{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":57026268,"defaultBranch":"master","name":"dcache","ownerLogin":"indigo-dc","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2016-04-25T08:48:49.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/13533839?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1558097855.0","currentOid":""},"activityList":{"items":[{"before":"63a5d1d103ae53bbdc1f4735511b7b4a09486b60","after":"ed2d9a230743d8e7f8c44828a51c1baaa910879c","ref":"refs/heads/master","pushedAt":"2023-10-27T21:07:57.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"docker: use exec for start java process\n\nTarget: master\nRecommended-by: Oggian  Elia AT CSCS DOT CH","shortMessageHtmlLink":"docker: use exec for start java process"}},{"before":"ce3cfe33a14f3bf4a5140b7f2976d56e636e7de4","after":"63a5d1d103ae53bbdc1f4735511b7b4a09486b60","ref":"refs/heads/master","pushedAt":"2023-10-25T14:39:56.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"Fix ce3cfe3: remove superfluous brace","shortMessageHtmlLink":"Fix <a class=\"commit-link\" data-hovercard-type=\"commit\" data-hovercard-url=\"https://github.com/indigo-dc/dcache/commit/ce3cfe33a14f3bf4a5140b7f2976d56e636e7de4/hovercard\" href=\"https://github.com/indigo-dc/dcache/commit/ce3cfe33a14f3bf4a5140b7f2976d56e636e7de4\"><tt>ce3cfe3</tt></a>: remove superfluous brace"}},{"before":"aec714e65319a348574f031d6767c66715fc4150","after":"ce3cfe33a14f3bf4a5140b7f2976d56e636e7de4","ref":"refs/heads/master","pushedAt":"2023-10-25T14:16:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache: make admin pin command asynchronous\n\nMotivation:\nWhen pinning a file via admin interface and that file needs to be staged, the call blocks until it finishes.\n\nModification:\nMake the admin-triggered pin request asynchronous.\n\nResult:\nA pin request via admin interface does no longer wait for the pin to be established before returning.\n\nTarget: master\nRequires-notes: no\nRequires-book: no\nPatch: https://rb.dcache.org/r/14152/\nAcked-by: Dmitry Litvintsev","shortMessageHtmlLink":"dcache: make admin pin command asynchronous"}},{"before":"122f6c2039602eb76ea94f91d2392156e080bf30","after":"aec714e65319a348574f031d6767c66715fc4150","ref":"refs/heads/master","pushedAt":"2023-10-25T07:00:44.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"oidc: fix remove invalid testcase\n\naddon to commit 83d1e77eed\n\nAcked-by:\nTarget: master, 9.2, 9.1, 9.0, 8.2\nRequire-book: no\nRequire-notes: no","shortMessageHtmlLink":"oidc: fix remove invalid testcase"}},{"before":"dc6db510c86c311931ce61d2bdad3d27107c56dc","after":"122f6c2039602eb76ea94f91d2392156e080bf30","ref":"refs/heads/master","pushedAt":"2023-10-20T18:11:02.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"Merge pull request #7404 from dCache/dependabot/maven/org.json-json-20231013\n\nbuild(deps): bump org.json:json from 20230227 to 20231013","shortMessageHtmlLink":"Merge pull request <a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1953758932\" data-permission-text=\"Title is private\" data-url=\"https://github.com/dCache/dcache/issues/7404\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/dCache/dcache/pull/7404/hovercard\" href=\"https://github.com/dCache/dcache/pull/7404\">dCache#7404</a> from dCache/dependabot/maven/org.json-…"}},{"before":"2f268fb1d7083db85bf48df84b4c4c5cf31ad799","after":"dc6db510c86c311931ce61d2bdad3d27107c56dc","ref":"refs/heads/master","pushedAt":"2023-10-20T18:06:57.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"ci: use java17 builds for rpm and tar","shortMessageHtmlLink":"ci: use java17 builds for rpm and tar"}},{"before":"2076857a4cce60dea4858d141f2cd96cffa1e89b","after":"2f268fb1d7083db85bf48df84b4c4c5cf31ad799","ref":"refs/heads/master","pushedAt":"2023-10-20T08:05:47.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"pool: drop RDB based CEPH support\n\nMotivation:\nTurned out that CEHP support is not that popular. Moreover,\nsites that have tried to run dcache+ceph decided to go for\nCephFS (mounted as regular FS)  provided better performance,\nscalability and erasure encoding.\n\nModification:\nDrop RBD based CEPH file channel, corresponding documentation and\nproperties.