[ 
https://issues.apache.org/jira/browse/MESOS-5757?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15364822#comment-15364822
 ] 

Vinod Kone commented on MESOS-5757:
-----------------------------------

commit d6a209a79cbc4ccf14d2397d079b21230ecd6494
Author: Joerg Schad <[email protected]>
Date:   Wed Jul 6 13:26:16 2016 -0500

    Added test to check orphaned tasks are filtered.
    
    Review: https://reviews.apache.org/r/49700/

commit a626dfeed26026c7645df38f60db4ccd6119c00e
Author: Joerg Schad <[email protected]>
Date:   Wed Jul 6 13:26:08 2016 -0500

    Changed name of authorization test.
    
    The name should reflect the name of the
    submessage in ReRegisterSlave message.
    
    Review: https://reviews.apache.org/r/49699/

commit 1f2555abc4596fcb93fe60da3d676f73722940a2
Author: Joerg Schad <[email protected]>
Date:   Wed Jul 6 13:26:02 2016 -0500

    Renamed incorrect variable name in authorization tests.
    
    Review: https://reviews.apache.org/r/49698/

commit 9113bad786d1adfe7c618b07264868a74535b1d9
Author: Joerg Schad <[email protected]>
Date:   Wed Jul 6 13:25:56 2016 -0500

    Removed CHECK from orphan_task filtering.
    
    This CHECK can be problematic when upgrading from old agents to
    a new master.
    
    Review: https://reviews.apache.org/r/49697/



> Authorize orphaned tasks
> ------------------------
>
>                 Key: MESOS-5757
>                 URL: https://issues.apache.org/jira/browse/MESOS-5757
>             Project: Mesos
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.0.0
>            Reporter: Vinod Kone
>            Assignee: Joerg Schad
>            Priority: Critical
>              Labels: mesosphere, security
>             Fix For: 1.0.0
>
>
> Currently, orphaned tasks are not filtered (i.e., using authorization) when a 
> request is made to /state endpoint. This is inconsistent (and unexpected) 
> with how we filter un-orphaned tasks. 
> This is tricky because master and hence the authorizer do not have 
> FrameworkInfos for these orphaned tasks, until after the corresponding 
> frameworks re-register.
> One option is for the agent to include FrameworkInfos of all its tasks and 
> executors in its re-registration message.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to