[jira] [Updated] (MESOS-5343) Behavior of custom HTTP authenticators with disabled HTTP authentication is inconsistent between master and agent

[ https://issues.apache.org/jira/browse/MESOS-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5343: -- Priority: Minor (was: Major) > Behavior of custom HTTP authenticators with disabled HTTP authentication is > i

[jira] [Updated] (MESOS-5343) Behavior of custom HTTP authenticators with disabled HTTP authentication is inconsistent between master and agent

[ https://issues.apache.org/jira/browse/MESOS-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5343: -- Fix Version/s: 0.29.0 > Behavior of custom HTTP authenticators with disabled HTTP authentication is > inconsist

[jira] [Updated] (MESOS-5340) SSL-downgrading support may prevent new connections

[ https://issues.apache.org/jira/browse/MESOS-5340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5340: -- Labels: mesosphere security ssl (was: ssl) > SSL-downgrading support may prevent new connections >

[jira] [Updated] (MESOS-5340) SSL-downgrading support may prevent new connections

[ https://issues.apache.org/jira/browse/MESOS-5340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5340: -- Component/s: security > SSL-downgrading support may prevent new connections > --

[jira] [Commented] (MESOS-5337) Add Master Flag to enable fine-grained filtering of HTTP endpoints.

[ https://issues.apache.org/jira/browse/MESOS-5337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15274991#comment-15274991 ] Adam B commented on MESOS-5337: --- What happens when --endpoint_authorization_filtering is ena

[jira] [Commented] (MESOS-5169) Introduce new Authorizer Actions for Authorized based filtering of endpoints.

[ https://issues.apache.org/jira/browse/MESOS-5169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15273901#comment-15273901 ] Adam B commented on MESOS-5169: --- See also https://reviews.apache.org/r/46969/ > Introduce n

[jira] [Commented] (MESOS-5317) Authorize the agent's '/containers' endpoint

[ https://issues.apache.org/jira/browse/MESOS-5317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15273873#comment-15273873 ] Adam B commented on MESOS-5317: --- Should we do GET_ENDPOINT_WITH_PATH coarse-grained authz on

[jira] [Commented] (MESOS-5155) Consolidate authorization actions for quota.

[ https://issues.apache.org/jira/browse/MESOS-5155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15273864#comment-15273864 ] Adam B commented on MESOS-5155: --- [~zhitao], see also MESOS-5336 for authorizing GET /quota

[jira] [Created] (MESOS-5336) Add authorization to GET /quota

Adam B created MESOS-5336: - Summary: Add authorization to GET /quota Key: MESOS-5336 URL: https://issues.apache.org/jira/browse/MESOS-5336 Project: Mesos Issue Type: Improvement Components:

[jira] [Commented] (MESOS-5335) Add authorization to GET /weights

[ https://issues.apache.org/jira/browse/MESOS-5335?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15273855#comment-15273855 ] Adam B commented on MESOS-5335: --- cc: [~gradywang] > Add authorization to GET /weights > ---

[jira] [Created] (MESOS-5335) Add authorization to GET /weights

Adam B created MESOS-5335: - Summary: Add authorization to GET /weights Key: MESOS-5335 URL: https://issues.apache.org/jira/browse/MESOS-5335 Project: Mesos Issue Type: Improvement Component

[jira] [Updated] (MESOS-5335) Add authorization to GET /weights

[ https://issues.apache.org/jira/browse/MESOS-5335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5335: -- Description: We already authorize which http users can update weights for particular roles, but even knowing of

[jira] [Updated] (MESOS-5299) Support hierarchiy based matching of HTTP endpoint authorization requests.

