[MESOS-8909] Scrubbing value secret from HTTP responses

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: security
• Assignee: Unassigned
• Reporter: Zhitao Li
• Created: 11/May/18 23:56
• Updated: 29/Apr/19 09:27

Description

Mesos supports a value based secret. However, I believe some HTTP endpoints and v1 operator responses could leak this information.

The goal here is to make sure these endpoints do not leak the information.

We did some quick research and gather the following list in this Google doc.