Project

General

Profile

Actions

Task #7476

closed

Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

Added by Massimiliano Assante about 8 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
_InfraScience Systems Engineer
Category:
Other
Start date:
Mar 16, 2017
Due date:
Mar 23, 2017
% Done:

100%

Estimated time:
(Total: 0.00 h)
Infrastructure:
Production

Description

As an action agreed in the last TCom [1] The address of the IC proxy should be more "user friendly" -> "registry.d4science.org" is the selected name.

Moreover the protocol should be https. @lucio.lelii@isti.cnr.it do you envisage any problem with this?

[1]
https://support.d4science.org/projects/bluebridge/wiki/4th_TCom_Meeting_07-10_March_2017_-_Copenaghen_(Denmark)


Subtasks 1 (0 open1 closed)

Task #7552: request https certificate for registry.d4science.org Closed_InfraScience Systems EngineerMar 16, 2017Mar 23, 2017

Actions
Actions #1

Updated by Pasquale Pagano about 8 years ago

info.d4science.org is misleading. The name should be resourceregistry.d4science.org or simpler registry.d4science.org

Actions #2

Updated by Massimiliano Assante about 8 years ago

I'm not sure why info.d4science.org would be misleading but i'm fine with registry.d4science.org

Actions #3

Updated by Massimiliano Assante about 8 years ago

  • Subject changed from Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https
Actions #4

Updated by Lucio Lelii about 8 years ago

also registry.d4science.org is misleading. ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed

Actions #5

Updated by Massimiliano Assante about 8 years ago

Lucio Lelii wrote:

also registry.d4science.org is misleading. ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed

ok then registry is not possible

Actions #6

Updated by Massimiliano Assante about 8 years ago

  • Subject changed from Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https

I would go for info.d4science.org then @pasquale.pagano@isti.cnr.it

Actions #7

Updated by Pasquale Pagano about 8 years ago

  • Subject changed from Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

Lucio Lelii wrote:

also registry.d4science.org is misleading.

misleading for a developer knowing the architecture of the Information System. We are targeting users and clients looking for resources. A registry is exactly this.

ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed

are you sure the name is already taken? we have registry-voname, e.g. registry-gcubeapps or registry-edison...., but not just registry.d4science.org.

Actions #8

Updated by Lucio Lelii about 8 years ago

Yes we have registry-voname and it would be misleading for the infrastructure manager, but it won't be my problem :) It's ok for me

Actions #9

Updated by Massimiliano Assante about 8 years ago

ok then "registry.d4science.org" is approved.

Actions #10

Updated by Massimiliano Assante about 8 years ago

  • Description updated (diff)
Actions #11

Updated by Tommaso Piccioli about 8 years ago

  • Status changed from New to In Progress

I am creating a new host

registry.d4science.org

we will migrate the services on it as soon as we will have the SSL certificate (see #7552)

Actions #12

Updated by Andrea Dell'Amico about 8 years ago

We also need instructions to automate the ic_proxy installation. I see that was manually deployed both in dev and in production (node79 was created as a demo server a lot of time ago, so it has been recycled)

Actions #14

Updated by Massimiliano Assante about 8 years ago

forgot to add the the registry node should be registered in the /d4science.research-infrastructures.eu

Actions #15

Updated by Massimiliano Assante about 8 years ago

@lucio.lelii@isti.cnr.it this service must be enabled on all the scopes ... is there a way just for this service to not use the token?

Actions #17

Updated by Massimiliano Assante about 8 years ago

<dependency>
  <groupId>org.gcube.information-system</groupId>
  <artifactId>icproxy</artifactId>
  <version>1.1.1-4.2.1-142273</version>
  <type>war</type>
</dependency>

@lucio.lelii@isti.cnr.it is this version (1.1.1-4.2.1-142273) the one with the correct serviceclass?