[ https://issues.apache.org/jira/browse/MESOS-5299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5299: -- Priority: Minor (was: Major) > Support hierarchiy based matching of HTTP endpoint authorization requests. > ---

[jira] [Updated] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4785: -- Shepherd: Alexander Rukletsov (was: Adam B) cc: [~alexr], [~neilc] > Reorganize ACL subject/object description

[jira] [Updated] (MESOS-5273) Document "/flags" endpoint authorization as in MESOS-4785

[ https://issues.apache.org/jira/browse/MESOS-5273?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5273: -- Shepherd: Alexander Rukletsov Story Points: 2 (was: 1) cc: [~neilc] > Document "/flags" endpoint autho

[jira] [Commented] (MESOS-5273) Document "/flags" endpoint authorization as in MESOS-4785

[ https://issues.apache.org/jira/browse/MESOS-5273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15263714#comment-15263714 ] Adam B commented on MESOS-5273: --- See Joerg's patch: https://reviews.apache.org/r/46735/ > D

[jira] [Updated] (MESOS-5299) Support hierarchiy based matching of HTTP endpoint authorization requests.

[ https://issues.apache.org/jira/browse/MESOS-5299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5299: -- Labels: acl authorization mesosphere security (was: acl authorization security) > Support hierarchiy based mat

[jira] [Updated] (MESOS-5299) Support hierarchiy based matching of HTTP endpoint authorization requests.

[ https://issues.apache.org/jira/browse/MESOS-5299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5299: -- Fix Version/s: (was: 0.29.0) > Support hierarchiy based matching of HTTP endpoint authorization requests. >

[jira] [Commented] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259873#comment-15259873 ] Adam B commented on MESOS-4902: --- Reopened because none of the RB patches are marked submitte

[jira] [Commented] (MESOS-5273) Document "/flags" endpoint authorization as in MESOS-4785

[ https://issues.apache.org/jira/browse/MESOS-5273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259811#comment-15259811 ] Adam B commented on MESOS-5273: --- cc: [~js84] > Document "/flags" endpoint authorization as

[jira] [Commented] (MESOS-5168) Benchmark overhead of authorization based filtering.

[ https://issues.apache.org/jira/browse/MESOS-5168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259605#comment-15259605 ] Adam B commented on MESOS-5168: --- Although I'm glad that you wrote a benchmark framework, I w

[jira] [Commented] (MESOS-2222) Add ACLs for the maintenance HTTP endpoints.

[ https://issues.apache.org/jira/browse/MESOS-?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259603#comment-15259603 ] Adam B commented on MESOS-: --- Recommend we do coarse-grained authz using GET|POST_ENDPOIN

[jira] [Updated] (MESOS-2222) Add ACLs for the maintenance HTTP endpoints.

[ https://issues.apache.org/jira/browse/MESOS-?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-: -- Sprint: (was: Mesosphere Sprint 34) > Add ACLs for the maintenance HTTP endpoints. > -

[jira] [Updated] (MESOS-2222) Add ACLs for the maintenance HTTP endpoints.

[ https://issues.apache.org/jira/browse/MESOS-?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-: -- Assignee: (was: Benjamin Bannier) > Add ACLs for the maintenance HTTP endpoints. > -

[jira] [Updated] (MESOS-4843) Authorize Master Operator Endpoints

[ https://issues.apache.org/jira/browse/MESOS-4843?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4843: -- Labels: authorization mesosphere security (was: mesosphere security) > Authorize Master Operator Endpoints > --

[jira] [Commented] (MESOS-1739) Allow slave reconfiguration on restart

[ https://issues.apache.org/jira/browse/MESOS-1739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15257669#comment-15257669 ] Adam B commented on MESOS-1739: --- > send the event to all the frameworks which have tasks on

[jira] [Commented] (MESOS-5155) Consolidate authorization actions for quota.

