Disable cyfronet's S3 ObjectStore

usegalaxy-eu / infrastructure-playbook

Ansible playbook for managing UseGalaxy.eu infrastructure.

MIT License

16 stars 91 forks source link

Disable cyfronet's S3 ObjectStore #1232

Closed sanjaysrikakulam closed 2 months ago

sanjaysrikakulam commented 2 months ago

There were SSL certificate-related issues during the set metadata step of jobs. After communicating this with Cyfronet, enable it.

The error log: https://gist.github.com/bgruening/9fc669ab7922118ed4857ccdbfa3619f

Marius said, "The entire object store configuration is initialized when using extended metadata". Therefore, even when the ObjectStore's weight was set to 0, the S3 store was initialized.

sanjaysrikakulam commented 2 months ago

Ping @lopiola, can you clarify whether any certificate-related changes took place related to your S3?

lopiola commented 2 months ago

Hello,

this is unexpected, I can ask our admins if there were any problems with the infrastructure yesterday night.

It seems to work all right now...

curl https://s3p.cloud.cyfronet.pl -v
...
* Server certificate:
*  subject: C=PL; ST=Ma\U0142opolskie; O=Akademickie Centrum Komputerowe CYFRONET AGH; CN=*.s3p.cloud.cyfronet.pl
*  start date: Sep  5 00:00:00 2023 GMT
*  expire date: Sep  4 23:59:59 2024 GMT
*  subjectAltName: host "s3p.cloud.cyfronet.pl" matched cert's "s3p.cloud.cyfronet.pl"
*  issuer: C=NL; O=GEANT Vereniging; CN=GEANT OV RSA CA 4
*  SSL certificate verify ok.

sanjaysrikakulam commented 2 months ago

@lopiola Please check with your admins and let us know. In the meantime, when time permits, I will write a small script to test whether it works. The problem could be even in your identity management software layer as well.