mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Chun-Hung Hsiao <chhs...@mesosphere.io>
Subject Re: Review Request 62762: Added `LocalResourceProvider::principal()` for authentication.
Date Sat, 04 Nov 2017 00:49:26 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62762/
-----------------------------------------------------------

(Updated Nov. 4, 2017, 12:49 a.m.)


Review request for mesos, Alexander Rojas, Greg Mann, Jie Yu, and Joseph Wu.


Changes
-------

Made storage local resource provider only compiled on Linux with GRPC enabled.


Bugs: MESOS-8100
    https://issues.apache.org/jira/browse/MESOS-8100


Repository: mesos


Description (updated)
-------

The `LocalResourceProvider::principal()` function takes a
`ResourceProviderInfo` and generates a principal with the following
claim:

  {"cid_prefix", name prefix for the resource provider}

where the name prefix is a unique prefix for all containers that will be
launched by the resource provider. For example, for resource provider
with type 'org.apache.rp.local.storage' and name 'foo-bar', the claim
would be:

  {"cid_prefix", "mesos-slrp-foo%2Dbar-"}

In the future, we could add more claims for authorizing other
operations, such as authorization for Resource Provider API.


Diffs (updated)
-----

  configure.ac 067005e1be3a09e8320be120c8784f195e30ac5d 
  src/Makefile.am 1c97b1fd8151f87c4e9e6d62884b0ef7d582c312 
  src/resource_provider/local.hpp ebaa07d03ad77d516066ee2d4b60864be0611b5f 
  src/resource_provider/local.cpp ad98f333c5668ca81de6e7ed3fc8f59323b151da 
  src/resource_provider/storage/provider.hpp 6de88c2329b358fcf48bc39ddda0132170991c3c 
  src/resource_provider/storage/provider.cpp 46224997430ac0c568904d80014166a6f059907f 


Diff: https://reviews.apache.org/r/62762/diff/5/

Changes: https://reviews.apache.org/r/62762/diff/4-5/


Testing
-------

make


Thanks,

Chun-Hung Hsiao


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message