[ https://issues.apache.org/jira/browse/MESOS-5155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15257410#comment-15257410 ] Adam B commented on MESOS-5155: --- Excellent point. Operators must be able to upgrade their cl

[jira] [Commented] (MESOS-5164) Add authorization to agent's /monitor/statistics endpoint

[ https://issues.apache.org/jira/browse/MESOS-5164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15256637#comment-15256637 ] Adam B commented on MESOS-5164: --- Committed one patch, still working on the other. commit 36

[jira] [Commented] (MESOS-5142) Add agent flags for HTTP authorization

[ https://issues.apache.org/jira/browse/MESOS-5142?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15256631#comment-15256631 ] Adam B commented on MESOS-5142: --- Committed the new --authorizer agent flag (first review abo

[jira] [Commented] (MESOS-4316) Support get non-default weights by /weights

[ https://issues.apache.org/jira/browse/MESOS-4316?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15256616#comment-15256616 ] Adam B commented on MESOS-4316: --- commit d014d994b4513f9dcf9d33a293e847505bfb10fb Author: Ada

[jira] [Commented] (MESOS-5273) Document "/flags" endpoint authorization as in MESOS-4785

[ https://issues.apache.org/jira/browse/MESOS-5273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15256211#comment-15256211 ] Adam B commented on MESOS-5273: --- I'd also like to see authz documentation added to the auto-

[jira] [Commented] (MESOS-1865) Redirect to the leader master when current master is not a leader

[ https://issues.apache.org/jira/browse/MESOS-1865?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15253448#comment-15253448 ] Adam B commented on MESOS-1865: --- [~vinodkone], thanks for reviewing the patches. Would you b

[jira] [Commented] (MESOS-3059) Allow http endpoint to dynamically change the slave attributes

[ https://issues.apache.org/jira/browse/MESOS-3059?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15250056#comment-15250056 ] Adam B commented on MESOS-3059: --- [~klaus1982], please see the patch from [~xds2000] and disc

[jira] [Commented] (MESOS-1865) Redirect to the leader master when current master is not a leader

[ https://issues.apache.org/jira/browse/MESOS-1865?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15240997#comment-15240997 ] Adam B commented on MESOS-1865: --- I think a redirect makes the most sense, and as Cody says,

[jira] [Commented] (MESOS-5155) Consolidate authorization actions for quota.

[ https://issues.apache.org/jira/browse/MESOS-5155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15240889#comment-15240889 ] Adam B commented on MESOS-5155: --- Thinking in CRUD terms, if we're merging create/delete into

[jira] [Commented] (MESOS-1790) Add "chown" option to CommandInfo.URI

[ https://issues.apache.org/jira/browse/MESOS-1790?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15240262#comment-15240262 ] Adam B commented on MESOS-1790: --- [~jieyu] recently brought to my attention the container sec

[jira] [Commented] (MESOS-3923) Implement AuthN handling in Master for the Scheduler endpoint

[ https://issues.apache.org/jira/browse/MESOS-3923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15238249#comment-15238249 ] Adam B commented on MESOS-3923: --- Ok, just curious how framework schedulers are expected to k

[jira] [Commented] (MESOS-3923) Implement AuthN handling in Master for the Scheduler endpoint

[ https://issues.apache.org/jira/browse/MESOS-3923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15238139#comment-15238139 ] Adam B commented on MESOS-3923: --- Is there a (brief) design doc for this? Does this use the H

[jira] [Commented] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15237597#comment-15237597 ] Adam B commented on MESOS-4785: --- On it > Reorganize ACL subject/object descriptions > -

[jira] [Updated] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4785: -- Shepherd: Adam B > Reorganize ACL subject/object descriptions > -- > >

[jira] [Updated] (MESOS-5170) Adapt json creation for authorization based endpoint filtering.

[ https://issues.apache.org/jira/browse/MESOS-5170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5170: -- Fix Version/s: 0.29.0 > Adapt json creation for authorization based endpoint filtering. > --

[jira] [Updated] (MESOS-5170) Adapt json creation for authorization based endpoint filtering.

[ https://issues.apache.org/jira/browse/MESOS-5170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5170: -- Assignee: Joerg Schad > Adapt json creation for authorization based endpoint filtering. > --

[jira] [Updated] (MESOS-5169) Introduce new Authorizer Actions for Authorized based filtering of endpoints.

