Re: mesos marathon roles

2016-09-07 Thread vincent gromakowski
Tx If I understand I cannot use the weights to dynamically affect resources among 2 different roles ? I thought I could let everything unreserved (role *) and the DRF would use the weights to assign those unreserved resources to roles "foo" and "bar" ? 2016-09-08 6:19 GMT+02:00 Greg Mann : > Hi V

Re: multi tenancy Mesos 1.0 question

2016-09-07 Thread tommy xiao
I have same question on it. 2016-09-08 2:48 GMT+08:00 Haripriya Ayyalasomayajula : > Hi all, > > Quoting from the release notes: > More importantly, we have added foundations for multi-tenancy by adding > fine-grained > authorization >

Re: missing documentation: view_frameworks, view_tasks etc in mesos 1.0

2016-09-07 Thread Haripriya Ayyalasomayajula
Thanks Greg. Will try them out tomorrow and post how it goes here. On Wed, Sep 7, 2016 at 8:59 PM, Greg Mann wrote: > Haripriya, > In order for users to be authorized correctly for those actions, HTTP > authentication should be enabled on both the master and agent using the > '--authenticate_htt

Re: mesos marathon roles

2016-09-07 Thread Greg Mann
Hi Vincent, Can you confirm it's because I didn't set any static reservation ? > Yes, that's correct. So how could I check the resource allocation with multiple marathon > instances and roles, and configured weights between these roles ? Is > Marathon supposed to reserve resources with the role

Re: missing documentation: view_frameworks, view_tasks etc in mesos 1.0

2016-09-07 Thread Greg Mann
Haripriya, In order for users to be authorized correctly for those actions, HTTP authentication should be enabled on both the master and agent using the '--authenticate_http_readonly' and '--authenticate_http_readwrite' flags. Authentication is the only way for users of the Mesos web UI to identify

Re: missing documentation: view_frameworks, view_tasks etc in mesos 1.0

2016-09-07 Thread Haripriya Ayyalasomayajula
Hi Greg, Yes, this configuration works for me now. However, my next question is related to multi-tenancy. If I turn off the settings for view_tasks from ANY and restrict to a specific user, from the UI, how can I as user A see only my tasks? I'm using the local authorizer - default that comes wit

mesos marathon roles

2016-09-07 Thread vincent gromakowski
Hi all, I am trying to setup a single machine install with roles and weights to check if I can manage resource allocation. Here is my config: Mesos slave default role : * No ACL on master Marathon flag --mesos_role set to "foo" No cgroup (for single machine) When launching marathon, it's well reg

Re: missing documentation: view_frameworks, view_tasks etc in mesos 1.0

2016-09-07 Thread Greg Mann
Hi Haripriya, I just ran a quick test using your ACLs (I added a permissive ACL for "run_tasks" as well), and I was able to view everything in the web UI. I did this test with the current HEAD of Mesos master, however, so it's possible that something has changed since 1.0. One thing that can be ve

Re: Resource Isolation in Mesos

2016-09-07 Thread Greg Mann
Hi Srikant, Without using cgroups, it won't be possible to enforce isolation of cpu/memory on a Linux agent. Could you elaborate a bit on why you aren't able to use cgroups currently? Have you tested the existing Mesos cgroup isolators in your system? Cheers, Greg On Tue, Sep 6, 2016 at 9:24 PM,

multi tenancy Mesos 1.0 question

2016-09-07 Thread Haripriya Ayyalasomayajula
Hi all, Quoting from the release notes: More importantly, we have added foundations for multi-tenancy by adding fine-grained authorization controls. For example, it is now possible to set up ACLs so that

Re: missing documentation: view_frameworks, view_tasks etc in mesos 1.0

2016-09-07 Thread Haripriya Ayyalasomayajula
Hi, Sorry, I should have been clear. I was referring to examples related to how to use them. there are examples for view_tasks but not for others. On Wed, Aug 31, 2016 at 7:44 PM, haosdent wrote: > Hi, @haripriya I saw we already have "view_executors" in the document ( > https://github.com/apac