SAS Cloud Analytic Services: Concepts

• CAS Controller
• Single-node CAS Server
• CAS Backup Controller
• CAS Workers
• Sizing CAS Server
• CAS Roles
  • Superuser Role
  • Data Role
  • Action Role
• Multiple CAS Servers
• Personal CAS Server
• Session Processes
• Paths List
• Caslib Management Privileges
• Standard Configuration Files
• CAS Resource Management
  • Overview
  • Policy Details
  • How Policies Work
• Configuration Properties: cas-shared-default Service

CAS Controller

Controller is one of three roles that can be assigned to a pod for SAS Cloud Analytic Services (CAS): controller, backup controller, and worker. For both server architectures — MPP and SMP — one pod is assigned the controller role. When the server starts, the controller process is started. This process is sometimes referred to as the server controller. The controller accepts connections from clients.

Single-node CAS Server

The single-node architecture uses symmetric multiprocessing (SMP). The functionality for a single-node server is nearly identical to MPP, except that there is no cluster communication. In this architecture, the server acts as a controller. Before a client connects, the server listens on a port for connections.

After a client connects, a session is created and the session connects back to the client. (This is identical to the method that is performed by a CAS server that uses MPP). For more information, see Single-Machine Server in SAS Cloud Analytic Services: Fundamentals.

CAS Backup Controller

A SAS Cloud Analytic Services (CAS) backup controller (sometimes referred to as secondary controller) provides fault tolerance for the CAS controller. A backup controller is used only in a distributed server architecture. Deploying a backup controller is optional. CAS supports one backup controller only.

When CAS starts, the backup controller process is also started. In the event that the controller experiences a disruption (such as a loss of network connectivity, disk full scenarios, and so on) the backup controller enables the CAS server to continue running. When the backup controller takes control of client communication, the transfer is seamless. For more information, see Architecture in SAS Cloud Analytic Services: Fundamentals.

CAS Workers

When a server is running in massively parallel processing (MPP) mode, in addition to a controller, the server also has multiple pods that are assigned the worker role.

The controller parses out work to each worker pod. Each worker pod sends the results of its computations back to the controller. For more information, see Architecture in SAS Cloud Analytic Services: Fundamentals.

Sizing CAS Server

It is recommended that the SAS administrator or an administrator with elevated Kubernetes permissions should have a general idea about sizing CAS. The process to create preliminary estimates on sizing might include the following:

• Gather baseline deployment data for each offering by recording the CPU and RAM allocations and number of pods in a deployed environment.
• Define appropriate CAS, Compute, and storage sizing recommendations. The key points to determine the sizing of CAS, Compute, and data infrastructure are:
  • SMP vs MPP deployment
  • Data size (number of data sets or tables, amount of data used)
  • Number of users
  • CAS server needs dedicated nodes with guaranteed QoS for each controller and worker.

For more information, see the following:

• Resource Guidelines in System Requirements for SAS Viya
• Storage Requirements in System Requirements for SAS Viya

CAS Roles

Superuser Role

Superusers are exempt from all CAS authorization requirements. The Superusers are subject to requirements for the Select permission, except for loadTable actions that meet the following criteria:

• The loadTable action does not cross-load data (load to a destination caslib that is different than the source caslib).
• The loadTable action does not cross-promote data (promote to a different caslib than the source caslib).
• The loadTable action does not specify a WHERE clause on the load.
• The loadTable action does not specify a VARS= list on the load.

Superusers can perform all tasks. The following tasks can be performed only by the Superusers:

• Use the installActionSet and refreshLicense built-in actions. See Builtins Action Set: Details.
• See and manage the paths list. See Paths List.
• Manage role membership. See Manage CAS Role Memberships in SAS Environment Manager: User’s Guide.

In SAS Environment Manager, the Superuser role is never initially or automatically assumed. If you are a member of a CAS server’s Superuser role, you can become a Superuser by explicitly assuming the role for that server. For example, you might assume the role to troubleshoot and resolve an access issue. After the issue is resolved, you relinquish the role.

