[
https://issues.apache.org/jira/browse/MESOS-6999?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Greg Mann updated MESOS-6999:
-----------------------------
Description:
The agent must generate and pass executor secrets to all executors using the V1
API. For MVP, the agent will have this behavior by default when compiled with
SSL support. To accomplish this, the agent must:
* load the default {{SecretGenerator}} module
* calling the secret generator when launching an executor
* passing the generated secret into the executor's environment
was:
Note: this is not needed for MVP.
A new agent flag {{--generate_executor_secrets}} is needed to support executor
authentication. It should enable the generation of default executor secrets,
which will entail:
* loading the default {{SecretGenerator}} module
* calling the secret generator when launching an executor
* passing the generated secret into the executor's environment
> Add agent support for generating and passing executor secrets
> -------------------------------------------------------------
>
> Key: MESOS-6999
> URL: https://issues.apache.org/jira/browse/MESOS-6999
> Project: Mesos
> Issue Type: Task
> Components: agent, security
> Reporter: Greg Mann
> Labels: agent, executor, flags, security
>
> The agent must generate and pass executor secrets to all executors using the
> V1 API. For MVP, the agent will have this behavior by default when compiled
> with SSL support. To accomplish this, the agent must:
> * load the default {{SecretGenerator}} module
> * calling the secret generator when launching an executor
> * passing the generated secret into the executor's environment
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
