<aside> ℹ️

Lead Developer: Dr Alex Lee, SeRP @ Swansea University

</aside>

Product alignment

This product is part of the DIRECTOR suite inside TREvolution, funded by DARE UK, but it builds upon a vast amount of work done by SeRP at Swansea University to bring many element together

Source code / git

https://github.com/SwanseaUniversityMedical/director-wfs

Purpose

The 5 Safes TES product (5S-TES), formally known as DARE UK TRE-FX is based on bringing the 5 safes principal [ https://www.gov.uk/data-ethics-guidance/the-five-safes-framework] to the execution of GA4GH TES workflows.

Task Execution Service (TES)

5S-TES is not responsible for running the actual workflow, its responsibility is on information governance and 5 safes framework, it uses a TES Execution engine.

The Product is tested and deployed with either TESK or FUNNEL

https://github.com/elixir-cloud-aai/TESK

https://github.com/ohsu-comp-bio/funnel

DIRECTOR is focused on Kuberneties as deployment platform of choice and as such, TESK is more technologically aligned. The architecture of TESK also provides more guarantees of workflow separation.

DIRECTOR Workflow Server is a full stack deployment of Kuberneties and TESK in order to provide a TES Execution Service for 5S-TES / TRE-FX. Although given it is fully compliant GA4GH TES then it could be used by any 3rd party software or research infrastructure.

What mades DIRECTOR WFS different is that it is an opinionated deployment of a set of technology that is aligned with the wider project but also provides protection against rough workloads by implementing

  1. Launch control - all containers MUJST run as none root
  2. Runtime security - real time monitoring of workloads against defined policies, detection and mediation against container escape.
  3. Strong use of Kuberneties Network Policies to separate deployed components.
  4. Monitoring Solution