How to write acls for mesos

[梦开始的地方 <38...@qq.com>]

Hi，I'd like to write MESOS_acls  to control resources，but I don't know how to write。
I use mesos + marathon
marathon configuration：
export MARATHON_mesos_user=user_00
export MARATHON_mesos_authentication_principal=tjop_marathon
export MARATHON_mesos_authentication_secret_file=$CUR_DIR/../conf/marathon.secret
export MARATHON_mesos_leader_ui_url=http://mesos.webdev.com
export MARATHON_hostname=$hostipaddr
export MARATHON_framework_name=tjop_marathon
export MARATHON_webui_url=http://marathon.webdev.com



mesos configuration：


export MESOS_acls=file://$prefix/etc/mesos/acls
export MESOS_authenticate_agents=true
export MESOS_authenticate_frameworks=true
export MESOS_authorizers=local
export MESOS_authenticate_http_frameworks=true
export MESOS_http_framework_authenticators=basic
export MESOS_authenticators=crammd5
export MESOS_credentials=file://$prefix/etc/mesos/credentials



acls：
{
  "register_frameworks": [
    {
      "principals": { "values": ["tjop_marathon"] },
      "roles": { "values": ["tjop_streammonitors"] }
    }
  ],
  "run_tasks": [
    {
      "principals": { "values": ["tjop_marathon"] },
      "users": { "values": ["user_00","root"] }
    }
  ]
}

credentials:
{
  "credentials": [
    {
      "principal": "tjop_marathon",
      "secret": "tjop_marathon"
    },
{
      "principal": "tjop_mesos_slave",
      "secret": "tjop_mesos_slave"
    }
  ]
}

the marathon is active framework in mesos,but whlile I create app in marahon ,the app keep in waiting status


please help me,thanks

Re: How to write acls for mesos

[haosdent <ha...@gmail.com>]

May we have the Mesos master log after launch task in Marathon?

On Sun, Feb 5, 2017 at 12:02 PM, 梦开始的地方 <38...@qq.com> wrote:

>  Hi，I'd like to write MESOS_acls  to control resources，but I don't know
> how to write。
> I use mesos + marathon
> marathon configuration：
> export MARATHON_mesos_user=user_00
> export MARATHON_mesos_authentication_principal=tjop_marathon
> export MARATHON_mesos_authentication_secret_file=$CUR_DIR/../conf/
> marathon.secret
> export MARATHON_mesos_leader_ui_url=http://mesos.webdev.com
> export MARATHON_hostname=$hostipaddr
> export MARATHON_framework_name=tjop_marathon
> export MARATHON_webui_url=http://marathon.webdev.com
>
> mesos configuration：
>
> export MESOS_acls=file://$prefix/etc/mesos/acls
> export MESOS_authenticate_agents=true
> export MESOS_authenticate_frameworks=true
> export MESOS_authorizers=local
> export MESOS_authenticate_http_frameworks=true
> export MESOS_http_framework_authenticators=basic
> export MESOS_authenticators=crammd5
> export MESOS_credentials=file://$prefix/etc/mesos/credentials
>
> acls：
> {
>   "register_frameworks": [
>     {
>       "principals": { "values": ["tjop_marathon"] },
>       "roles": { "values": ["tjop_streammonitors"] }
>     }
>   ],
>   "run_tasks": [
>     {
>       "principals": { "values": ["tjop_marathon"] },
>       "users": { "values": ["user_00","root"] }
>     }
>   ]
> }
> credentials:
> {
>   "credentials": [
>     {
>       "principal": "tjop_marathon",
>       "secret": "tjop_marathon"
>     },
> {
>       "principal": "tjop_mesos_slave",
>       "secret": "tjop_mesos_slave"
>     }
>   ]
> }
> the marathon is active framework in mesos,but whlile I create app in
> marahon ,the app keep in waiting status
>
> please help me,thanks
>



-- 
Best Regards,
Haosdent Huang