Enabling Remote Management of FaaS Endpoints with Globus Compute Multi-User Endpoints

Ananthakrishnan, Rachana; Babuji, Yadu Nand; Baughman, Matt; Bryan, Josh; Chard, Kyle; Chard, Ryan; Clifford, Ben; Foster, Ian; Katz, Daniel S.; Kesling, Kevin Hunter; Janidlo, Chris; Mello, Reid; Wang, Lei

doi:10.6082/wtfqj-13586

Published July 17, 2024 | Version v1

Journal article Open

Enabling Remote Management of FaaS Endpoints with Globus Compute Multi-User Endpoints

1. University of Chicago
2. University of Illinois Urbana Champaign

Globus Compute implements a hybrid Function as a Service (FaaS) model in which a single cloud-hosted service is used by users to manage execution of Python functions on user-owned and -managed Globus Compute endpoints deployed on arbitrary compute resources. Here we describe a new multi-user and multi-configuration Globus Compute endpoint. This system, which can be deployed by administrators in a privileged account, enables dynamic creation of user endpoints that are forked as new processes in user space. The multi-user endpoint is designed to provide the security interfaces necessary for deployment on large, shared HPC clusters by, for example, restricting user endpoint configurations, enforcing various authorization policies, and via customizable identity-username mapping.

Files