nerc-project / operations

Issues related to the operation of the NERC OpenShift environment
1 stars 0 forks source link

Define behaviors in OpenStack for ColdFront expired, denied and revoked #566

Open joachimweyl opened 1 month ago

joachimweyl commented 1 month ago

Motivation

Currently when an allocation expires in ColdFront OpenStack is still accessible for use. We needed to decide how to communicate externally what expired means and also how we would use the denied and revoked status as well.

Completion Criteria

Document what we think should happen when an OpenStack allocation is expired, denied, or revoked.

Description

Completion dates

Desired - 2024-05-29 Required - TBD

joachimweyl commented 1 month ago

@Milstein & @jtriley can we set these projects to denied or revoked instead of expired?

Milstein commented 1 month ago

I will test the Denied/Revoked functionality and verify.

joachimweyl commented 1 month ago

Notes from Wed meeting Currently Denied or Revoked will disable the project so you can still use the VMs just no creation of new VMs We would have to manually remove the resources, “os purge” or set this to happen when we set denied or revoked (dangerous) NERC runbook for the OS Purge here. Update documentation to call “expired” allocations to “needs renewal” Cost Associated with Expired Allocations

msdisme commented 1 month ago

Want to be able to turn off resources Expired: change to "Active (Needs Renewal). Email goes out to notify. Would use Revoked at some point as a manual process. Denied: for creation and for changes. Revoke: stop everything on server side and cleanup except storage which should be manual. leave the allocation in coldfront but PI may not activate. Message for revoke should include notification to contact about storage. administrative allocation changes needs to be fleshed out more for additions and subtractions..

joachimweyl commented 2 weeks ago

second meeting to be scheduled for once Wayne gets back.

msdisme commented 2 weeks ago

@waygil @Milstein please review flow chart and give feedback in this issue. I will update. Created with https://app.diagrams.net