INDIGO – DataCloud CERN CERN RIA

Status of CERN IaaS Cloud  CERN IaaS Cloud in production since July 2013  4,700 hypervisors (120,000 cores) across two data centres  OpenStack Juno using RDO community distribution  Compute (OpenStack and EC2 APIs)  Storage using 3PB ceph pool for volumes  Identity including SAML with eduGain, X.509 and Kerberos authentication  1,800 projects active  ~1,000,000 VMs created since service started  Over 90% of LHC compute resources at CERN managed by the cloud  Approach  Stay very close to upstream open source community release  Keep staffing levels O(1) rather than expect more staff for more resources  Use open design process and contribute changes using standard OpenStack blueprints  Support RDO as an open source community  Collaborate with industry on common needs such as federation and delegated quotas INDIGO-DataCloud RIA CERN20/04/2015 2

People  Who  Ian Bird  WLCG Project Leader  INDIGO DataCloud Collaboration Board representative  Tim Bell  CERN IT Operating Systems and Infrastrusture (OIS) Group Leader  Member at the OpenStack Management Board and User Committee  Ricardo Rocha  CERN Cloud Engineer IT-OIS  Dedicated CERN fellow  Hiring process underway  Start expected in Summer /04/2015INDIGO-DataCloud RIA CERN 3

CERN WP3 Contributions  Pilot Infrastructures ( T3.3 )  Provide OpenStack resources for testbeds (10s?)  Using the existing production infrastructure  eduGAIN support  Identity including SAML with eduGain, X.509 and Kerberos authentication  Specialized OpenStack deployments and endpoints  Validation of specific features or developments  Hopefully not too intrusive... 20/04/2015INDIGO-DataCloud RIA CERN 4

CERN WP4 Contributions  AAI Management  OS-Federation, in production  Identity including SAML with eduGain, X.509 and Kerberos authentication  Container Support  Ongoing work at CERN, lxc integration with OpenStack Nova  Same for OpenStack Heat, close to deployment  Interest in Docker  Cloud Scheduling  Looking forward to more details in this meeting 20/04/2015INDIGO-DataCloud RIA CERN 5

CERN WP5 Contributions  Security and Authorization  OS-Federation, in production  Identity including SAML with eduGain, X.509 and Kerberos authentication  Architecture and Implementation  Ongoing work on:  Containers with LXC, Docker  Orchestration with OpenStack Heat  Interest in OpenStack Murano as an app store  With integrated federation and accounting  Also includes Kubernetes for orchestration, monitoring  Evaluation of existing solutions as first step  Goals for common interfaces? Things moving fast in this area 20/04/2015INDIGO-DataCloud RIA CERN 6

Further information  CERN cloud presentations  Includes federation and ceph   OpenStack in Production blog  INDIGO-DataCloud RIA CERN20/04/2015 7

Related Projects  AARC  Federated identity – Romain Wartel  Helix Nebula Initiative  HNSciCloud PCP proposal – Bob Jones  CERN Openlab  Rackspace funded collaboration for cloud federation 20/04/2015INDIGO-DataCloud RIA CERN 8