Project

General

Profile

Actions

Bug #17224

closed

login-sync needs to issue tokens from logincluster

Added by Peter Amstutz over 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
Login
Target version:
Story points:
-
Release relationship:
Auto

Description

Login sync issues tokens created by the local cluster.

As a short term solution, add feature for providing alternate host/token for the login cluster, so we issue tokens from
the login cluster instead.

In other words, get the virtual machine list from the local cluster, but issue tokens from the login cluster.

The environment variables are LOGINCLUSTER_ARVADOS_API_HOST and LOGINCLUSTER_ARVADOS_API_TOKEN.

The longer term solution is to make the token management API more federation aware.


Subtasks 1 (0 open1 closed)

Task #17227: Review 17224-login-syncResolvedPeter Amstutz01/04/2021Actions

Related issues

Related to Arvados - Bug #17225: Ruby SDK cannot connect to multiple clustersResolvedPeter Amstutz01/04/2021Actions
Actions #1

Updated by Peter Amstutz over 3 years ago

  • Status changed from New to In Progress
Actions #2

Updated by Peter Amstutz over 3 years ago

  • Related to Bug #17225: Ruby SDK cannot connect to multiple clusters added
Actions #4

Updated by Peter Amstutz over 3 years ago

  • Description updated (diff)
Actions #5

Updated by Peter Amstutz over 3 years ago

  • Description updated (diff)
Actions #6

Updated by Peter Amstutz over 3 years ago

  • Subject changed from login sync problem with logincluster to login-sync needs to issue tokens from logincluster
Actions #7

Updated by Lucas Di Pentima over 3 years ago

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

Actions #8

Updated by Peter Amstutz over 3 years ago

  • Target version changed from 2021-01-06 Sprint to 2021-01-20 Sprint
Actions #9

Updated by Peter Amstutz over 3 years ago

Lucas Di Pentima wrote:

AFAICT the envvars LOGINCLUSTER_ARVADOS_API_HOST & LOGINCLUSTER_ARVADOS_API_TOKEN are new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?

Added to shell server install doc.

17224-login-sync @ a622b6980539db9563b6a92e0996197b61dae862

Actions #10

Updated by Lucas Di Pentima over 3 years ago

LGTM, thanks!

Actions #11

Updated by Peter Amstutz over 3 years ago

  • Status changed from In Progress to Resolved
Actions #12

Updated by Peter Amstutz about 3 years ago

  • Release set to 37
Actions

Also available in: Atom PDF