http://git-wip-us.apache.org/repos/asf/mesos-site/blob/db4db5af/content/documentation/latest/configuration/agent/index.html ---------------------------------------------------------------------- diff --git a/content/documentation/latest/configuration/agent/index.html b/content/documentation/latest/configuration/agent/index.html index 45d6d7b..deaf98f 100644 --- a/content/documentation/latest/configuration/agent/index.html +++ b/content/documentation/latest/configuration/agent/index.html @@ -767,6 +767,15 @@ is used by the <code>disk/du</code> and <code>disk/xfs</code> isolators. (defaul </tr> <tr> <td> + --[no-]enforce_container_ports + </td> + <td> +Whether to enable network port enforcement for containers. This flag +is used by the <code>network/ports</code> isolator. (default: false) + </td> +</tr> +<tr> + <td> --executor_environment_variables=VALUE </td> <td>
http://git-wip-us.apache.org/repos/asf/mesos-site/blob/db4db5af/content/documentation/latest/isolators/network-ports/index.html ---------------------------------------------------------------------- diff --git a/content/documentation/latest/isolators/network-ports/index.html b/content/documentation/latest/isolators/network-ports/index.html index b311611..6af1aaa 100644 --- a/content/documentation/latest/isolators/network-ports/index.html +++ b/content/documentation/latest/isolators/network-ports/index.html @@ -145,6 +145,12 @@ to use the Linux launcher (i.e. the agent has the <code>--launcher=linux</code> flag), because it uses Linux cgroups to track the processes belonging to a Mesos task.</p> +<p>The <code>--enforce_container_ports</code> flag, specifies whether the network +ports isolator should terminate tasks that listen on ports they have +not been assigned. If enforcement is disabled, the isolator will log +violations but will not terminate tasks. By default, network port +enforcement is disabled.</p> + <p>The <code>--container_ports_watch_interval</code> flag specifies the interval between task port reconciliations.</p>