\n\nResult:\nless code\n\nAcked-by: Marina Sahakyan\nTarget: master\nRequire-book: yes\nRequire-notes: yes","shortMessageHtmlLink":"pool: drop RDB based CEPH support"}},{"before":"8c65ee7636346e4104cb0196d0d0b87f8fac6e04","after":"2076857a4cce60dea4858d141f2cd96cffa1e89b","ref":"refs/heads/master","pushedAt":"2023-10-19T12:31:13.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk: use rate limiter to throttle semaphore release\n\nMotivation:\n\nmaster@0b4140b454b819de55c7c412539294537ff0beb8\nhttps://rb.dcache.org/r/14118/\n\nrestructured the container job for greater\nthroughput.  In order to pace execution of\ncalls on external services, however, two\nsemaphores were used.  For task execution,\nthe semaphore is not released until the\nfuture of the execution completes.\n\nThis works well but has the drawback of\nnot allowing submission to continue to\nservices like PinManager if there\nare max permit number of tasks waiting\nfor a response (e.g., in the case of\nactual staging).\n\nOn the other hand, releasing the\nsemaphore immediately upon reception\nof the future, causes calls to external\nservices to pile up, causing timeout errors\nof various sorts.\n\nModification:\n\nRelying on the thread pool size will\nnot work in this case because the\nexecution of the activity must\nbe asynchronous; the turnover\nis extremely rapid.\n\nInstead we adopt the solution of\na rate limiter to throttle the\nsemaphore release.  Each activity\nis given a limiter for the\nservice endpoint it communicates\nwith.  The rates for these\n(PinManager, PnfsManager, QoSEngine)\nare configurable.\n\nResult:\n\nPerformance and stability is sustained,\nbut throughput continues when the submitted\ntask activities are in a state of waiting\nfor future completion.\n\nTarget: master\nRequest: 9.2 (fixes an important issue)\nPatch:  https://rb.dcache.org/r/14136/\nRequires-notes: yes  (No longer blocks throughput\nof new tasks when the number of tasks waiting\nfor completion from an external service like\nPinManager reaches max available task permits.)\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-bulk: use rate limiter to throttle semaphore release"}},{"before":"ad19184647d34b4f62f33225b13762ad13a3e14c","after":"8c65ee7636346e4104cb0196d0d0b87f8fac6e04","ref":"refs/heads/master","pushedAt":"2023-10-19T07:46:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"config: add support for environment variable injection\n\nMotivation:\nin container world it's common to use environment variables to pass the\nconfiguration parameters. Currently dCache doesn't support such injects,\nwhich makes container-based deployments more complicated.\n\nModification:\nUpdate ConfigurationProperties to resolve environment variables when\nreading the property (layout, conf) files. The syntax is:\n\ndcache.net.wan.port.min=${env.DCACHE_WAN_PORT_MIN}\ndcache.net.wan.port.max=${env.DCACHE_WAN_PORT_MAX}\n\nResult:\n\ndcache properties can be controlled by env variables, if desired.\n\nAcked-by: Albert Rossi\nTarget: master\nRequire-book: yes\nRequire-notes: yes","shortMessageHtmlLink":"config: add support for environment variable injection"}},{"before":"49ab9ed9ddef8684f6af0063d8ac79d4c7a39463","after":"ad19184647d34b4f62f33225b13762ad13a3e14c","ref":"refs/heads/master","pushedAt":"2023-10-17T12:32:55.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-qos: correction to the threshold warning\n\nMotivation:\n\nAdmin command warning on ls in qos borrowed from\nresilience, but language not adapted.\n\nModification:\n\nChange the command warning output not to mention\nresilience.\n\nResult:\n\nLess confusion.\n\nTarget: master\nRequest: 9.2\nRequest: 9.1\nRequest: 9.0\nRequest: 8.2\nPatch: https://rb.dcache.org/r/14140/\nRequires-notes: no\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-qos: correction to the threshold warning"}},{"before":"62ad77f3f38a4f7ce3153faf0af1c828ae16cdde","after":"49ab9ed9ddef8684f6af0063d8ac79d4c7a39463","ref":"refs/heads/master","pushedAt":"2023-10-17T12:22:41.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk: fix bug in archiver deletion query\n\nMotivation:\n\nThe archiver should delete only requests that are\nin terminal state.\n\nState is missing as part of the actual delete query!\n\nAlso, we should not delete INCOMPLETE requests as\nthere is the slight possibility the archiver could\nbe running while an initial insertion is taking\nplace and could slice it (as the three table\ninsertions are not in the same transaction).