mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrei Sekretenko <asekrete...@mesosphere.io>
Subject Re: Review Request 72098: Converted ACCEPT to synchronous authorization.
Date Thu, 27 Feb 2020 18:41:54 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72098/
-----------------------------------------------------------

(Updated Feb. 27, 2020, 6:41 p.m.)


Review request for mesos, Benjamin Mahler and Greg Mann.


Bugs: MESOS-10023, MESOS-10056 and MESOS-10083
    https://issues.apache.org/jira/browse/MESOS-10023
    https://issues.apache.org/jira/browse/MESOS-10056
    https://issues.apache.org/jira/browse/MESOS-10083


Repository: mesos


Description
-------

This patch converts ACCEPT call to synchronous authorization
(see MESOS-10056), thus fixing race between ACCEPT and REVIVE
(MESOS-10023) and removing potential for other similar races.

It also moves authorization of scheduler API operations after their
validation (thus fixing MESOS-10083) and effectively gets rid of the
concept of a "task pending authorization".

Tests are converted from mocking `Authorizer::authorized(...)`
to mocking `Authorizer::provideObjectApprover(...)` as necessary.


Diffs (updated)
-----

  src/master/authorization.cpp 77719eb079b2a19e0841573f639437aa3bb0fe54 
  src/master/framework.cpp a9318a9d33122610960e01a184b568a8ea18b514 
  src/master/master.hpp d774d77a50597770c6f2d4f5dffcbd79b5f29da3 
  src/master/master.cpp 36a81ccd24d0156049382fee0d085193cc2867e6 
  src/tests/master_authorization_tests.cpp bc8155b97c9078eaa151cc4a3e5bc6ea0d7ac9fa 
  src/tests/master_tests.cpp 9688f5f0266f7c7142b54d488f2c13b427e542c0 
  src/tests/reconciliation_tests.cpp cdff370c5871ded0cb10b8b782bd669e092eb741 


Diff: https://reviews.apache.org/r/72098/diff/5/

Changes: https://reviews.apache.org/r/72098/diff/4-5/


Testing
-------


Thanks,

Andrei Sekretenko


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message