REVIEW-15: SDIACT-220 Incremental GenesisII fixes and enhancements - Design/Security Review

General design and security risk review for an incremental Genesis II release to be operated and supported by UVa for XSEDE uses as SaaS.

Concern raised by JP regarding confirmation of plan to continue using NCSA resources khan and kirk: resolved by contacting NCSA and determining that those machines actually would not be available and adjusting design to plan to use VM resources at IU instead.
Concern raised by Victor and echoed by JP about optionality of testing by SD&I and Ops, at least for GFFS client: resolved by adding a client-side test plan as deliverable for SD&I and Ops.
Concern raised by JP about specifics of target hosts for migration: resolved by adding host details for new primary container hosts.

https://software.xsede.org/svn/sdi/activities/sdiact-220/trunk/Plans/sdiact220-design.docx
https://software.xsede.org/svn/sdi/activities/sdiact-220/trunk/Plans/GFFS_Security_Practices_and_Designs.docx

https://software.xsede.org/svn/sdi/activities/sdiact-220/trunk/Plans/sdiact220-design.docx
https://software.xsede.org/svn/sdi/activities/sdiact-220/trunk/Plans/GFFS_Security_Practices_and_Designs.docx

1. Are the services operated in a secure way and are the procedures appropriate to deal with planned and unplanned outages and unplanned incidents?
2. Are XSEDE credentials processed and used in a secure fashion as they flow from clients to UVa operated WS-STS services and back to XSEDE security services?