\n\nModification:\n\nAdd the states and remove `INCOMPLETE`.\n\nResult:\n\nCorrect behavior which does not risk\ndeleting ongoing active requests.\n(This was in fact observed during\ntesting.)\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14141/\nRequires-notes:  yes (potentially could drop requests which have not finished)\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-bulk: fix bug in archiver deletion query"}},{"before":"9698289eb3b4da5049bb6bf2d15789f8e8c654e1","after":"62ad77f3f38a4f7ce3153faf0af1c828ae16cdde","ref":"refs/heads/master","pushedAt":"2023-10-12T10:47:05.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"Merge pull request #7385 from dCache/dependabot/maven/org.apache.zookeeper-zookeeper-3.7.2\n\nbuild(deps): bump org.apache.zookeeper:zookeeper from 3.7.1 to 3.7.2","shortMessageHtmlLink":"Merge pull request <a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1938741030\" data-permission-text=\"Title is private\" data-url=\"https://github.com/dCache/dcache/issues/7385\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/dCache/dcache/pull/7385/hovercard\" href=\"https://github.com/dCache/dcache/pull/7385\">dCache#7385</a> from dCache/dependabot/maven/org.apach…"}},{"before":"523654c77459ad1101b0de36305e04146c633478","after":"9698289eb3b4da5049bb6bf2d15789f8e8c654e1","ref":"refs/heads/master","pushedAt":"2023-10-12T08:43:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"ci: add webdav test","shortMessageHtmlLink":"ci: add webdav test"}},{"before":"c65c0071e8109e83ff615feab4f950567a89e1d3","after":"523654c77459ad1101b0de36305e04146c633478","ref":"refs/heads/master","pushedAt":"2023-10-11T22:36:47.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"doc:  add QoS policy and role documentation to the dCache Book\n\nMotivation:\n\nShould have been added with the last policy engine patch\n(my bad).\n\nModification:\n\nUpdates the qos page and adds a cookbook section.\n\nResult:\n\nUsers are a little less lost.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14128/\nRequires-notes:  yes (just say documentation now available)\nAcked-by: Dmitry","shortMessageHtmlLink":"doc: add QoS policy and role documentation to the dCache Book"}},{"before":"e957031622847b4fcd39a462936ec65f6983844e","after":"c65c0071e8109e83ff615feab4f950567a89e1d3","ref":"refs/heads/master","pushedAt":"2023-10-10T17:20:11.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"wevdav: fix redirect path\n\nMotivation:\n\nCommit 8a4273fa8ce478fd5dffa425728fe505b367d629 seem to have introduced\nregression in how redirect paths are presented.\n\nModification:\n\nPass request.getRequestURL() to call to ServletRequest.stripToPath\ninstead of request.getRequestURI()\n\nResult:\n\nObserve correct path on redirect\n\nPatch: https://rb.dcache.org/r/14130/\nTarget: trunk\nRequest: 9.2\nRequest: 9.1\nRequest: 9.0\nRequest: 8.2","shortMessageHtmlLink":"wevdav: fix redirect path"}},{"before":"533c363872c434f648beee99eb77b9875456b1ec","after":"e957031622847b4fcd39a462936ec65f6983844e","ref":"refs/heads/master","pushedAt":"2023-10-10T08:22:00.000Z","pushType":"push","commitsCount":6,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"book: split srm chapter into srm, srmmanager, spacemanager\n\nMotivation:\n\nThe `srm` chapter contains a lot of information unrelated to the srm door,\nwhich both makes filtering out the srm door information difficult, and\ncomplicates finding the srmmanager/spece management snippets when one if\nlooking for them.\n\nFurthermore, a lot of the srm/srmmanager information is deprecated and\nreferences properties that have become obsolete years ago.\n\nModification:\n\nSplits the srm chapter into three new chapters: srm, srmmanager, spacemanager.\nThese chapters still need reviewing and probably more information down the line, though.\nRemoves mention of many obsolete properties.\n\nResult:\n\nLess deprecated book content.\nHopefully it will also be easier to find information on both srmmanager and\nspacemanager.