mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrei Sekretenko <asekrete...@mesosphere.io>
Subject Review Request 72089: Introduced `provideObjectApprover(...)` authorizer interface.
Date Fri, 07 Feb 2020 17:31:40 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72089/
-----------------------------------------------------------

Review request for mesos, Benjamin Mahler and Greg Mann.


Bugs: MESOS-10056
    https://issues.apache.org/jira/browse/MESOS-10056


Repository: mesos


Description
-------

This patch introduces a breaking change in the Authorizer interface:
`getObjectApprover(...)` method that returnes ObjectApprover
which should not be stored for a long time is replaced with
`provideObjectApprover(...)` method that returns ObjectApprover
that must be kept valid (by authorizer implementation) throughout its
whoile lifetime.

This unblocks way to synchronous (without dispatch to another actor)
authorization in cases where principal is known to be long-lived;
examples are the scheduler API (see MESOS-10056) and v1 operator API
events (see MESOS-10057).

The local authorizer is modified accordingly.

NOTE: This patch breaks compatibility with custom authorizers which
do not implement this method!


Diffs
-----

  docs/authorization.md 698e485fca481d1398594f743141d1cd0af830be 
  include/mesos/authorizer/authorizer.hpp a86a6eeb592adfc267dcf3faef40e8da3471feaf 
  src/authorizer/local/authorizer.hpp 2516a37d2019c097dea4e6dbf75a7efbef3853f0 
  src/authorizer/local/authorizer.cpp 16c0ffa9c315e0a2b4127c2d325232733f0e4e75 
  src/common/http.hpp 5fc19fdd16138eb4c7d14fd29b1a56a53f6323a9 
  src/common/http.cpp c5b2a91958c870e272895520ba04fc5287891c3c 
  src/tests/api_tests.cpp 87550168d950f7c423c57627b0349d99b39881ca 
  src/tests/master_load_tests.cpp 6bbc1c061684e0c55edde6ab31ef51542d0be980 
  src/tests/mesos.hpp 73b18663d4dbf0ee179c298ea77b548d5de40921 
  src/tests/mesos.cpp 664c3027fd5bdfb1e81a4d9966fe93b2181479e4 


Diff: https://reviews.apache.org/r/72089/diff/1/


Testing
-------


Thanks,

Andrei Sekretenko


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message