The account that starts a CAS server is automatically assigned to that server’s Superuser role. Make sure that each CAS server has at least one other designated Superuser.

Initial membership of the Superuser role is as follows:

• SAS Administrators
• Process owner for the server
• Backup Administrator (sas.deploymentBackup)
• Report Distribution Service administrator account (sas.reportDistribution)
• Report Images Service administrator account (sas.reportImages)
• Scheduler Service administrator account (sas.scheduler)
• Report Alerts Service administrator account (sas.reportAlerts)
• CAS Formats Service administrator (sas.casFormats)
• VSD Service administrator account (sas.svi-vsd-service)
• Analytics Gateway Services Group (analyticsGatewayProviders)
• Relationship Service (sas.relationships)
• Data Selection Service (sas.dataSelection)
• Data Quality Service (sas.dataQuality)

Data Role

Provides a subset of the abilities of the Superuser role. Data administrators are exempt from all CAS authorization requirements for data objects. The exception is that the Data administrators are subject to requirements for the Select permission, except for loadTable actions that meet the following criteria:

• The loadTable action does not cross-load data (load to a destination caslib that is different than the source caslib).
• The loadTable action does not cross-promote data (promote to a different caslib than the source caslib).
• The loadTable action does not specify a WHERE clause on the load.
• The loadTable action does not specify a VARS= list on the load.

Only Data administrators and Superusers can perform the following tasks:

• See and manage the paths list. See Paths List.
• Manage caslib privileges. See Caslib Management Privileges.

You cannot be a member of both the Superuser role and the Data role in the same session. Not all interfaces support the Data role and there are no initial members.

Action Role

Provides a subset of the abilities of the Superuser role. Action administrators are exempt from CAS authorization requirements for action sets and action objects.

Do not use this role. Not all interfaces support the Action role and there are no initial members.

Multiple CAS Servers

It is now possible to have multiple instances of CAS deployments within a single instance of SAS Viya. For more information, see Add a CAS Server .

What constitutes a CAS server depends on the type of CAS environment that you are running:

• In a symmetric multiprocessing (SMP) environment, a CAS server consists of a controller and runs on a single node.

  Multiple Single-Node CAS Servers (SMP Mode)

  
• In a massively parallel processing (MPP) environment, a distributed CAS server consists of one controller, one or more workers, and one backup controller (optional) each running in separate pods. For more information, see Distributed Server in SAS Cloud Analytic Services: Fundamentals.

Personal CAS Server

In release 2020.1.4 and later, a personal CAS server, which is an ephemeral CAS server, is created on demand for a single user. For development purposes in applications such as SAS Studio, you might need to allow data scientists the ability to work with a CAS server that is local to their SAS session. The lifetime of this server is the same as the lifetime of the SAS session with which it is associated. This personal CAS server is just like a regular (shared) CAS server, except that it is simpler, relatively short-lived, and is for only one person.

Key Points:

• A personal CAS server cannot be accessed or shared by more than one user.
• Personal CAS servers run under their own Compute server session and therefore are independent sandboxed instances.
• A personal CAS server runs under the same account that runs the Compute server.

To set up a personal CAS server, see the README file at $deploy/sas-bases/overlays/sas-programming-environment/personal-cas-server/README.md (for Markdown format) or at $deploy/sas-bases/docs/configuring_sas_compute_server_to_use_a_personal_cas_server.htm (for HTML format).

To start a session on your personal CAS server, see Start a Session on a Personal CAS Server in SAS Cloud Analytic Services: User’s Guide.

To switch between a personal CAS server and the shared CAS server, see Switch between a Personal CAS Server and the Shared CAS Server in SAS Cloud Analytic Services: User’s Guide.

In releases 2021.1.3 and later, SASWORK caslib is automatically created when a personal CAS server is created. The SASWORK caslib points to the WORK directory in your SAS session. You can use SASWORK to transfer data between personal CAS server sessions and shared CAS server sessions. To transfer data from the shared CAS server to the personal CAS server, see SAVERESULT Statement and UPLOAD Statement in SAS Cloud Analytic Services: CASL Reference and save Action in SAS Viya: System Programming Guide.

