mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Yan Xu (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (MESOS-8306) Restrict which agents can statically reserve resources for which roles
Date Wed, 06 Dec 2017 19:04:00 GMT

     [ https://issues.apache.org/jira/browse/MESOS-8306?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Yan Xu reassigned MESOS-8306:
-----------------------------

    Assignee: Yan Xu

> Restrict which agents can statically reserve resources for which roles
> ----------------------------------------------------------------------
>
>                 Key: MESOS-8306
>                 URL: https://issues.apache.org/jira/browse/MESOS-8306
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Yan Xu
>            Assignee: Yan Xu
>
> In some use cases part of a Mesos cluster could be reserved for certain frameworks/roles.
A common approach is to use static reservation so the resources of an agent are only offered
to frameworks of the designated roles. However without proper authorization any (compromised)
agent can register with these special roles and accept workload from these frameworks.
> We can enhance the {{RegisterAgent}} ACL to express: agent principal {{foo}} is allowed
to register with static reservation roles {{bar, baz}}; no other principals are allowed to
register with static reservation roles {{bar, baz}}.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message