Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Namespace To Do: Implement Auto Discovery #9

Closed
joereuss12 opened this issue Jul 6, 2023 · 4 comments · Fixed by #121
Closed

Namespace To Do: Implement Auto Discovery #9

joereuss12 opened this issue Jul 6, 2023 · 4 comments · Fixed by #121
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@joereuss12
Copy link
Contributor

As discussed in the weekly Pelican meeting, we need to implement a way for the namespace to automatically discover registered public keys.

@bbockelm
Copy link
Collaborator

@jhiemstrawisc - I think this is 90% done. I think, once #30 is merged, we just need to do end-to-end testing with the director and an origin.

For example, last I tested this functionality, the JWKS public key fetching code in the origin didn't like the public key JWKS that the namespace client was generating (it was missing at least kty if not other metadata). So, finishing off the item is likely just finding all the remaining small bugs in the end-to-end testing.

@bbockelm bbockelm added this to the v7.0.0 milestone Aug 24, 2023
@bbockelm bbockelm added the enhancement New feature or request label Sep 1, 2023
@bbockelm
Copy link
Collaborator

bbockelm commented Sep 7, 2023

@jhiemstrawisc -- we're down to this one last issue for 7.0.0. How's the end-to-end testing going?

@jhiemstrawisc
Copy link
Member

jhiemstrawisc commented Sep 7, 2023

I got to this yesterday afternoon and encountered two issues:

  1. I can't get the origin to run. When I do osdf origin serve -v /test:/jhiemstra/test --config /etc/pelican/pelican.yaml -d, the origin crashes with a note Error: xrootd process failed unexpectedly: exit status 1. Sometimes it's CMSD that fails. Going through the output, it looks like TLS initialization is the culprit, even though I have my pelican config pointed to tls.crt and tls.key that were auto-generated in /etc/pelican/certificates. I've tried running this both as root and as my local xrootd user.
  2. Because we wound up having to break out the Director into a cache and an origin endpoint, we need a way to advertise to both. I don't think the current origin will do that (although because of 1 I haven't been able to test or start fixing).

@jhiemstrawisc
Copy link
Member

See PR #121. Awaiting review and a few last cleanup items that need input.

@bbockelm bbockelm linked a pull request Sep 8, 2023 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants