Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-7014

Add implicit executor authorization to local authorizer

    XMLWordPrintableJSON

Details

    Description

      The local authorizer should be updated to perform implicit authorization of executor actions. When executors authenticate using a default executor secret, the authorizer will receive an authorization Subject which contains claims, but no principal. In this case, implicit authorization should be performed. Implicit authorization rules should enforce that an executor can perform actions on itself; i.e., subscribe as itself, send messages as itself, launch nested containers within itself.

      Attachments

        Issue Links

          Activity

            People

              greggomann Greg Mann
              greggomann Greg Mann
              Vinod Kone Vinod Kone
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: