Task #7476
closed
Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https
Added by Massimiliano Assante about 8 years ago. Updated about 7 years ago.
100%
Description
As an action agreed in the last TCom [1] The address of the IC proxy should be more "user friendly" -> "registry.d4science.org" is the selected name.
Moreover the protocol should be https. @lucio.lelii@isti.cnr.it do you envisage any problem with this?
Updated by Pasquale Pagano about 8 years ago
info.d4science.org is misleading. The name should be resourceregistry.d4science.org or simpler registry.d4science.org
Updated by Massimiliano Assante about 8 years ago
I'm not sure why info.d4science.org would be misleading but i'm fine with registry.d4science.org
Updated by Massimiliano Assante about 8 years ago
- Subject changed from Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https
Updated by Lucio Lelii about 8 years ago
also registry.d4science.org is misleading. ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed
Updated by Massimiliano Assante about 8 years ago
Lucio Lelii wrote:
also registry.d4science.org is misleading. ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed
ok then registry is not possible
Updated by Massimiliano Assante about 8 years ago
- Subject changed from Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https
I would go for info.d4science.org then @pasquale.pagano@isti.cnr.it
Updated by Pasquale Pagano about 8 years ago
- Subject changed from Change hostname of IC proxy service from node79 to "info.d4science.org" and move it over https to Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https
Lucio Lelii wrote:
also registry.d4science.org is misleading.
misleading for a developer knowing the architecture of the Information System. We are targeting users and clients looking for resources. A registry is exactly this.
ICProxy offer only access to the IC and also this name is already used for the node where the registryService is deployed
are you sure the name is already taken? we have registry-voname, e.g. registry-gcubeapps or registry-edison...., but not just registry.d4science.org.
Updated by Lucio Lelii about 8 years ago
Yes we have registry-voname and it would be misleading for the infrastructure manager, but it won't be my problem :) It's ok for me
Updated by Massimiliano Assante about 8 years ago
ok then "registry.d4science.org" is approved.
Updated by Tommaso Piccioli about 8 years ago
- Status changed from New to In Progress
I am creating a new host
registry.d4science.org
we will migrate the services on it as soon as we will have the SSL certificate (see #7552)
Updated by Andrea Dell'Amico about 8 years ago
We also need instructions to automate the ic_proxy installation. I see that was manually deployed both in dev and in production (node79 was created as a demo server a lot of time ago, so it has been recycled)
Updated by Massimiliano Assante about 8 years ago
forgot to add the the registry node should be registered in the /d4science.research-infrastructures.eu
Updated by Massimiliano Assante about 8 years ago
@lucio.lelii@isti.cnr.it this service must be enabled on all the scopes ... is there a way just for this service to not use the token?
Updated by Massimiliano Assante about 8 years ago
<dependency> <groupId>org.gcube.information-system</groupId> <artifactId>icproxy</artifactId> <version>1.1.1-4.2.1-142273</version> <type>war</type> </dependency>
@lucio.lelii@isti.cnr.it is this version (1.1.1-4.2.1-142273) the one with the correct serviceclass?
Updated by Lucio Lelii about 8 years ago
to it reachable for every scope you must add the exclude tag on th egcube-app.xml file in WEB-INF :
<exclude handlers='request-validation'>/*</exclude>
Updated by Massimiliano Assante about 8 years ago
by applying such exclude the token won't be necessary anymore, is that correct?
Updated by Massimiliano Assante about 8 years ago
What's the status here? i think we only need to deploy the war with the exclude handler and we're good?
Updated by Tommaso Piccioli about 8 years ago
I am fixing the exclude tag in ansible playbook
Updated by Tommaso Piccioli about 8 years ago
- Status changed from In Progress to Feedback
It should be OK now, webapp icproxy deployed with the exclude tag
please test it and tell me if we can destroy node79.d4science.org
Updated by Andrea Dell'Amico about 8 years ago
The nginx reverse proxy configuration was missing. Can you try now?
Updated by Andrea Dell'Amico about 8 years ago
I see. But I'm not able to investigate further: I need someone able to verify the smartgears scopes and the icproxy version. I see that the latest from the maven repository was installed but you specified a version. If they are different we will need to reinstall.
Updated by Tommaso Piccioli about 8 years ago
- Status changed from Feedback to In Progress
Please tell me how gcube-app.xml must be, if you fix it in the meantime the playbook corrects it back again.
Updated by Massimiliano Assante about 8 years ago
any news? Still does not work @lucio.lelii@isti.cnr.it please reply to @tommaso.piccioli@isti.cnr.it
Updated by Andrea Dell'Amico about 8 years ago
It worked for me right now.
We still don't know what changes to the configuration are needed.
Updated by Lucio Lelii about 8 years ago
The exclude tag must be removed, I was wrong
Updated by Andrea Dell'Amico about 8 years ago
OK, so we do not need to touch gcube-app.xml at all, is it correct?
Updated by Massimiliano Assante about 8 years ago
the fix in gcube-app.xml is needed to enable the services on all the VREs, I guess @lucio.lelii@isti.cnr.it ?
Updated by Massimiliano Assante about 8 years ago
so after chatting with lucio it seems that we need the 4.4.0 version
Updated by Lucio Lelii about 8 years ago
@andrea.dellamico@isti.cnr.it yes.
@massimiliano.assante@isti.cnr.it the new common-smartgears-2.1.2 released in 4.4.0 solves the problem about scopes, but I have released it today.
Updated by Massimiliano Assante about 8 years ago
- Status changed from In Progress to Closed
the thing seems working
Updated by Roberto Cirillo about 7 years ago
- Status changed from Closed to In Progress
- Target version changed from D4Science Infrastructure Upgrade to gCube 4.3.0 to D4Science infrastructure upgrade to 4.10.0
I've notice node79.d4science.org is still running under gCubeApps VO and with a different IP. Is there any reason for that? if not, please could you shoutdown and dismiss this VM?
Updated by Andrea Dell'Amico about 7 years ago
Roberto Cirillo wrote:
I've notice node79.d4science.org is still running under gCubeApps VO and with a different IP. Is there any reason for that? if not, please could you shoutdown and dismiss this VM?
I don't know of any reason, I guess that after the ticket were close everybody forgot about that VM.
Updated by Roberto Cirillo about 7 years ago
I think so, too. I think we can dismiss it now. I've stopped the container on node79.d4science.org.
Updated by Andrea Dell'Amico about 7 years ago
- Status changed from In Progress to Feedback
I turned it off.
Updated by Andrea Dell'Amico about 7 years ago
And removed the nagios configuration.
Updated by Andrea Dell'Amico about 7 years ago
- Status changed from Feedback to Closed