\n\nTarget: master\nRequires-notes: no\nRequires-book: no\nPatch: https://rb.dcache.org/r/14123/\nAcked-by: Tigran Mkrtchyan","shortMessageHtmlLink":"book: split srm chapter into srm, srmmanager, spacemanager"}},{"before":"c370ba25f7bc54b4f37b0d6cc3aa35148dedac5f","after":"533c363872c434f648beee99eb77b9875456b1ec","ref":"refs/heads/master","pushedAt":"2023-10-06T09:59:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-core: increase default unpins per time\n\nMotivation:\nAfter commit a8e0c4fe7b5c797, pins that regularly expire are handled by the\npools themselves without additional message triggers from PinManager.\nThe default value of 200 unpins per time (default 1 minute) now only concerns files that are manually unpinned.\n\nThis default value is still too small, and in first tests a value of 2k/minute should\nbe fine and not overwhelm the system.\n\nModification:\nIncrease the `pinmanager.max-unpins-per-run` value to 2000.\n\nResult:\nLarger unpin/time default value that should make the default behaviour more performant.\n\nTarget: master\nRequires-notes: no\nRequires-book: no\nPatch: https://rb.dcache.org/r/14122/\nAcked-by: Tigran Mkrtchyan","shortMessageHtmlLink":"dcache-core: increase default unpins per time"}},{"before":"60dd0baca49fc4be2875b4f386d496b08f6400dd","after":"c370ba25f7bc54b4f37b0d6cc3aa35148dedac5f","ref":"refs/heads/master","pushedAt":"2023-10-06T06:52:47.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"Support additional Kafka parameters for ftp and dcap.\n\nThis is an alternative to the configs property prefix for cells which\nare not implemented in terms of the spring framework.","shortMessageHtmlLink":"Support additional Kafka parameters for ftp and dcap."}},{"before":"1df7a1800a8cc52ae2d1bec8a76b69008eb320da","after":"60dd0baca49fc4be2875b4f386d496b08f6400dd","ref":"refs/heads/master","pushedAt":"2023-10-05T12:26:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk: add count and clear to archive admin commands\n\nMotivation:\n\nConvenience (not having to run query on the database\ninterpreter).\n\nModification:\n\nAdd commands to display the count instead of the\nactual entry (as with requests and targets), and\nalso a command to clear/delete from the archive\ntable.\n\nResult:\n\nFriendlier admin interface.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14119/\nRequires-notes: yes\nAcked-by: Lea","shortMessageHtmlLink":"dcache-bulk: add count and clear to archive admin commands"}},{"before":"07492e6e946a1519d1bb76fe3f6405043efadfe3","after":"1df7a1800a8cc52ae2d1bec8a76b69008eb320da","ref":"refs/heads/master","pushedAt":"2023-10-05T12:20:33.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk:  cancel activity future on target cancel\n\nMotivation:\n\nNeglected to cancel the future of the\nactivity of a task running inside the container\n(instead of just the task future and the target\nobject).\n\nModification:\n\nAdd cancellation.\n\nResult:\n\nCorrect cancellation semantics.\n\nTarget: master\nRequest: 9.2\nRequires-notes: yes\nPatch: https://rb.dcache.org/r/14121/\nAcked-by: Dmitry","shortMessageHtmlLink":"dcache-bulk: cancel activity future on target cancel"}},{"before":"5c9d04fff3eaf32dcd02bb10e0d15f818a5146bd","after":"07492e6e946a1519d1bb76fe3f6405043efadfe3","ref":"refs/heads/master","pushedAt":"2023-10-05T09:40:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"docs: userguide fix example domains names to follow RFC 2606","shortMessageHtmlLink":"docs: userguide fix example domains names to follow RFC 2606"}},{"before":"4c731ab8cf78aab93ed2c953d933ba5860f4c2d0","after":"5c9d04fff3eaf32dcd02bb10e0d15f818a5146bd","ref":"refs/heads/master","pushedAt":"2023-10-05T09:35:27.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"docs: UserGuide fix angle-braket in metalink\n\nThis patch fixes a less-than symbol that mistakenly wasn't escaped.","shortMessageHtmlLink":"docs: UserGuide fix angle-braket in metalink"}},{"before":"094c1714c196c07665b9835e6759d73208f021a9","after":"4c731ab8cf78aab93ed2c953d933ba5860f4c2d0","ref":"refs/heads/master","pushedAt":"2023-10-05T09:30:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"docs: add description of webdav's metalink support\n\nMotivation:\n\ndCache recently added support for metalink.  This should be described so\npeople know how to use it.\n\nModification:\n\nAdd section in WebDAV door chapter on metalink\n\nResult:\n\nHigher likelihood of dCache users taking advantage of the new metalink\nsupport.