[MESOS-9893] `volume/secret` isolator should cleanup the stored secret from runtime directory when the container is destroyed

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.3, 1.7.3, 1.9.0, 1.8.2
• Component/s: containerization
• Labels: containerization
• Sprint: Containerization: RI-16 51, Containerization: RI-17 52
• Story Points: 3
• Assignee: Qian Zhang
• Reporter: Qian Zhang
• Shepherd: Gilbert Song
• Created: 16/Jul/19 08:05
• Updated: 15/Aug/19 20:10
• Resolved: 15/Aug/19 18:51

Description

`volume/secret` isolator writes secret into a file (its filename is a UUID) under `/run/mesos/.secret` when launching container, but it does not clean up that file when the container is destroyed. Over time, the `/run/mesos/.secret` directory may take up all disk space on the partition.