Implemented Services
The services described below have already been implemented for usage in the PUNCH4NFDI project.
Acknowledgement
You shall provide appropriate acknowledgement of support or citation for your use of the services as following:
The authors gratefully acknowledge the used services provided by the PUNCH4NFDI Consortium. The consortium is funded by the Deutsche Forschungsgemeinschaft (DFG, German Research Foundation) – project number 460248186.
PUNCH AAI
At the moment, the service is implemented partially. If fully implemented, it will provide user authorization and authentication to NFDI, EOSC, etc., and will fulfill the NFDI and PUNCH4NFDI requirements.
PUNCH AAI service was implemented in order to ensure common authorization and authentication infrastructure to access project resources.
It provides an interface for user authorization and authentication to the NFDI, to national, European (e.g. EOSC), and international AAI-solutions as well as those from industry, and fulfills the NFDI and PUNCH requirements.
The second major function of this service is to offer user and group management that allows authorization based on group affiliations.
The PUNCH-AAI service is provided by HIFIS.
MultiCloud services: WWU Kube & WWU Cloud
MultiCloud services developed for IT administrators to provide cloud resources for computing and storage for the PUNCH4NFDI project. Both containers and VMs can be used for hosting services.
At the moment, MultiCloud services include WWU Kube and WWU Cloud services.
WWU Kube service offers multi-cluster container hosting using Kubernetes. It features:
- Automatic scaling based on workload
- Two data centers for redundancy
- Strong security and hardening measures
- Monitoring services included: Grafana, Mimir, Loki, Tempo, Alertmanager
- Possibility for PUNCH members to request their own namespaces to deploy services.
WWU Cloud service offers IaaS VM hosting using OpenStack.
COBalD/TARDIS
The TARDIS resource manager enables the dynamic integration of resources provided by different resource providers into one overlaybatch system. TARDIS relies on COBalD - the Opportunistic Balancing Daemon - in order to balance opportunistic resources. Hence, TARDIS is implemented as a COBalD service.
Small fractions of potentially decentralized community-specific Compute4PUNCH resources jointly managed by the COBalD/TARDIS compute resource management software framework will be made available to PUNCH4NFDI and beyond for data analysis and testing purposes. This includes explicitly third-party users as well as the general public.
The COBalD/TARDIS service was developed in FIDIUM.
Computing and Storage services (Compute4PUNCH and Storage4PUNCH)
Compute4PUNCH and Storage4PUNCH services provide IT resources for federated computing and efficient data management. Therefore, interfaces to existing infrastructures will be supplied, for example, to supercomputers, i.e. machines provided by HLNR. Additionally, small fractions of community-specific resources jointly managed by the COBalD/TARDIS compute resource management software framework will be made available to PUNCH4NFDI and beyond for data analysis. Finally, prototyping interactive analysis via multi-cloud resources will be facilitated for interested users.
Integration of computing and storage resources into a common infrastructure has been performed, and suitable access points provided. Access to federated IT resources in this infrastructure is enabled using different points of entry utilizing well-established technologies like JupyterHub, Grid Compute Elements, or traditional login nodes to cover the broad needs of the PUNCH community. Storage endpoints are provided via the XRootD or dCache middleware.
Communities which are interested in federated science cloud infrastructures for their own use can contact PUNCH4NFDI. We are happy to provide the corresponding support.