Configuring the Cloud Server Plugin
Configuration of the Cloud Server Plugin is done using the web administrative interface of the CLC Genomics Server. Information about connections to AWS and CLC Genomics Cloud Engine are entered via plugin settings, available to configure after the plugin is installed and the CLC Genomics Server has been restarted.
Information about the hardware requirements of jobs sent to CLC Genomics Cloud Engine and how results from those jobs should be handled is configured using cloud presets. Multiple presets can be configured. Users select the preset to use when they are launching a job.
The CLC Genomics Server uses the OAuth2 Client Credentials Grant flow for authentication. This flow, suitable for server-to-server integration, ensures that the CLC Genomics Server has valid credentials that do not need to be periodically renewed. CLC Workbench users who connect to the CLC Genomics Server are granted access to the CLC Genomics Cloud Engine via the server's credentials, but jobs are run under the user's username.
Please note the following security-related information:
- By configuring the AWS settings in CLC Genomics Server, CLC Workbench users connecting to the server and using the Cloud Plugin will be able to see each other's data in AWS S3, as they will have access through the shared credentials stored in the server.
- There are no user permissions on jobs in GCE. This means that GCE users will be able to find each other's jobs, for example by using the Cloud Job Search functionality in their Workbench.
- It is possible to prevent a CLC Workbench user from being able to submit jobs to the cloud by configuring permissions for each cloud preset. (Global permissions | Cloud presets)
Information about installing server plugins can be found at https://resources.qiagenbioinformatics.com/manuals/clcserver/current/admin/index.php?manual=Server_plugins.html.
Subsections