[
https://issues.apache.org/jira/browse/MESOS-4844?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15178111#comment-15178111
]
Joerg Schad commented on MESOS-4844:
------------------------------------
We first omitted the following endpoint.
version, redirect, health: do not need authn
v1/scheduler: currently does not support authn
> Add authentication to master endpoints
> --------------------------------------
>
> Key: MESOS-4844
> URL: https://issues.apache.org/jira/browse/MESOS-4844
> Project: Mesos
> Issue Type: Task
> Components: master, security
> Reporter: Adam B
> Assignee: Joerg Schad
> Labels: mesosphere, security
>
> Before we can add authorization around operator endpoints, we need to add
> authentication support, so that unauthenticated requests are denied when
> --authenticate_http is enabled, and so that the principal is passed into
> `route()`.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)