usdf-alert — USDF Alert Stream Broker#

usdf-alert is an environment for alert stream production at the United States Data Facility (USDF) hosted at SLAC. The primary use of usdf-alert is for deployment of the USDF Alert Stream Broker environment.

Phalanx name

usdf-alert

Root domain

usdf-alert.slac.stanford.edu

Identity provider

OpenID Connect (dex.slac.stanford.edu)

Argo CD

https://usdf-alert.slac.stanford.edu/argo-cd

Argo CD identity provider

OpenID Connect (dex.slac.stanford.edu)

Applications

Documentation	Environment values	Defaults
`argocd`	values-usdf-alert.yaml	values.yaml
`gafaelfawr`	values-usdf-alert.yaml	values.yaml
`postgres`	values-usdf-alert.yaml	values.yaml
`repertoire`		values.yaml
`vault-secrets-operator`	values-usdf-alert.yaml	values.yaml

Gafaelfawr groups

Scope	Groups
`admin:token`	`rubinmgr` `unix-admin`
`admin:userinfo`	`rubinmgr` `unix-admin`
`exec:admin`	`rubinmgr` `unix-admin`
`exec:internal-tools`	`lsst` `lsst-ccs` `rubin_users` `rubin_users-a` `rubin_users-b` `rubin_users-c` `rubin_users-d` `rubin_users-e` `rubin_users-f` `rubin_users-g` `rubin_users-h` `rubin_users-i` `rubin_users-j` `rubin_users-k` `rubin_users-l` `rubin_users-m` `rubin_users-n` `rubin_users-o` `rubin_users-p` `rubin_users-q` `rubin_users-r` `rubin_users-s` `rubin_users-t` `rubin_users-u` `rubin_users-v` `rubin_users-w` `rubin_users-x` `rubin_users-y` `rubin_users-z` `rubin_admin_datasets` `rubin_admin_repos` `unix-admin`
`exec:notebook`	`lsst` `lsst-ccs` `rubin_users` `rubin_users-a` `rubin_users-b` `rubin_users-c` `rubin_users-d` `rubin_users-e` `rubin_users-f` `rubin_users-g` `rubin_users-h` `rubin_users-i` `rubin_users-j` `rubin_users-k` `rubin_users-l` `rubin_users-m` `rubin_users-n` `rubin_users-o` `rubin_users-p` `rubin_users-q` `rubin_users-r` `rubin_users-s` `rubin_users-t` `rubin_users-u` `rubin_users-v` `rubin_users-w` `rubin_users-x` `rubin_users-y` `rubin_users-z` `rubin_admin_datasets` `rubin_admin_repos` `unix-admin`
`exec:portal`	`lsst` `lsst-ccs` `rubin_users` `rubin_users-a` `rubin_users-b` `rubin_users-c` `rubin_users-d` `rubin_users-e` `rubin_users-f` `rubin_users-g` `rubin_users-h` `rubin_users-i` `rubin_users-j` `rubin_users-k` `rubin_users-l` `rubin_users-m` `rubin_users-n` `rubin_users-o` `rubin_users-p` `rubin_users-q` `rubin_users-r` `rubin_users-s` `rubin_users-t` `rubin_users-u` `rubin_users-v` `rubin_users-w` `rubin_users-x` `rubin_users-y` `rubin_users-z` `rubin_admin_datasets` `rubin_admin_repos` `unix-admin`
`read:image`	`lsst` `lsst-ccs` `rubin_users` `rubin_users-a` `rubin_users-b` `rubin_users-c` `rubin_users-d` `rubin_users-e` `rubin_users-f` `rubin_users-g` `rubin_users-h` `rubin_users-i` `rubin_users-j` `rubin_users-k` `rubin_users-l` `rubin_users-m` `rubin_users-n` `rubin_users-o` `rubin_users-p` `rubin_users-q` `rubin_users-r` `rubin_users-s` `rubin_users-t` `rubin_users-u` `rubin_users-v` `rubin_users-w` `rubin_users-x` `rubin_users-y` `rubin_users-z` `rubin_admin_datasets` `rubin_admin_repos` `unix-admin`
`read:tap`	`lsst` `lsst-ccs` `rubin_users` `rubin_users-a` `rubin_users-b` `rubin_users-c` `rubin_users-d` `rubin_users-e` `rubin_users-f` `rubin_users-g` `rubin_users-h` `rubin_users-i` `rubin_users-j` `rubin_users-k` `rubin_users-l` `rubin_users-m` `rubin_users-n` `rubin_users-o` `rubin_users-p` `rubin_users-q` `rubin_users-r` `rubin_users-s` `rubin_users-t` `rubin_users-u` `rubin_users-v` `rubin_users-w` `rubin_users-x` `rubin_users-y` `rubin_users-z` `rubin_admin_datasets` `rubin_admin_repos` `unix-admin`
`write:sasquatch`	`rubinmgr` `unix-admin`

Argo CD RBAC

Role	Groups or users
`role:admin`	dspeck@slac.stanford.edu pav@slac.stanford.edu ppascual@slac.stanford.edu reinking@slac.stanford.edu ytl@slac.stanford.edu