-
Notifications
You must be signed in to change notification settings - Fork 48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WIP: Installing Pelican/OSDF Cache via RPM #203
WIP: Installing Pelican/OSDF Cache via RPM #203
Conversation
The Pelican/OSDF configuration does not look for the cert/key in the usual /etc/grid-security location, so update the Let's Encrypt docs to mention the difference.
…ARE-5962) - Some of the configuration is still up in the air as we learn more from supporting JLab/GLBRC/others, and as we revamp the config we ship - Registration instructions could use improvement - No validation instructions yet
…eeding a separate partition (SOFTWARE-5833)
…osdf-cache.SOFTWARE-6013 * pr/pelican-osdf-origin.SOFTWARE-5962: WIP: Instructions for installing a Pelican/OSDF Origin via RPM (SOFTWARE-5962) Let's Encrypt CA cert docs: use different paths for Pelican/OSDF
…osdf-cache.SOFTWARE-6013 * pr/pelican-osdf-origin.SOFTWARE-5962: Let's Encrypt: mention that Pelican needs the full cert chain
…osdf-cache.SOFTWARE-6013 * pr/pelican-osdf-origin.SOFTWARE-5962: Mention that you need the cert change in install-origin-rpm as well
This is based on the Pelican/OSDF origin by RPM doc (PR osg-htc#193) so changes added there should generally be added here too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some initial thoughts
* **Host Certificate Chain**: `/etc/pki/tls/certs/pelican.crt` | ||
* **Host Key**: `/etc/pki/tls/private/pelican.key` | ||
|
||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since we've got a lot (?) of non-Pelican caches out there, it's probably worth having a separate, leading "upgrade section" here that outlines the overview of how to perform an upgrade. Maybe it's something as simple as "follow all the instructions here, turn off the old cache services, then register the new cache"
Or maybe we can't have two cache services running concurrently...
* master: Apply suggestions from code review Update references from repo.opensciencegrid.org -> repo.osg-htc.org Fix on more broken HTCondor-CE link Fix broken HTCondor-CE doc links Add details for HTCondor releases Fix broken link Remove references to unreleased OSG 24 WN tarball; add note Remove ToC link for unfinished doc Add docs for updating ospool-ep docker image Add estimated EOL for OSG 23 and 24 OSG 24 initial release notes (SOFTWARE-6012) Use new ospool-ep image name Restore out-of-date OSG WN client doc Fix squid, OIDC agent, and stash-* container references Add missing period Add initial major packages for OSG 24 Add OSG 23 references back since it's still supported Prefer EL9 over EL8 Release notes for 2024-10-24 Fix typo rename docker repo prefixes to osg-htc remove references to el7 in most docs remove most references to OSG <23 from non-release-history docs Update docs to reference OSG-24 as the latest series
… 24; add cache configuration based on Pelican 7.11.1 config.d (SOFTWARE-6013)
This should make the lopsided requirements stand out less
… it "Joining the Cache to the Federation"
@brianhlin, I think this is ready for another look. I added validation instructions and tried to combine the topology and registry registrations into a "Joining the Cache to the Federation" section. |
I don't have an upgrade section yet. I think I'm going to need to set up a cache and try upgrading it to see what I need to do. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mostly LGTM so pre-approving. Other than in-line comments, I think a few other commits have snuck into this branch:
- Hardware / FS requirement updates to old cache documentation
osdf-origin
RPM install doc
root@host$ cat /tmp/test.txt | ||
|
||
Hello, World! | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's add a step or note here asking them to send logs to us if this doesn't work
Superseded by #211; closing. |
SOFTWARE-5962; based highly on #193