Plan to replace Grid Community Toolkit functionality in the HTCondor Software Suite

The HTCondor Software Suite (HTCSS) is working to retire the use of the Grid Community Toolkit libraries (or GCT, which is a fork of the former Globus Toolkit). The functionality provided by the GCT is rapidly being replaced by the use of IDTOKENS, SciTokens, and plain SSL within the ecosystem. Currently, HTCSS uses these libraries for:

The Center for High Throughput Computing plans to gradually reduce use of GCT with support fully ending before 1 February 2023; at that point, only proxy delegation and ARC CE submission (through the REST API) will be supported.

NOTE This primarily impacts the submission of "pilot jobs" in grid computing setups; payload jobs that include an X509 credential that needs to be delegated (for access to data sources, for instance) is still supported as HTCondor now implements proxy delegation independently of the GCT.

Major planned milestones in this timeline include:

CHTC is interested in feedback on the above timeline and in working with HTCSS stakeholders to build a transition plan.

As a critical security library, we depend on external support for the GCT. If the external maintenance for GCT security patches ends earlier than the HTCondor support, the above timeline may need to shorten or the support policy adjusted.