WG for Transition to Tokens and Globus Retirement

Mandate

The WLCG Management Board has requested an Ops Coordination WG to coordinate the many parties involved in the transition from X509 to WLCG tokens and the gradual phaseout of dependencies on Globus. The WG will track the progress and regularly report to the GDB and the MB.

Activities

• Refinement of timelines and milestones
  • Transition to tokens
    • Superseded by WLCG Token Transition Timeline
  • Globus retirement
    • Ditto
• Coordination between stakeholders
• Collaboration with various parties on functionality requirements
  • MW product teams
  • Infrastructure service providers
    • GGUS, GOCDB, EGI Operations Portal, ...
• Deployment campaigns for new MW versions that support tokens and/or depend less on Globus
• Configuration support for such MW versions
  • Documentation
  • Rpms
• Testing campaigns for such MW versions
  • In collaboration with experiments and other stakeholders

Potentially:

• Development e.g. of extra utilities

Deployment campaigns

• CE token support campaign, launched June 1, 2022 - done
• Ongoing campaign launched Nov 2023:
  • HTCondor CE v5 with condor 9.0.20 as intermediary version
    • Supports the deprecated GSI scheme, as well as SSL mappings of proxy DNs (no VOMS FQANs)
  • HTCondor CE v23+ with condor v23+ for long-term support
    • As of version v23.5.2, SSL mappings can take VOMS FQANs into account

Membership

Representatives are needed from all parties concerned:

• Grid Community Forum
• MW product teams
• Experiments
• Sites
• Infrastructures

Please subscribe to the wlcg-ops-tokens-globus-wg e-group if you would like to be involved.

Discussion forums

• WLCG-Globus-Tokens e-group
• WLCG Discourse forum

Documentation

• WLCG Authorization WG
• INDIGO IAM
• DOMA TPC WG
• DOMA BDT WG

• Globus retirement considerations in WLCG
• OSG plans for GridFTP and GSI Migration
• HTCondor roadmap for GSI phaseout
• Grid Community Forum
• Automate token management using Mytoken

Timelines and milestones:

• WLCG Token Transition Timeline on Zenodo, Aug 22, 2022
• Transition to tokens (working document)
• Globus retirement

Presentations:

• Presentation and discussion on the WLCG transition to tokens and Globus retirement,
  GDB meeting, March 10, 2021
• Presentation and discussion on the WLCG transition to tokens and Globus retirement,
  Ops Coordination meeting, March 4, 2021
• Presentation on Mytoken and its use in recurring situations that require fresh bearer tokens constantly Grid service monitoring with tokens at KIT,
  Ops Coordination meeting, March 7th, 2024