These pages are targeted to Service Providers who wish to be onboarded onto the C-SCALE federation. If you want to become a federated provider email contact<at>c-scale.eu.
To join the C-SCALE Federated Cloud visit the EGI Docs for Service providers.
To join the C-SCALE Federation of HTC/HPC resources visit the SRAM Docs for Service Providers.
SRAMsync is the software component allowing HTC/HPC clusters to synchronize authentication and authorization information from SRAM with local LDAP directories. Please look at the GitHub repository to find out more.
The steps to join the data federation are in this page.
Traditionally in C-SCALE, SRAM has been used as the AAI system for the HTC/HPC federation and EGI Check-in for the Cloud federation. After long discussions on how to integrate both systems, and thanks to fruitful collaboration between SRAM and Check-in teams, on 11th May 2023 we successfully tested a proof-of-concept with SRAM acting as a community AAI and Check-in as infrastructure proxy. We used aai-demo.egi.eu and a test development of OpenStack for the tests.
As a reference, below is the mapping used:
[
{
"local": [
{
"user": {
"name": "{0}"
},
"group": {
"id": "4657ac74bc3544d3ae088a8aad7030b9"
}
}
],
"remote": [
{
"type": "HTTP_OIDC_SUB"
},
{
"type": "HTTP_OIDC_ISS",
"any_one_of": [
"https://aai-demo.egi.eu/auth/realms/egi"
]
},
{
"type": "OIDC-eduperson_entitlement",
"regex": true,
"any_one_of": [
"^urn:mace:surf.nl:sram:group:egi:checkin_sram$"
]
}
]
}
]
User successfully created:
cloudadm@vnode-0:~$ openstack user show 2c096b11a1410d44e3936fa40479ad26eaa649cfd6887f06b3c6669e5d6c03d0
+---------------------+------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+---------------------+------------------------------------------------------------------------------------------------------------------------------------------+
| domain_id | 0125ed0ebc8045a49ed8c34c2a78740d |
| enabled | True |
| federated | [{'idp_id': 'egi.eu', 'protocols': [{'protocol_id': 'openid', 'unique_id': 'efb8534478028e92f5fd5d658c7efeed9766fafc%40sram.surf.nl'}]}] |
| id | 2c096b11a1410d44e3936fa40479ad26eaa649cfd6887f06b3c6669e5d6c03d0 |
| name | efb8534478028e92f5fd5d658c7efeed9766fafc@sram.surf.nl |
| options | {} |
| password_expires_at | None |
+---------------------+------------------------------------------------------------------------------------------------------------------------------------------+
The next step is to move this configuration from aai-demo.egi.eu to aai.egi.eu so Cloud providers in the C-SCALE federation can configure their sites so C-SCALE users can use SRAM accounts to access cloud resources using Check-in.
See steps on the GitHub repository.
Our partner INCD has prepared an additional guide:
https://gitlab.com/lip-computing/c-scale
Please use the C-SCALE Helpdesk.
There is also a forum for C-SCALE on GitHub.