updated by Lucas Di Pentima 11 days ago

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

#8 Updated by Peter Amstutz 9 days ago

  • Target version changed from 2021-01-06 Sprint to 2021-01-20 Sprint

#9 Updated by Peter Amstutz 9 days ago

Lucas Di Pentima wrote:

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

Added to shell server install doc.

17224-login-sync @ a622b6980539db9563b6a92e0996197b61dae862

#10 Updated by Lucas Di Pentima 9 days ago

LGTM, thanks!

#11 Updated by Peter Amstutz 8 days ago

  • Status changed from In Progress to Resolved

Also available in: Atom PDF