Actions #18

Updated by Lucio Lelii about 8 years ago

yes

Actions #19

Updated by Lucio Lelii about 8 years ago

to it reachable for every scope you must add the exclude tag on th egcube-app.xml file in WEB-INF :

<exclude handlers='request-validation'>/*</exclude>
Actions #20

Updated by Massimiliano Assante about 8 years ago

by applying such exclude the token won't be necessary anymore, is that correct?

Actions #21

Updated by Massimiliano Assante about 8 years ago

What's the status here? i think we only need to deploy the war with the exclude handler and we're good?

Actions #22

Updated by Tommaso Piccioli about 8 years ago

I am fixing the exclude tag in ansible playbook

Actions #23

Updated by Tommaso Piccioli about 8 years ago

  • Status changed from In Progress to Feedback

It should be OK now, webapp icproxy deployed with the exclude tag
please test it and tell me if we can destroy node79.d4science.org

Actions #25

Updated by Andrea Dell'Amico about 8 years ago

The nginx reverse proxy configuration was missing. Can you try now?

Actions #27

Updated by Andrea Dell'Amico about 8 years ago

I see. But I'm not able to investigate further: I need someone able to verify the smartgears scopes and the icproxy version. I see that the latest from the maven repository was installed but you specified a version. If they are different we will need to reinstall.

Actions #28

Updated by Tommaso Piccioli about 8 years ago

  • Status changed from Feedback to In Progress

Please tell me how gcube-app.xml must be, if you fix it in the meantime the playbook corrects it back again.

Actions #29

Updated by Massimiliano Assante about 8 years ago

any news? Still does not work @lucio.lelii@isti.cnr.it please reply to @tommaso.piccioli@isti.cnr.it

Actions #30

Updated by Andrea Dell'Amico about 8 years ago

It worked for me right now.
We still don't know what changes to the configuration are needed.

Actions #31

Updated by Lucio Lelii about 8 years ago

The exclude tag must be removed, I was wrong

Actions #32

Updated by Andrea Dell'Amico about 8 years ago

OK, so we do not need to touch gcube-app.xml at all, is it correct?

Actions #33

Updated by Massimiliano Assante about 8 years ago

the fix in gcube-app.xml is needed to enable the services on all the VREs, I guess @lucio.lelii@isti.cnr.it ?

Actions #34

Updated by Massimiliano Assante about 8 years ago

so after chatting with lucio it seems that we need the 4.4.0 version

Actions #35

Updated by Lucio Lelii about 8 years ago

@andrea.dellamico@isti.cnr.it yes.
@massimiliano.assante@isti.cnr.it the new common-smartgears-2.1.2 released in 4.4.0 solves the problem about scopes, but I have released it today.

Actions #36

Updated by Massimiliano Assante about 8 years ago

  • Status changed from In Progress to Closed

the thing seems working

Actions #37

Updated by Roberto Cirillo about 7 years ago

  • Status changed from Closed to In Progress
  • Target version changed from D4Science Infrastructure Upgrade to gCube 4.3.0 to D4Science infrastructure upgrade to 4.10.0

I've notice node79.d4science.org is still running under gCubeApps VO and with a different IP. Is there any reason for that? if not, please could you shoutdown and dismiss this VM?

Actions #38

Updated by Andrea Dell'Amico about 7 years ago

Roberto Cirillo wrote:

I've notice node79.d4science.org is still running under gCubeApps VO and with a different IP. Is there any reason for that? if not, please could you shoutdown and dismiss this VM?

I don't know of any reason, I guess that after the ticket were close everybody forgot about that VM.

Actions #39

Updated by Roberto Cirillo about 7 years ago

I think so, too. I think we can dismiss it now. I've stopped the container on node79.d4science.org.

Actions #40

Updated by Andrea Dell'Amico about 7 years ago

  • Status changed from In Progress to Feedback

I turned it off.

Actions #41

Updated by Andrea Dell'Amico about 7 years ago

And removed the nagios configuration.

Actions #42

Updated by Andrea Dell'Amico about 7 years ago

  • Status changed from Feedback to Closed
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 8.91 MB)