Skip to content

Draft: BUG: add `bilby_pipe` handle to `igwn_oauth_permissions`

Michael Williams requested to merge michael.williams/bilby_pipe:add-token-handle into master

There is an issue with authentication that causes the following error when submitting bilby pipe dags:

06/05/24 06:30:09 From submit: Submitting job(s)
06/05/24 06:30:09 From submit: condor_vault_storer: reduced scopes or audience require a handle
06/05/24 06:30:09 From submit:   More details might be available by running
06/05/24 06:30:09 From submit:     condor_vault_storer -v "igwn&scopes=read:/ligo" 
06/05/24 06:30:09 From submit: 
06/05/24 06:30:09 From submit: ERROR: (0) invoking /usr/bin/condor_vault_storer
06/05/24 06:30:09 failed while reading from pipe.

I believe I have tracked this down to an issue with the igwn_oauth_permissions variable in the submit files. The documentation for scitokens seems to imply that we have to specify a handle (see https://computing.docs.ligo.org/guide/htcondor/credentials/#scitokens-single) but we don't at the moment. I believe adding a handle e.g. bilby_pipe will address this.

Tests

To be updated

Merge request reports