Speaker
Description
Taranta is a modern web application built on the TANGO control system framework, providing interactive dashboards for hierarchical device visualization, live attribute monitoring, and remote command execution. This talk presents the work carried out at DESY Photon Science to deploy and integrate Taranta into the DESY infrastructure, enabling secure and scalable remote access to beamline control systems.
We describe the integration of OAuth2Proxy into Taranta, allowing seamless external authentication via Keycloak, and the development of a custom Door authentication plugin for Traefik that enforces beamtime-limited user access with fine-grained authorization. Dashboard sharing is implemented through DESY LDAP and Keycloak groups, enabling role-based collaboration across beamline teams.
On the deployment side, we present our Helm charts for running Taranta on the DESY Kubernetes cluster, incorporating Consul for service discovery and dynamic configuration management across the cluster. We further discuss the integration of Daiquiri, a unified web-based user interface for beamline control software, providing a consistent front-end experience on top of Sardana, Bluesky, and BLISS frameworks alongside Taranta's TANGO-based dashboards.
Together, these components form a robust, production-ready stack that brings modern, secure, and well-integrated remote access capabilities to beamline operations at DESY.
