logo operations poral

logo egi


Operations Portal is an EGI service provided by CCIN2P3,
co-funded by EGI.eu and EGI-Engage



Release Version : 4.1 - September 13th

For any contact, use this section: Contact Us



The Operations Portal is a central portal for the EGI operations management that offers a different capabilities, such as the broadcast tool, VO management facilities and various of dashboards (Security, VO and Operations) to facilitate infrastructure oversight.

Latest news

Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2017.03.06 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details 
 
EGI UMD software provisioning Team

The following release notes accompany this release:

European Grid Infrastructure EGI Trust Anchor release 1.81          2017.02.28

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA distribution version 1.81-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.81-1" (new installs) and "lcg-CA-1.81-1" (for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your  policies. Note that your organisation or NGI may have a specific policy and may have added or removed CAs compared to the EGI core policy. Sites that need compliance with the WLCG policy should install BOTH packages, or you will miss out the CERN WLCG IOTA CA specific exception see https://documents.egi.eu/document/2745 for details and the WLCG statement http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

In the first quarter of 2017, full support for differentiated assurance profiles will be introduced in the EGI trust fabric infrastructure. This will take the form of an additional trust anchor meta-package, and replaces the specific policy mechanism described above. Such full support also required new software and configuration t each resource centre.  We ask for your support in implementing the requisite changes, and deploy new trust anchor meta-packages and the new local policies only in unison.
 
The following notices are republished from the IGTF, inasfar as pertinent to this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.80 to 1.81
-------------------------
(28 February 2017)

* Added accredited DarkMatter classic QV-intermediate ICAs (AE)
  including QuoVadis Root CA 2 G3 and Root CA 3 G3 higher level CAs (BM)
* Updated contact information for EUN EG-GRID CA (EG)
* Withdrawn classic UKeScienceCA-2A in advance of repurposing (UK)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM) and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.81-1
The APEL Accounting Repository is being updated today, so there may be a delay in accounting data reaching the Portal. This will mostly affect cloud accounting which requires extra processing during the update.

The APEL Team.
CREAM CE at SiGNET site creamce.ijs.si will be decommissioned. Ticket tracking the process is
https://ggus.eu/index.php?mode=ticket_info&ticket_id=126333

CE will be in downtime from 20 Jan 12:00 UTC and will be removed on 6 Mar 12:00 UTC.
=============== Contents: ==================

1) Decommissioning dCache 2.10
2) CMD-OS 1.0.0 for OpenStack released
3) UMD 3.14.7 and UMD 4.3.2
4) Recommendation for reporting security incidents
5) GSTAT decommissioned

==========================================

1) Decommissioning dCache 2.10

Support for the dCache 2.10 ended at December 2016. As a consequence, according to EGI policies, dCache 2.10 must be decommissioned. All sites are invited to plan an upgrade their 2.10 endpoints to a newer golden release, that can be 2.13 (whose support ends on July 2017) or 2.16 (whose support ends on May 2018).
A decommissioning campaign will be started in the next days by EGI Operations to monitor the upgrade of the dCache 2.10 instances and follow up with the NGIs/sites.
Please consider that 2.13 gets out of support in only 6 months, and that the dCache team does not support the upgrade from 2.10 directly to 2.16.
More information here: https://www.dcache.org/downloads/1.9/index.shtml

2) CMD-OS 1.0.0 for OpenStack released

The very first version of CMD-OS, the Cloud Middleware Distribution for OpenStack Mitaka, have been released. It includes Keystone-VOMS 9.0.3, ooi 0.3.2, gridsite 2.3.3, Cloud BDII Information provider 0.6.12. For more details, please visit: http://repository.egi.eu/category/os-distribution/cmd-os-1/

3) UMD 3.14.7 and UMD 4.3.2 have been released on December 5th (fix releases), with an update for umd-release, fixing an issue with GPG keys.

4) Recommendation for reporting security incidents

In according to the EGI CSIRT Security Incident Handling Procedure (https://wiki.egi.eu/wiki/SEC01), please report any security incident to your local security team, your NGI Security Officer and the EGI CSIRT via abuse@egi.eu

5) GSTAT decommissioned

As announced in the past months, GSTAT has been decommissioned and replaced by VAPOR: https://operations-portal.egi.eu/vapor/
We would like to thank a lot ROC_AsiaPacific for having provided and managed such a powerful tool over severla years and projects.
Dear all

next week on Feb 8th the new accounting portal will be relased in production.
It is a new installation with a new underlying hardware, not a simple update; the web address will remain the same.
If your tool is consuming the Accounting Portal for any reason, please inform its developers and EGI Operations in order to prevent any malfunctioning in your tool.

Best regards,
Alessandro
EGI Operations
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2017.02.06 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details 
 
EGI UMD software provisioning Team

The following release notes accompany this release:
European Grid Infrastructure EGI Trust Anchor release 1.80          2017.01.30

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.80-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.80-1" (new installs) and "lcg-CA-1.80-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception see 
  https://documents.egi.eu/document/2745 for details and the WLCG statement
  http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

  In the first quarter of 2017, full support for differentiated assurance
  profiles will be introduced in the EGI trust fabric infrastructure. This
  will take the form of an additional trust anchor meta-package, and replaces
  the specific policy mechanism described above. Such full support also
  required new software and configuration at each resource centre.
  We ask for your support in implementing the requisite changes, and deploy
  new trust anchor meta-packages and the new local policies only in unison.


