[MESOS-9638] Mesos masters do not authenticate with agents.

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: agent, master
• Labels: authentication foundations mesosphere security
• Assignee: Unassigned
• Reporter: Alex R
• Created: 07/Mar/19 17:05
• Updated: 15/May/19 16:57

Description

Currently Mesos agents do not verify that the messages they receive are coming from the leading master and haven't been tampered with. In untrusted environments this can be a source of security issues.

There are a couple of ways to fix this:
1) implement Master authentication on the transport or application level for each agent<->master connection (this might not be sufficient to distinguish a master from the leading master)
2) implement Master authentication on the transport level (for the connection to be encrypted) upon agent registration and pass a secret to the master for all subsequent, possibly separate and unencrypted, connections (the secret can be leaked on an unencrypted connection).

Issue Links

• relates to: MESOS-9774 Design client side SSL certificate verification in Libprocess.