mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marco Massenzio (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (MESOS-3062) Add authorization for dynamic reservation
Date Mon, 17 Aug 2015 23:31:53 GMT

     [ https://issues.apache.org/jira/browse/MESOS-3062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Marco Massenzio updated MESOS-3062:
-----------------------------------
    Sprint: Mesosphere Sprint 16, Mesosphere Sprint 17  (was: Mesosphere Sprint 16)

> Add authorization for dynamic reservation
> -----------------------------------------
>
>                 Key: MESOS-3062
>                 URL: https://issues.apache.org/jira/browse/MESOS-3062
>             Project: Mesos
>          Issue Type: Task
>          Components: master
>            Reporter: Michael Park
>            Assignee: Michael Park
>              Labels: mesosphere
>
> Dynamic reservations should be authorized with the {{principal}} of the reserving entity
(framework or master). The idea is to introduce {{Reserve}} and {{Unreserve}} into the ACL.
> {code}
>   message Reserve {
>     // Subjects.
>     required Entity principals = 1;
>     // Objects.  MVP: Only possible values = ANY, NONE
>     required Entity resources = 1;
>   }
>   message Unreserve {
>     // Subjects.
>     required Entity principals = 1;
>     // Objects.
>     required Entity reserver_principals = 2;
>   }
> {code}
> When a framework/operator reserves resources, "reserve" ACLs are checked to see if the
framework ({{FrameworkInfo.principal}}) or the operator ({{Credential.user}}) is authorized
to reserve the specified resources. If not authorized, the reserve operation is rejected.
> When a framework/operator unreserves resources, "unreserve" ACLs are checked to see if
the framework ({{FrameworkInfo.principal}}) or the operator ({{Credential.user}}) is authorized
to unreserve the resources reserved by a framework or operator ({{Resource.ReservationInfo.principal}}).
If not authorized, the unreserve operation is rejected.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message