mesos-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Viswanathan Ramachandran <vish.ramachand...@gmail.com>
Subject Re: Mesos Security
Date Tue, 03 Feb 2015 20:54:39 GMT
Hi David,

Thanks for the answer.

Were you referring to Mesos 0.22 or a later release? Would there be
concurrent  adoption in popular frameworks like Marathon, or would it be
lag by some time?

Thanks
Vish

On Mon, Feb 2, 2015 at 3:04 PM, David Greenberg <dsg123456789@gmail.com>
wrote:

> This should be possible with the ssl work in the upcoming release.
>
>
> On Monday, February 2, 2015, Viswanathan Ramachandran <
> vish.ramachandran@gmail.com> wrote:
>
>> Hi,
>>
>> Although I did not get the details, I understand from brief documentation
>> that there are some authentication features present so that frameworks and
>> slaves can authenticate to master.
>>
>> However, is there any measure that prevents an unknown entity pretending
>> as the master and being able to schedule apps/processes on the slave
>> machines that may compromise the security of the system?
>>
>> Two way certificate authentication between masters, slaves and frameworks
>> along with hostname verification may attain this goal, but I am curious if
>> the latest version of mesos/marathon supports this?
>>
>> Thanks
>> Vish
>>
>

Mime
View raw message