[MESOS-4843] Authorize Master Operator Endpoints

• Type: Epic
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: master, security
• Labels: authorization mesosphere security
• Epic Name: Authorize Master Operator Endpoints
• Assignee: Unassigned
• Reporter: Adam B
• Shepherd: Adam B
• Created: 03/Mar/16 05:36
• Updated: 29/Apr/19 09:27
• Resolved: 31/May/16 11:12

Description

In a secure, multi-tenant cluster, the operator doesn't want to give every user access to read or modify cluster state/config, nor to perform administrative actions. As such, we need to make sure that all such endpoints are authenticated and authorized.

We've already added authorization to some operator endpoints (/teardown, /reserve, etc.), but many remain unsecured.

• /roles, /observe, /registrar, /state-summary
• /maintenance, /machine,
• /logging, /profiler, /metrics, /flags, /system/stats.json
• Leave open? /redirect, /health, /version

See http://mesos.apache.org/documentation/latest/endpoints/ for a more complete list. Some endpoints (e.g. state.json) will need a finer-grained authz.

Issue Links

• is blocked by: MESOS-4931 Authorization based filtering for endpoints.
• is blocked by: MESOS-5335 Add authorization to GET /weights.
• mentioned in: Page Loading...