Hi,

Although I did not get the details, I understand from brief documentation
that there are some authentication features present so that frameworks and
slaves can authenticate to master.

However, is there any measure that prevents an unknown entity pretending as
the master and being able to schedule apps/processes on the slave machines
that may compromise the security of the system?

Two way certificate authentication between masters, slaves and frameworks
along with hostname verification may attain this goal, but I am curious if
the latest version of mesos/marathon supports this?

Thanks
Vish

Reply via email to