Session Processes

When a user connects to the server with a client, the server starts a session process for the user. Afterward, the client communicates with the session process.

A server running in symmetric multiprocessing mode (SMP mode) consists of a controller only, and the server starts a session controller process only. It is the session controller process that operates on rows of data.

Even though the sessions have their own operating system processes, the server processes must continue to run. When the server process terminates, the session processes also terminate.

Paths List

From a CAS server session, all access to file system paths (directories that are local to the host and to shared file systems) is through caslibs. By default, all users who lack elevated privileges are denied the ability to create caslibs outside of the paths that are specified in the default allowlist.

To determine the paths that are available to non-administrators when they create a caslib, use one of the following approaches:

• Modify the predefined allowlist of paths that should be available. By default, this list denies access to all users who lack elevated privileges.
• Create a denylist of paths that should not be available.

  If you choose to create a denylist, the new list replaces the predefined allowlist.

You can view and modify the lists for CAS user access using:

• SAS Environment Manager.

  For more information, see Manage Path Lists (Allowlists and Denylists) in SAS Environment Manager: User’s Guide.

• The programming interfaces.

  For more information, see Access Control Action Set in SAS Viya: System Programming Guide.

Here are key points:

• Paths must be absolute.
• Paths must be unique.

  CAS automatically removes any duplicate paths.

• You can only use an allowlist or a denylist, not one of each.
• If a denylist path is changed to a symbolic link, then the denylist should be updated using the fully resolved path.
• All subdirectories of each specified path are affected.
• Paths list constraints do not affect access to existing caslibs.
• Paths list constraints do not apply to users who assume the Superuser role or the Data Admin role.
• Only users who assume the Superuser role for a server can see and manage that server’s paths list.

Caslib Management Privileges

Caslib Management Privileges

Task	Who Can Perform the Task1
Add global caslibs.	Superusers and Data administrators. Users who have global caslib management privileges.
Add session caslibs.	Superusers and Data administrators. Users who have session caslib management privileges.
Delete global caslibs.	Superusers and Data administrators. Users who have global caslib management privileges can delete any global caslib for which they have the ReadInfo and ManageAccess permissions.
Delete session caslibs.	Superusers and Data administrators. Users who have session caslib management privileges can delete any session caslib for which they have the ReadInfo and ManageAccess permissions.
Adjust caslib management privileges.	Superusers and Data administrators.
1 Global caslib management privileges correspond to the ManageAccess permission on the _GLOBAL caslib. Session caslib management privileges correspond to the ManageAccess permission on the _SESSION caslib.

See Also

• Adjust Caslib Management Privileges using SAS Environment Manager

Standard Configuration Files

The configuration home directory includes several files with standard names. The server automatically processes these files when the standard names are used.

The configuration directory is an emptyDir volume mounted inside the container in the /cas/config location. The contents of files in /cas/config are either copied or generated when the sas-cas-server container is initialized. A SAS administrator cannot modify any files in /cas/config because the files are transient to that specific instance of the sas-cas-server container while it is running.

The following table describes the purpose and the use for each of the standard files.

Server Configuration Files

Standard Filename	Description
casconfig.lua	This file contains configuration settings with reasonable defaults for every CAS server instance and is generated when the sas-cas-server container is built.
casconfig_deployment.lua	This file contains CAS configuration settings that are created with reasonable defaults and is generated when the sas-cas-server container is built.
conf.d/	This directory can contain additional lua configuration files.
node.lua	This file contains host-specific configuration settings and cannot be modified.
perms.xml	This file contains the initial permission settings. This file is not used after the first time that the server is started and the permstore is populated.
cas.settings1	This file contains configuration settings and environment variables with reasonable defaults for every CAS server instance and is generated when the sas-cas-server container is built.
cas_container.settings	These files contain CASSET_ prefixed options that are specified for each CAS Deployment custom resource overlay.
casconfig_container.lua	These files contain CASENV_, CASSET_, and CASCFG_ prefixed options that are specified for each CAS Deployment custom resource overlay.
1 There is a global version of cas.settings that resides in /opt/sas/viya/home/SASFoundation. CAS processes the global version of cas.settings before processing the configuration-specific version of cas.settings.

