From: Amila Jayasekara <[email protected]> Reply-To: Airavata Dev <[email protected]> Date: Friday, October 25, 2013 at 11:16 PM To: Airavata Dev <[email protected]> Subject: Re: Access credential store though Airavata API
> We had discussions separating out Credential Store from Airavata. In that case > it is not appropriate to add that functionality to API. > > Suresh, whats your opinion on this ? Amila, Short answer, + 1 for adding to Airavata API. I always see these kind of scenarios as an SPI Vs API discussion. I mean Credential store should have an Service Provider Interface, similar to the Gfac SPI and Registry SPI which if any one interested can quickly take and bundle into a standalone application. But for Airavata purposes, its better to unify and simplify the functions through the Airavata API. So, for use cases like what Viknes outlined below, it makes total sense to have Credential Store functions from Airavata API. From a deployment perspective, I think we can have Credential Store bundles with the server deployment for now. Since the data in and out is processed through encryptions, it may be ok. But at some point, we need to request a security audit of Airavata and then we need to go by what the recommendations are. Suresh > > Thanks > Amila > > > On Fri, Oct 25, 2013 at 4:53 PM, Viknes Balasubramanee <[email protected]> > wrote: >> Hi All, >> >> We are trying to use Airavata to submit jobs on to our clusters. We need to >> save the credentials provided by a user in the Airavata credential store and >> retrieve them when submitting jobs. Right now the Airavata credential store >> is not accessible through the Airavata API. Current credential store can be >> used as a separate library to achieve the functionality. But since credential >> store functionality is a necessary feature for gateway developers, IMHO it is >> better to add them in to Airavata API. WDYT ? >> >> Thanks >> Viknes >