[ https://issues.apache.org/jira/browse/MESOS-5169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5169: -- Assignee: Joerg Schad Sprint: Mesosphere Sprint 33 Fix Version/s: 0.29.0 Description: F

[jira] [Updated] (MESOS-5168) Benchmark overhead of authorization based filtering.

[ https://issues.apache.org/jira/browse/MESOS-5168?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5168: -- Assignee: Joerg Schad Sprint: Mesosphere Sprint 33 Fix Version/s: 0.29.0 > Benchmark overhea

[jira] [Commented] (MESOS-1739) Allow slave reconfiguration on restart

[ https://issues.apache.org/jira/browse/MESOS-1739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15235678#comment-15235678 ] Adam B commented on MESOS-1739: --- This is why we suggest that changes like this will need to

[jira] [Commented] (MESOS-5155) Consolidate authorization actions for quota.

[ https://issues.apache.org/jira/browse/MESOS-5155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15235662#comment-15235662 ] Adam B commented on MESOS-5155: --- +1 to getting rid of DESTROY_QUOTA_WITH_PRINCIPAL, but has

[jira] [Updated] (MESOS-4931) Authorization based filtering for endpoints.

[ https://issues.apache.org/jira/browse/MESOS-4931?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4931: -- Shepherd: Adam B Assignee: Joerg Schad > Authorization based filtering for endpoints. >

[jira] [Created] (MESOS-5164) Add authentication to agent's /monitor/statistics endpoint

Adam B created MESOS-5164: - Summary: Add authentication to agent's /monitor/statistics endpoint Key: MESOS-5164 URL: https://issues.apache.org/jira/browse/MESOS-5164 Project: Mesos Issue Type: Task

[jira] [Updated] (MESOS-5164) Add authorization to agent's /monitor/statistics endpoint

[ https://issues.apache.org/jira/browse/MESOS-5164?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5164: -- Summary: Add authorization to agent's /monitor/statistics endpoint (was: Add authentication to agent's /monitor

[jira] [Commented] (MESOS-4772) TaskInfo/ExecutorInfo should include fine-grained ownership/namespacing

[ https://issues.apache.org/jira/browse/MESOS-4772?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15234599#comment-15234599 ] Adam B commented on MESOS-4772: --- After even more discussion, the most flexible solution seem

[jira] [Updated] (MESOS-2043) framework auth fail with timeout error and never get authenticated

[ https://issues.apache.org/jira/browse/MESOS-2043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-2043: -- Sprint: (was: Mesosphere Sprint 33) > framework auth fail with timeout error and never get authenticated > ---

[jira] [Updated] (MESOS-2043) framework auth fail with timeout error and never get authenticated

[ https://issues.apache.org/jira/browse/MESOS-2043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-2043: -- Sprint: Mesosphere Sprint 33 > framework auth fail with timeout error and never get authenticated >

[jira] [Updated] (MESOS-5152) Add authentication to agent's /monitor/statistics endpoint

[ https://issues.apache.org/jira/browse/MESOS-5152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5152: -- Assignee: Benjamin Bannier > Add authentication to agent's /monitor/statistics endpoint > --

[jira] [Commented] (MESOS-4316) Support get non-default weights by /weights

[ https://issues.apache.org/jira/browse/MESOS-4316?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15234055#comment-15234055 ] Adam B commented on MESOS-4316: --- I committed these first two patches, but we still need at l

[jira] [Updated] (MESOS-5152) Add authentication to agent's /monitor/statistics endpoint

[ https://issues.apache.org/jira/browse/MESOS-5152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5152: -- Fix Version/s: 0.29.0 > Add authentication to agent's /monitor/statistics endpoint > ---

[jira] [Updated] (MESOS-5153) Sandboxes contents should be protected from unauthorized users

[ https://issues.apache.org/jira/browse/MESOS-5153?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5153: -- Fix Version/s: 0.29.0 > Sandboxes contents should be protected from unauthorized users > ---

[jira] [Updated] (MESOS-4951) Enable actors to pass an authentication realm to libprocess

[ https://issues.apache.org/jira/browse/MESOS-4951?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4951: -- Fix Version/s: 0.29.0 > Enable actors to pass an authentication realm to libprocess > --

[jira] [Updated] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4902: -- Fix Version/s: 0.29.0 > Add authentication to libprocess endpoints > --

[jira] [Updated] (MESOS-5142) Add agent flags for HTTP authorization

[ https://issues.apache.org/jira/browse/MESOS-5142?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5142: -- Fix Version/s: 0.29.0 > Add agent flags for HTTP authorization > -- > >

[jira] [Updated] (MESOS-4932) Propose Design for Authorization based filtering for endpoints.

[ https://issues.apache.org/jira/browse/MESOS-4932?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4932: -- Fix Version/s: 0.29.0 > Propose Design for Authorization based filtering for endpoints. > --

[jira] [Updated] (MESOS-4931) Authorization based filtering for endpoints.

[ https://issues.apache.org/jira/browse/MESOS-4931?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4931: -- Fix Version/s: 0.29.0 > Authorization based filtering for endpoints. > -

[jira] [Updated] (MESOS-5153) Sandboxes contents should be protected from unauthorized users

[ https://issues.apache.org/jira/browse/MESOS-5153?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5153: -- Sprint: Mesosphere Sprint 33 > Sandboxes contents should be protected from unauthorized users >

[jira] [Updated] (MESOS-5152) Add authentication to agent's /monitor/statistics endpoint

[ https://issues.apache.org/jira/browse/MESOS-5152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5152: -- Sprint: Mesosphere Sprint 33 > Add authentication to agent's /monitor/statistics endpoint >

[jira] [Updated] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4785: -- Sprint: Mesosphere Sprint 33 > Reorganize ACL subject/object descriptions >

[jira] [Updated] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4902: -- Sprint: Mesosphere Sprint 33 > Add authentication to libprocess endpoints >

[jira] [Updated] (MESOS-4951) Enable actors to pass an authentication realm to libprocess

[ https://issues.apache.org/jira/browse/MESOS-4951?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4951: -- Sprint: Mesosphere Sprint 33 > Enable actors to pass an authentication realm to libprocess > ---

[jira] [Commented] (MESOS-3553) LIBPROCESS_IP not passed when executor's environment is specified

[ https://issues.apache.org/jira/browse/MESOS-3553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15233997#comment-15233997 ] Adam B commented on MESOS-3553: --- [~jieyu], I believe this came up with a customer that does

[jira] [Updated] (MESOS-5153) Sandboxes contents should be protected from unauthorized users

[ https://issues.apache.org/jira/browse/MESOS-5153?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5153: -- Story Points: 8 > Sandboxes contents should be protected from unauthorized users > -

[jira] [Updated] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4902: -- Assignee: Greg Mann > Add authentication to libprocess endpoints > -- >

[jira] [Commented] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15231950#comment-15231950 ] Adam B commented on MESOS-4902: --- I split out /monitor/statistics into MESOS-5152, so this ti

[jira] [Updated] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4902: -- Description: In addition to the endpoints addressed by MESOS-4850 and MESOS-5152, the following endpoints would

[jira] [Updated] (MESOS-4902) Add authentication to libprocess endpoints

[ https://issues.apache.org/jira/browse/MESOS-4902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4902: -- Summary: Add authentication to libprocess endpoints (was: Add authentication to remaining agent endpoints) > A

[jira] [Created] (MESOS-5152) Add authentication to agent's /monitor/statistics endpoint

Adam B created MESOS-5152: - Summary: Add authentication to agent's /monitor/statistics endpoint Key: MESOS-5152 URL: https://issues.apache.org/jira/browse/MESOS-5152 Project: Mesos Issue Type: Task

[jira] [Updated] (MESOS-4951) Enable actors to pass an authentication realm to libprocess

[ https://issues.apache.org/jira/browse/MESOS-4951?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4951: -- Assignee: Greg Mann > Enable actors to pass an authentication realm to libprocess >

[jira] [Updated] (MESOS-5142) Add agent flags for HTTP authorization

[ https://issues.apache.org/jira/browse/MESOS-5142?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5142: -- Sprint: Mesosphere Sprint 32 > Add agent flags for HTTP authorization > -- >

[jira] [Created] (MESOS-5150) Authorize Agent HTTP Endpoints

Adam B created MESOS-5150: - Summary: Authorize Agent HTTP Endpoints Key: MESOS-5150 URL: https://issues.apache.org/jira/browse/MESOS-5150 Project: Mesos Issue Type: Epic Components: securit

[jira] [Commented] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15231825#comment-15231825 ] Adam B commented on MESOS-4785: --- [~arojas], can you look into this so we can close out this

[jira] [Updated] (MESOS-4785) Reorganize ACL subject/object descriptions

[ https://issues.apache.org/jira/browse/MESOS-4785?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4785: -- Fix Version/s: 0.29.0 > Reorganize ACL subject/object descriptions > --

[jira] [Updated] (MESOS-5146) MasterAllocatorTest/1.RebalancedForUpdatedWeights is flaky

[ https://issues.apache.org/jira/browse/MESOS-5146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5146: -- Fix Version/s: 0.29.0 > MasterAllocatorTest/1.RebalancedForUpdatedWeights is flaky > ---

[jira] [Commented] (MESOS-5027) Enable authenticated login in the webui

[ https://issues.apache.org/jira/browse/MESOS-5027?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15231816#comment-15231816 ] Adam B commented on MESOS-5027: --- Start a design doc and find a shepherd. I don't want you to

[jira] [Commented] (MESOS-5027) Enable authenticated login in the webui

[ https://issues.apache.org/jira/browse/MESOS-5027?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15231791#comment-15231791 ] Adam B commented on MESOS-5027: --- No immediate plans. If we were to do it right, we'd want so

[jira] [Updated] (MESOS-5027) Enable authenticated login in the webui

[ https://issues.apache.org/jira/browse/MESOS-5027?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5027: -- Fix Version/s: (was: 0.29.0) > Enable authenticated login in the webui > ---

[jira] [Commented] (MESOS-5146) MasterAllocatorTest/1.RebalancedForUpdatedWeights is flaky

[ https://issues.apache.org/jira/browse/MESOS-5146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15231389#comment-15231389 ] Adam B commented on MESOS-5146: --- cc: [~gradywang] > MasterAllocatorTest/1.RebalancedForUpda

[jira] [Comment Edited] (MESOS-4797) Add a couple of registrar tests for /weights endpoint

[ https://issues.apache.org/jira/browse/MESOS-4797?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15227427#comment-15227427 ] Adam B edited comment on MESOS-4797 at 4/6/16 12:21 AM: Yes, the i

[jira] [Comment Edited] (MESOS-4797) Add a couple of registrar tests for /weights endpoint

[ https://issues.apache.org/jira/browse/MESOS-4797?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15227427#comment-15227427 ] Adam B edited comment on MESOS-4797 at 4/6/16 12:21 AM: Yes, the i

[jira] [Commented] (MESOS-4797) Add a couple of registrar tests for /weights endpoint

[ https://issues.apache.org/jira/browse/MESOS-4797?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15227427#comment-15227427 ] Adam B commented on MESOS-4797: --- Yes, the idea is that `--weights` is now used to bootstrap

[jira] [Commented] (MESOS-4881) Rescind all outstanding offers after changing some weights.

[ https://issues.apache.org/jira/browse/MESOS-4881?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15218845#comment-15218845 ] Adam B commented on MESOS-4881: --- Committed the main RR, test RR still pending minor feedback

[jira] [Updated] (MESOS-2222) Add ACLs for the maintenance HTTP endpoints.

