UCSDGrid Submit Infrastructure

We are hosting a glideinWMS-based submit infrastructure as part of the UCSD Campus grid initiative (usually referred to as "UCSDGrid" and, for histroical reasons, also ROK).

Deployed hardware

engage-fe-2.t2.ucsd.edu - FE, Collector and local CA owner

osg.ctbp.ucsd.edu - login message says this node was deprecated (2014-12-11 - Jeff) Frontend (with HTTPD and pilot proxy ownership) and submit node

engage-submit-1.t2.ucsd.edu - Submit node

External nodes

We also allow external entities to connect their submit nodes (i.e. schedds) to our collector.

BakerLab? - glide.bakerlab.org

Local CA

We are hosting our own local CA. This was necessary due to BakerLab? 's inability to get a "standard" host certificate.

The local CA public key has to be deployed on the Collector, Frontend and on any node using the certificates issued by it.

The CA's private key, alongside all the other necessary files, are located in root@engage-fe-2.t2.ucsd.edu:/etc/x509/EngColCA. Attached is a summary text file (available also CA's directory).

Topic attachments
I Attachment Action Size Date Who Comment
ziptgz EngColCA_bundle.tgz manage 2.0 K 2013/08/09 - 16:00 IgorSfiligoi CA bundle tarball
elseREADME EngCollCA.README manage 0.7 K 2013/07/11 - 16:58 IgorSfiligoi Summary information about the CA
elseconfig ca.config manage 14.3 K 2013/08/09 - 15:58 IgorSfiligoi OpenSSL? CA config file
shsh create_ca_bundle.sh manage 0.5 K 2013/08/09 - 15:56 IgorSfiligoi Script that creates the needed CA escirption file
shsh request_cert.sh manage 0.6 K 2013/08/09 - 15:56 IgorSfiligoi Script to create a certificate
Topic revision: r3 - 2014/12/12 - 23:02:33 - JeffreyDost
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback