[MESOS-4847] Agent HTTP Authentication

• Type: Epic
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: agent, security
• Labels: authentication mesosphere security
• Epic Name: Agent HTTP Authentication
• Assignee: Greg Mann
• Reporter: Adam B
• Created: 03/Mar/16 09:10
• Updated: 29/Apr/19 09:27
• Resolved: 29/Apr/16 08:15

Description

Now that the master has set a standard for http authentication, the agents should join the fun. Since a user must access the agent node to get to sandbox data, it and the rest of the endpoints should be configurable to require authentication, to prevent rogue users from viewing/modifying agent settings/data.
This will involve adding agent flags like `--authenticate_http --http_authenticators="basic"`
and even the equivalent of `--credentials` (maybe renamed)

Issue Links

• blocks: MESOS-2297 Add authentication support for HTTP API