[ 
https://issues.apache.org/jira/browse/MESOS-2259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14298493#comment-14298493
 ] 

Kapil Arya commented on MESOS-2259:
-----------------------------------

Hinding the data through encryption is certainly a possibility and is left to 
the hook writer.  However, this is a just a simple step towards a half-way 
policy of hiding it from "external" agents via web-ui.  The internal agents 
(master, slave, other hooks, etc.) are still allowed to see the labels, but 
they are not exposed to the world via the web-ui.

One can imagine another step where the labels are "hidden" from other 
third-party hooks as well.  Instead of passing the entire "Labels" field to 
each hook, it passes only those labels for which the hook-module has explicit 
permission.  I am sure there could be other solutions along the same lines.

For this ticket, we just want to hide this information from the web-ui :-)

> Mark some Task labels as "hidden"
> ---------------------------------
>
>                 Key: MESOS-2259
>                 URL: https://issues.apache.org/jira/browse/MESOS-2259
>             Project: Mesos
>          Issue Type: Bug
>            Reporter: Kapil Arya
>              Labels: mesosphere
>
> Task labels are used by label-decorator hooks to insert hook-specific labels. 
>  Some hook implementation might not want to expose their label for security 
> reasons.
> We should allow certain labels to be marked as "hidden", such that they are 
> invisible from the "web ui" to start with.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to