Re: How to write acls for mesos

[haosdent]

May we have the Mesos master log after launch task in Marathon?

On Sun, Feb 5, 2017 at 12:02 PM, 梦开始的地方 <382607...@qq.com> wrote:

>  Hi，I'd like to write MESOS_acls  to control resources，but I don't know
> how to write。
> I use mesos + marathon
> marathon configuration：
> export MARATHON_mesos_user=user_00
> export MARATHON_mesos_authentication_principal=tjop_marathon
> export MARATHON_mesos_authentication_secret_file=$CUR_DIR/../conf/
> marathon.secret
> export MARATHON_mesos_leader_ui_url=http://mesos.webdev.com
> export MARATHON_hostname=$hostipaddr
> export MARATHON_framework_name=tjop_marathon
> export MARATHON_webui_url=http://marathon.webdev.com
>
> mesos configuration：
>
> export MESOS_acls=file://$prefix/etc/mesos/acls
> export MESOS_authenticate_agents=true
> export MESOS_authenticate_frameworks=true
> export MESOS_authorizers=local
> export MESOS_authenticate_http_frameworks=true
> export MESOS_http_framework_authenticators=basic
> export MESOS_authenticators=crammd5
> export MESOS_credentials=file://$prefix/etc/mesos/credentials
>
> acls：
> {
>   "register_frameworks": [
>     {
>       "principals": { "values": ["tjop_marathon"] },
>       "roles": { "values": ["tjop_streammonitors"] }
>     }
>   ],
>   "run_tasks": [
>     {
>       "principals": { "values": ["tjop_marathon"] },
>       "users": { "values": ["user_00","root"] }
>     }
>   ]
> }
> credentials:
> {
>   "credentials": [
>     {
>       "principal": "tjop_marathon",
>       "secret": "tjop_marathon"
>     },
> {
>       "principal": "tjop_mesos_slave",
>       "secret": "tjop_mesos_slave"
>     }
>   ]
> }
> the marathon is active framework in mesos,but whlile I create app in
> marahon ,the app keep in waiting status
>
> please help me,thanks
>



-- 
Best Regards,
Haosdent Huang