\n\nTarget: master\nRequest: 9.2","shortMessageHtmlLink":"docs: add description of webdav's metalink support"}},{"before":"a95a9edb5eb62de2c6c6c47d2a9787f5a47e4044","after":"094c1714c196c07665b9835e6759d73208f021a9","ref":"refs/heads/master","pushedAt":"2023-10-04T20:31:39.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"gplazma: oidc update explicit AuthZ parsing\n\nMotivation:\n\nThe WLCG JWT Profile describes how JWTs may include explicit\nauthorisation statements in the 'scope' claim (e.g.,\n`storage.read:/foo`).\n\nWhen processing a token, the oidc gPlazma plugin decides whether the\ntoken carries explicit AuthZ statements.  If it does, then the resulting\nlogin will suspend namespace-based authorisation and fully honour the\nauthorisation from the token.\n\nThere are a few issues with how dCache currently parses these explicit\nAuthZ statements.\n\n  1.  The profile describes how the resource identifier is optional\n      (e.g., `storage.read` is valid), but dCache scope parsing\n      currently rejects explicit AuthZ if the resource identifier is\n      missing.\n\n  2.  The profile describes several explicit AuthZ statements (e.g.,\n      `compute.read`).  Currently, dCache completely ignores these\n      statements.  However, this is not complete correct because such\n      compute explicit AuthZ statements indicate the token (in general)\n      is carrying explicit AuthZ.  Therefore, the presence of compute\n      explicit AuthZ statements and a lack of any storage explicit AuthZ\n      statements should result in dCache rejecting requests by that\n      token.\n\nModification:\n\nUpdate scope parsing components to relax the requirement on having a\nresource identifier.  An explicit AuthZ statement without a resource\nidentifier is equivalent to adding `:/` to the statement (e.g.,\n`storage.read` interpreted as `storage.read:/`).\n\nAdd extra valid values for the \"compute.\\*\" explicit AuthZ statements.\nThis are ignored by the rest of dCache, but their presence will result\nin dCache considering the token as one with explicit AuthZ.\n\nResult:\n\ndCache will now accept non-targeted explicit AuthZ statements in the\nscope claim (e.g., `storage.read`).  dCache will consider tokens\ncontaining compute explicit AuthZ statements but without any storage\nexplicit AuthZ statements as tokens with explicit authorisation; the\nlack of any storage explicit authorisation statements will result in all\nrequests with that token being denied.\n\nTarget: master\nRequires-notes: yes\nRequires-book: no\nRequest: 9.2\nRequest: 9.1\nRequest: 9.0\nRequest: 8.2\nPatch: https://rb.dcache.org/r/13996/\nAcked-by: Dmitry Litvintsev","shortMessageHtmlLink":"gplazma: oidc update explicit AuthZ parsing"}},{"before":"8b3ff0d2b4fe332577e24574a404fe25f976c096","after":"a95a9edb5eb62de2c6c6c47d2a9787f5a47e4044","ref":"refs/heads/master","pushedAt":"2023-10-02T13:31:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk:  add convenience admin command for state counts\n\nMotivation:\n\nCounts of requests and targets by state are useful to\nhave, especially when testing and debugging, but\ngenerally for the admin as well.  These currently\nrequire a `ls` command with options.\n\nMore convenient would be a single command that\njust delivers them.\n\nModification:\n\nAdded the command and a few method calls to the\nunderlying db utility which already exists.\n\nResult:\n\nMuch handier retrieval of this info.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14116/\nRequires-notes: yes\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-bulk: add convenience admin command for state counts"}},{"before":"78730356154448b1fc2c259e6354cf8dfc3832ce","after":"8b3ff0d2b4fe332577e24574a404fe25f976c096","ref":"refs/heads/master","pushedAt":"2023-10-02T13:26:49.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-qos:  fix scanner operation completion logic\n\nMotivation:\n\nWhen system scan operations run, the operation\nmap fails to understand when they have all completed.\nThis is due to a faulty way of computing the highest\nindex of the targets processed.\n\nModification:\n\nFix the issue by implementing a `hasNext`\nmethod which is properly global rather than\nchecking indices on individual operations\n(which is flawed because it assumes they\nrun in serial order).\n\nThe patch also corrects/improves several\nlogging statements.