[MESOS-2884] Allow isolators to specify required namespaces

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.23.0
• Component/s: containerization
• Labels: mesosphere
• Target Version/s: 0.23.0
• Sprint: Mesosphere Sprint 13
• Story Points: 5
• Assignee: Kapil Arya
• Reporter: Kapil Arya
• Created: 18/Jun/15 00:52
• Updated: 26/Nov/18 12:20
• Resolved: 26/Nov/18 12:20

Description

Currently, the LinuxLauncher looks into SlaveFlags to compute the namespaces that should be enabled when launching the executor. This means that a custom Isolator module doesn't have any way to specify dependency on a set of namespaces.

The proposed solution is to extend the Isolator interface to also export the namespaces dependency. This way the MesosContainerizer can directly query all loaded Isolators (inbuilt and custom modules) to compute the set of namespaces required by the executor. This set of namespaces is then passed on to the LinuxLauncher.

Issue Links

• duplicates: MESOS-2726 Add support for enabling network namespace without enabling the network isolator