When the server starts, the configuration files that are described in the preceding table are processed. After the configuration is complete, the server runs start-up scripts.

The following table describes the standard names for the start-up files in the configuration home directory. The start-up scripts run before the server accepts any client connections. This is also referred to as session-zero processing.

Session zero runs under the CAS service account. Session zero already assumes the superuser role when the startup scripts are run. Make sure not to drop the role. Because session zero assumes the superuser role, you should be aware of the restrictions for data access for administrators. For more information, see Superuser Role.

Server Start-up Files (Session 0 Processing)

Standard Filename	Description
casstartup.lua	This file contains the actions to run as the CAS server starts, such as some addFmtLib actions and the setServOpt action, that are built into the container. CAS processes casstartup.lua before any of the other start-up files that reside in the start.d/ directory.
start.d/	This directory contains lua start-up files that should not be modified. The files in this directory are processed after the casstartup.lua file. IMPORTANT CAS processes only files with a .lua file extension as start-up files.

The SAS administrator can set the configuration variables and environment variables that can be modified by editing the CAS configuration instances in the SAS Environment Manager. See Edit Configuration Instances.

CAS Resource Management

Overview

You can implement resource management specifically through policies that you create with the SAS Viya command line interface. CAS resource management is achieved on the CAS server, with a policy or server option that applies to a specific server. If you have additional CAS servers on which you want to manage resources, then you must create a unique policy or server option definition for each. No steps need to be performed on the client side.

Policy Details

Here are some key details about CAS resource management policies:

• You must have CAS Superuser privileges to create and manage resource management policies.
• Supported on both single-node (SMP) and distributed (MPP) CAS servers.
• Policies are specific to a CAS server.
• Policy limits apply per machine for distributed CAS servers.
• Policies are managed through the SAS Viya command line interface and are turned off by default.
  TipWith the CAS command line interface, you can create a policy template that can serve as a starting point for creating your own CAS resource management policies. For more information, see Create Policies from JSON Templates in SAS Viya: Using the Command-Line Interface.
• CAS stores policies as key-value pairs in the SAS Configuration Server (Consul).
• The SAS administrator can query the Consul to know the current settings and to monitor the policies.
• All the Consul settings are persisted across a maintenance update.

How Policies Work

Administrators create policies using the SAS Viya command line interface, which stores the policies as key-value pairs in the SAS Configuration Server (Consul).

There are two types of policies:

• global caslibs (globalCaslibs)

  One policy per CAS server that is used to place space quotas on global caslibs.

• priority-level (CAS-server-name-priority-n)

  A maximum of five policies per CAS server that is used to place space quotas on table data.

If policies are defined, a CAS server reads its policy information directly from the configuration server. CAS provides one policy for global caslibs and up to five priority level policies to which sites can assign resources. The administrator can assign users to these priority-level policies based on their identity group memberships, or they can explicitly assign priority-level policies to individual users.

CAS has built-in functionality to recognize user group names that start with the name of the CAS server as a group related to CAS resource management. When a user authenticates to create a new session, CAS always scans the user’s identity groups searching for resource management user group names. If CAS finds that the user belongs to a resource management user group—a group whose name starts with the CAS server name—then CAS attempts to match the group name with the list of resource management policies.

Relying on this behavior, the administrator can create corresponding custom groups using identical names in SAS Environment Manager and add the appropriate user names to these groups.

If a user is a member of multiple resource management groups, then CAS assigns the lowest priority number. If the user is not a member of a resource management group, then CAS searches for an explicit assignment for the user under the policy definition priorityAssignments section. If the user is not a member of a resource management group, and the user has not been assigned any priority level, then the user has no limits.

Configuration Properties: cas-shared-default Service

contents

Contents of the specified configuration instance. The options that you specify are not validated for correctness. For more information, see Edit Configuration Instances.

name

The configuration instance name that is unique to the server. Do not modify this value unless SAS Technical Support instructs you to change it.