[MESOS-7419] Implement Secret support for environment variables

• Type: Task
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: agent
• Labels: agent environment mesosphere security tech-debt
• Epic Link: Executor Auth Improvements
• Story Points: 5
• Assignee: Kapil Arya
• Reporter: Greg Mann
• Created: 24/Apr/17 18:39
• Updated: 18/Aug/17 01:29

Description

MESOS-7009 added a new Secret-type field to the Environment protobuf message, but the agent has not yet implemented generic support for supplying environment variables as secrets. Currently, if an environment variable is specified as a secret, the variable's default-initialized value field will still be used when setting the variable, leading to an empty variable in the environment.

Issue Links

• relates to: MESOS-7299 Develop a generic solution for merging environments.
• relates to: MESOS-7418 Add support for file-based secrets
• relates to: MESOS-7543 Allow isolators to specify secret environment