mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Adam B (JIRA)" <>
Subject [jira] [Updated] (MESOS-7014) Add implicit executor authorization to local authorizer
Date Fri, 14 Apr 2017 08:54:42 GMT


Adam B updated MESOS-7014:
    Sprint: Mesosphere Sprint 54, Mesosphere Sprint 55  (was: Mesosphere Sprint 54)

> Add implicit executor authorization to local authorizer
> -------------------------------------------------------
>                 Key: MESOS-7014
>                 URL:
>             Project: Mesos
>          Issue Type: Task
>          Components: security
>            Reporter: Greg Mann
>            Assignee: Greg Mann
>              Labels: authorization, executor, mesosphere, security
> The local authorizer should be updated to perform implicit authorization of executor
actions. When executors authenticate using a default executor secret, the authorizer will
receive an authorization {{Subject}} which contains claims, but no principal. In this case,
implicit authorization should be performed. Implicit authorization rules should enforce that
an executor can perform actions on itself; i.e., subscribe as itself, send messages as itself,
launch nested containers within itself.

This message was sent by Atlassian JIRA

View raw message