Benjamin Bannier created MESOS-8774:
---------------------------------------

             Summary: Authenticate and authorize calls to the resource provider 
manager's API 
                 Key: MESOS-8774
                 URL: https://issues.apache.org/jira/browse/MESOS-8774
             Project: Mesos
          Issue Type: Task
          Components: agent
            Reporter: Benjamin Bannier


The resource provider manager is exposed via an agent endpoint against which 
resource providers subscribe or perform other actions. We should authenticate 
and authorize any interactions there.

Since currently local resource providers run on agents who manages their 
lifetime it seems natural to extend the framework used for executor 
authentication to resource providers as well. The agent would then generate a 
secret token whenever a new resource provider is started and inject it into the 
resource providers it launches. Resource providers in turn would use this token 
when interacting with the manager API.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to