SMD has built-in support for Groups and Partitions as well as easy filtering logic for both on the main Component endpoints.
For the Supercomputing Institute, we would like the option of running one central SMD with associated other services while having the teams run their own local hardware control systems. More broadly, there is a common desire across the consortium to better support some kind of shared resources for managing multiple systems.
As a low-risk change, we are proposing that we extend SMD to follow the guidelines in #11 to limit the scope of an action based on the permissions present in the bearer token. Any changes to SMD must be controlled by a commandline flag.
This work will be dependent on the addition of a JWT issuer to the deployment recipe.
[ ] Create a design document that outlines the problem to be solved and the proposed course of action
SMD has built-in support for Groups and Partitions as well as easy filtering logic for both on the main Component endpoints.
For the Supercomputing Institute, we would like the option of running one central SMD with associated other services while having the teams run their own local hardware control systems. More broadly, there is a common desire across the consortium to better support some kind of shared resources for managing multiple systems.
As a low-risk change, we are proposing that we extend SMD to follow the guidelines in #11 to limit the scope of an action based on the permissions present in the bearer token. Any changes to SMD must be controlled by a commandline flag.
This work will be dependent on the addition of a JWT issuer to the deployment recipe.