[MESOS-7854] Authorize resource calls to provider manager api

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Labels: csi-post-mvp mesosphere storage
• Epic Link: Resource Provider and CSI Tech Debt
• Story Points: 5
• Assignee: Unassigned
• Reporter: Benjamin Bannier
• Created: 03/Aug/17 07:58
• Updated: 14/Jun/18 20:05
• Resolved: 26/Apr/18 09:44

Description

The resource provider manager provides a function

process::Future<process::http::Response> api(
    const process::http::Request& request,
    const Option<process::http::authentication::Principal>& principal) const;

which is exposed e.g., as an agent endpoint.

We need to add authorization to this function in order to e.g., stop rough callers.

Issue Links

• is duplicated by: MESOS-8774 Authenticate and authorize calls to the resource provider manager's API