[ https://issues.apache.org/jira/browse/MESOS-?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-: -- Labels: authorization maintenance mesosphere security (was: authorization maintenance mesosphere) > Add ACLs f

[jira] [Updated] (MESOS-2317) Remove deprecated checkpoint=false code

[ https://issues.apache.org/jira/browse/MESOS-2317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-2317: -- Sprint: Mesosphere Q1 Sprint 6 - 4/3, Mesosphere Q1 Sprint 7 - 4/17, Mesosphere Q2 Sprint 8 - 5/1, Mesosphere Q1

[jira] [Updated] (MESOS-4881) Rescind all outstanding offers after changing some weights.

[ https://issues.apache.org/jira/browse/MESOS-4881?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4881: -- Fix Version/s: 0.29.0 > Rescind all outstanding offers after changing some weights. > --

[jira] [Updated] (MESOS-4316) Support get non-default weights by /weights

[ https://issues.apache.org/jira/browse/MESOS-4316?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4316: -- Fix Version/s: 0.29.0 > Support get non-default weights by /weights > --

[jira] [Commented] (MESOS-1739) Allow slave reconfiguration on restart

[ https://issues.apache.org/jira/browse/MESOS-1739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15214911#comment-15214911 ] Adam B commented on MESOS-1739: --- Probably also want to rescind all outstanding offers from t

[jira] [Commented] (MESOS-1739) Allow slave reconfiguration on restart

[ https://issues.apache.org/jira/browse/MESOS-1739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15214659#comment-15214659 ] Adam B commented on MESOS-1739: --- But even changing attributes to a superset (or changing exi

[jira] [Commented] (MESOS-5005) Make `ReservationInfo.principal` and `Persistence.principal` equivalent

[ https://issues.apache.org/jira/browse/MESOS-5005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15214597#comment-15214597 ] Adam B commented on MESOS-5005: --- [~greggomann], I can shepherd if you have time to work on i

[jira] [Updated] (MESOS-5005) Make `ReservationInfo.principal` and `Persistence.principal` equivalent

[ https://issues.apache.org/jira/browse/MESOS-5005?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5005: -- Shepherd: Adam B Sprint: Mesosphere Sprint 32 > Make `ReservationInfo.principal` and `Persistence.principa

[jira] [Updated] (MESOS-4772) TaskInfo/ExecutorInfo should include fine-grained ownership/namespacing

[ https://issues.apache.org/jira/browse/MESOS-4772?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-4772: -- Sprint: Mesosphere Sprint 30 (was: Mesosphere Sprint 30, Mesosphere Sprint 31) > TaskInfo/ExecutorInfo should

[jira] [Updated] (MESOS-5031) Authorization Action enum does not support upgrades.

[ https://issues.apache.org/jira/browse/MESOS-5031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5031: -- Shepherd: Adam B Affects Version/s: 0.29.0 > Authorization Action enum does not support upgrades. >

[jira] [Updated] (MESOS-5031) Authorization Action enum does not support upgrades.

[ https://issues.apache.org/jira/browse/MESOS-5031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5031: -- Story Points: 2 > Authorization Action enum does not support upgrades. > ---

[jira] [Commented] (MESOS-4951) Enable actors to pass an authentication realm to libprocess

[ https://issues.apache.org/jira/browse/MESOS-4951?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15214031#comment-15214031 ] Adam B commented on MESOS-4951: --- [~greggomann], is this still necessary after the latest dis

[jira] [Updated] (MESOS-5031) Authorization Action enum does not support upgrades.

[ https://issues.apache.org/jira/browse/MESOS-5031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Adam B updated MESOS-5031: -- Sprint: Mesosphere Sprint 32 > Authorization Action enum does not support upgrades. > --

<    4   5   6   7   8   9   10   11   12   13   >