The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.79 to 1.80
-------------------------
(30 January 2016)

* Discontinued BEGrid2008 (BELNET) classic authority (BE)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.80-1

>>> More news <<<

Ticket (see below) gives details. CE will be in downtime from 00:00 14 Feb 2017. WIll be removed after two weeks.

https://ggus.eu/?mode=ticket_info&ticket_id=126167
Dear all,

CAFPE-GRANADA site just announced there decommission of there all services. 

https://goc.egi.eu/portal/index.php?Page_Type=Site&id=159

The services affected are:
cream-cafpegrid.ugr.es (APEL)	
cream-cafpegrid.ugr.es (Site-BDII)	
cream-cafpegrid.ugr.es (CREAM-CE)	
mon-cafpegrid.ugr.es (gLite-APEL)

Timeline
====
25th of January 2017 start of draining and all services will begin scheduled downtime on 1st of February.
7th of February 2017 site will be marked as "suspended"
7th of April 2017 End of log retention period and Resource centre will be marked "closed".
Dear Colleagues,
please note, on

  Jan, 31st, 2017, 00:00h

we are decommissioning our CREAM-CEs

  grid-cr0.desy.de
  grid-cr1.desy.de

for the LHC VOs

  ATLAS
  CMS
  LHCb

The pledged computing resources at DESY-HH are available on

  grid-arcce0.desy.de
  grid-arcce1.desy.de

Best regards,
Andreas Gellrich
Can sites be careful when changing their accounting client settings that they do not inadvertently re-publish old data. This has an inordinate effect on the APEL service, much more than publishing the same number of new jobs.

If you observe that you have Sync test failures flagged in Nagios and wish to solve this, please open a GGUS ticket so that the APEL Team can advise on how and what to republish and on when to schedule such publishing, Don't just try gap publishing even though the sync test message suggests this

Thanks in anticipation, 

The APEL Team
Dear VO Managers and VO Users,

With regret, we wish to inform you that we are beginning the decommissioning
process (https://wiki.egi.eu/wiki/PROC11) for the Resource Centre INDIGO-CATANIA-STACK in
NGI_IT. The following VOs are affected at this Resource Centre:

fedcloud.egi.eu and vo.indigo-datacloud.eu

The aim is to change the status of the resource centre to "suspended" in
GOCDB by 1st February 2017. Below is a list of affected services and a
decommissioning timeline.

Kind regards,
Marco Fargetta

List of services decommissioned with the site:
- stack-server-02.ct.infn.it (org.openstack.nova)
- indigo-sb.ct.infn.it (eu.egi.cloud.vm-metadata.vmcatcher)
- stack-server-02.ct.infn.it (eu.egi.cloud.vm-management.occi)
- indigo-sb.ct.infn.it (eu.egi.cloud.accounting)
- indigo-sb.ct.infn.it (eu.egi.cloud.information.bdii)

Timeline:
- 10/01/2017: Ticket for decommissioning and broadcast to VO managers and users.
- 11/01/2017: Start downtime of the site
- 01/02/2017: Site marked as suspended. Services will become unavailable
- 01/06/2017: End of log retention period and site marked as closed
The wms marwms.in2p3.fr has been stopped. It will not be restarted.
FGI JYU decommisioning
  	
Detailed Description:
  	 
Old FGI is being replaced with FGCI. As a consequence the following services will be decommissioned:

electra-grid.chem.jyu.fi (ARC-CE) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2865
electra-grid.chem.jyu.fi (gLite-APEL) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=6363

Grid queues will be drained and endpoints removed from GOCDB on 17.1.2017.
All services and data will be permanently deleted after 90 days counting from 17.1.2017.

Affected ROC/NGI: NGI_FI
Affected Site: FI_JYU 
GGUS ticket : https://ggus.eu/index.php?mode=ticket_info&ticket_id=125781
Dear VO Managers,
the site INFN-NAPOLI-CMS is under decommissioning.

The site will be put in downtime to prevent new activities.
======= Content ========
1) UMD releases
2) Decommission of mon.egi.eu and cloudmon.egi.eu
======================

1) On Nov 23rd two revisions of UMD 3.14.6 (SL6) and UMD 4.3.1 (SL6/CentOS7) have been released:

a) UMD 3.14.6 includes lcmaps-plugins-vo-ca-ap, needed for supporting the IGTF IOTA profile of CAs

b) UMD 4.3.1 includes:

*** CentOS7

lcas-lcmaps-gt4-interface 0.3.0-0.3.1
lcmaps 1.6.6
lcas 1.3.19
glExec 1.2.3
glExec-WN 1.3.0
lcmaps-plugins 1.7.1

*** SL6

ARGUS 1.7 (regular 4.3.0 shipped only CentOS7 version)

2) Decommission of mon.egi.eu and cloudmon.egi.eu

a) on 29 November all the cloud probes were moved to the central servers, and cloudmon.egi.eu was dismissed on Dec 1st.
All the probes are executed using the following certificate subjects:

/DC=EU/DC=EGI/C=HR/O=Robots/O=SRCE/CN=Robot:argo-egi@cro-ngi.hr
/DC=EU/DC=EGI/C=GR/O=Robots/O=Greek Research and Technology Network/CN=Robot:argo-egi@grnet.gr

b) On Dec 6th 2016 the old SAM GridMon box mon.egi.eu, housing central ATP and POEM, was decommissioned. These services became obsolete when we switched to central monitoring instances in July.

- The VO SAM instances will not be affected as they are using local ATP and POEM.
- Remaining NGI SAM instances rely on central ATP and will no longer get topology updates, so this gives their administrators extra incentive to decommission them.