Mailing-List: contact issues-help@mesos.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@mesos.apache.org
Date: Tue, 11 Oct 2016 19:16:20 +0000 (UTC)
From: "Greg Mann (JIRA)" <jira@apache.org>
To: issues@mesos.apache.org
Message-ID: <JIRA.13011469.1476213355000.796425.1476213380518@Atlassian.JIRA>
In-Reply-To: <JIRA.13011469.1476213355000@Atlassian.JIRA>
References: <JIRA.13011469.1476213355000@Atlassian.JIRA> <JIRA.13011469.1476213355620@arcas>
Subject: [jira] [Created] (MESOS-6365) Pass credentials to the agent for
 executor authentication and fetching
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Tue, 11 Oct 2016 19:16:27 -0000

Greg Mann created MESOS-6365:
--------------------------------

             Summary: Pass credentials to the agent for executor authentication and fetching
                 Key: MESOS-6365
                 URL: https://issues.apache.org/jira/browse/MESOS-6365
             Project: Mesos
          Issue Type: Epic
          Components: slave
            Reporter: Greg Mann


Three features are currently driving the need for a mechanism to pass secrets/credentials from the master to the agent:
* HTTP executor authentication
* Container image fetching
* Artifact fetching

We currently provide the ability to authenticate with a Docker registry, but the credentials used for this may only be set once on the agent via a command-line flag. Allowing operators to specify a Docker credential on a per-task basis requires a secret-passing mechanism.

We should design and implement a method for passing secrets that will work in all three of these scenarios.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)