\n\nResult:\n\nScans are properly marked as having\ncompleted and the end timestamps as\nreported by `info` are correct.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14097\nRequires-notes: yes (for 9.2)\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-qos: fix scanner operation completion logic"}},{"before":"f9fbb002e1d36b99e835bb7dfc390944fd75b182","after":"78730356154448b1fc2c259e6354cf8dfc3832ce","ref":"refs/heads/master","pushedAt":"2023-09-30T12:21:45.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk: implement HA\n\nMotivation:\n\nSome users/experiments have expressed an interest\nin making the Bulk service replicable.\n\nModification:\n\nThe necessary hooks have been added for leader/latch\nmanagement.\n\nBecause of the stateful semantics of the database,\nall physical instances must share a single database\ninstance.\n\nBecause of the way containers are managed in\nmemory, it is preferable to have all DB insert\nand update activity, as well as cancellation\nand clearing (which involves the cache as\nwell) to be done by the leader only.\n\nHence, `submit` (< RESTful POST), `cancel`\n(< RESTful PATCH) and `clear` (< RESTful DELETE)\nmessages are forwarded to the leader\n(whose address is obtained by injecting the\nHA leadership manager into the service).\n\nRESTful GET queries (`info`, `list`)\nare serviced by all physical instances.\n\nThe `archiver` is also run exclusively\nby the leader.\n\nResult:\n\nBulk is replicable.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14111/\nRequires-notes: yes\nRequires-book: yes (cookbook paragraph provided)\nAcked-by: Lea","shortMessageHtmlLink":"dcache-bulk: implement HA"}},{"before":"271b32a07da8b53baf71313cfe7e26c8397a455e","after":"f9fbb002e1d36b99e835bb7dfc390944fd75b182","ref":"refs/heads/master","pushedAt":"2023-09-29T23:27:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk:  do not PIN or STAGE files with AL ONLINE\n\nMotivation:\n\nOnline files should not accumulate useless user pins.\n\nModification:\n\nIf a file's AL is ONLINE, immediately return\na future indicating indefinite lifetime.\nThe completion handler will understand these\nto be ONLINE and mark them SKIPPED.\n\nResult:\n\nNo unnecessary pins created.\n\nTarget: master\nRequest: 9.2\nRequest: 9.1\nRequest: 9.0\nRequest: 8.2\nRequires-notes: yes\nPatch: https://rb.dcache.org/r/14114/\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-bulk: do not PIN or STAGE files with AL ONLINE"}},{"before":"b37a79a5b811b2a88d247293e9c1dacdaee4243d","after":"271b32a07da8b53baf71313cfe7e26c8397a455e","ref":"refs/heads/master","pushedAt":"2023-09-29T23:13:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"dcache-bulk:  only set request status to QUEUED when permissions and targets are all inserted\n\nMotivation:\n\nSometimes when bulk requests are interrupted\n(service goes down) the insert of the initial\nrequest may not have completed.   When reloaded\nor retried, a failure having to do with\nmissing Subject or missing targets may occur.\n\nModification:\n\nAdd a new state, INCOMPLETE.  Do not set the\nstate of the request to QUEUED until\npermissions and targets have been added\nto their respective tables.\n\nOn reset or reload, query again only for QUEUED.\nLeave the incomplete requests as INCOMPLETE,\nbut add the INCOMPLETE state to the archiver\nlogic so that they are eventually cleared.\n\nResult:\n\nNo runtime execution errors for corrupted\nrequests.\n\nTarget: master\nRequest: 9.2\nPatch: https://rb.dcache.org/r/14113/\nRequires-notes: yes\nAcked-by: Tigran","shortMessageHtmlLink":"dcache-bulk: only set request status to QUEUED when permissions and t…"}},{"before":"afe112ed48cc2b128fcf1d10d904023723cd481f","after":"b37a79a5b811b2a88d247293e9c1dacdaee4243d","ref":"refs/heads/master","pushedAt":"2023-09-28T12:26:24.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"jstarek","name":"Jürgen Starek","path":"/jstarek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1275700?s=80&v=4"},"commit":{"message":"[maven-release-plugin] prepare for next development iteration","shortMessageHtmlLink":"[maven-release-plugin] prepare for next development iteration"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAADobOKcQA","startCursor":null,"endCursor":null}},"title":"Activity · indigo-dc/dcache"}