You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mesos.apache.org by ti...@apache.org on 2016/10/18 18:52:17 UTC
[1/2] mesos git commit: Updated CHANGELOG in preparation for 1.1.0.
Repository: mesos
Updated Branches:
refs/heads/master cb74f7aff -> 6de2ab4ef
Updated CHANGELOG in preparation for 1.1.0.
Review: https://reviews.apache.org/r/52985/
Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/baf9adde
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/baf9adde
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/baf9adde
Branch: refs/heads/master
Commit: baf9adde459caf00e35f16aeb791b2d1ac57515d
Parents: cb74f7a
Author: Till Toenshoff <to...@me.com>
Authored: Tue Oct 18 17:28:23 2016 +0200
Committer: Till Toenshoff <to...@me.com>
Committed: Tue Oct 18 20:48:14 2016 +0200
----------------------------------------------------------------------
CHANGELOG | 276 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
1 file changed, 274 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/mesos/blob/baf9adde/CHANGELOG
----------------------------------------------------------------------
diff --git a/CHANGELOG b/CHANGELOG
index b40f9c8..0d92452 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,5 @@
-Release Notes - Mesos - Version 1.1.0 (WIP)
--------------------------------------------
+Release Notes - Mesos - Version 1.1.0
+-------------------------------------
This release contains the following new features:
* [MESOS-2449] - **Experimental** support for launching a group of tasks
@@ -89,6 +89,278 @@ Additional API Changes:
KILL_NESTED_CONTAINER and WAIT_NESTED_CONTAINER) have been added to the
v1 Agent API to manage nested containers within an executor container.
+All Issues:
+
+** Bug
+ * [MESOS-1653] - HealthCheckTest.GracePeriod is flaky.
+ * [MESOS-2346] - Docker tasks exiting normally, but returning TASK_FAILED.
+ * [MESOS-3471] - Disable perf test when perf version is not support.
+ * [MESOS-3760] - Remove fragile sleep() from ProcessManager::settle().
+ * [MESOS-3959] - Executor page of mesos ui does not show slave hostname.
+ * [MESOS-4070] - numify() handles negative numbers inconsistently.
+ * [MESOS-4638] - versioning preprocessor macros.
+ * [MESOS-4668] - Agent's /state endpoint does not include full reservation information.
+ * [MESOS-4948] - Move maintenance tests to use the new scheduler library interface.
+ * [MESOS-5276] - HTTPCommandExecutor should terminate after it receives an ACK from the agent.
+ * [MESOS-5290] - WebUI shows the active task is launched 46 years ago.
+ * [MESOS-5320] - SSL related error messages can be misguiding or incomplete.
+ * [MESOS-5448] - Persistent volume deletion on the agent should survive slave restart.
+ * [MESOS-5481] - PerfFilter disable Registrar_BENCHMARK test cases incorrectly.
+ * [MESOS-5613] - mesos-local fails to start if MESOS_WORK_DIR isn't set.
+ * [MESOS-5701] - Add benchmark for sorter performance.
+ * [MESOS-5752] - ROOT_GarbageCollectorUndeletableFilesTest.BusyMountPoint is flaky.
+ * [MESOS-5759] - ProcessRemoteLinkTest.RemoteUseStaleLink and RemoteStaleLinkRelink are flaky.
+ * [MESOS-5812] - MasterAPITest.Subscribe is flaky.
+ * [MESOS-5846] - AgentAPITest.GetState is flaky.
+ * [MESOS-5852] - CMake build needs to generate protobufs before building libmesos.
+ * [MESOS-5860] - MasterAPITest.GetTasks is flaky.
+ * [MESOS-5864] - Document MESOS_SANDBOX executor env variable.
+ * [MESOS-5867] - Operator ReadFile API read file bugs.
+ * [MESOS-5869] - Disable resources validation for `+=` and `-=`.
+ * [MESOS-5875] - Scalar resource output operator doesn't print full significant digits.
+ * [MESOS-5878] - Strict/RegistrarTest.UpdateQuota/0 is flaky.
+ * [MESOS-5888] - SlaveAuthorizerTest/ViewFlags is flaky.
+ * [MESOS-5891] - /help endpoint does not set Content-Type to HTML.
+ * [MESOS-5907] - ExamplesTest.DiskFullFramework fails on Arch.
+ * [MESOS-5909] - Stout "OsTest.User" test can fail on some systems.
+ * [MESOS-5917] - All actors should have a distinguishable ID.
+ * [MESOS-5919] - Improve performance for `Resources.contains` and `Resources.filter`.
+ * [MESOS-5921] - `validate` is a bit heavy to check negative scalar resource.
+ * [MESOS-5922] - mesos-agent --help exit status is 1.
+ * [MESOS-5928] - Agent's '--version' flag doesn't work.
+ * [MESOS-5930] - Orphan tasks can show up as running after they have finished.
+ * [MESOS-5942] - Windows implementation of `os::rmdir` is not compliant with POSIX version.
+ * [MESOS-5958] - Reviewbot failing due to python files not being cleaned up after distclean.
+ * [MESOS-5972] - SharedResourcesTest failing.
+ * [MESOS-5979] - elfio-3.1.patch is actually not applied.
+ * [MESOS-5981] - task failed in windows Server 2012 client, test-framwork example.
+ * [MESOS-5985] - Fix broken link in `networking.md`.
+ * [MESOS-5996] - Windows mesos-containerizer crashes.
+ * [MESOS-6000] - Overlayfs backend cannot support the image with numerous layers.
+ * [MESOS-6005] - Support docker registry running non-https on localhost:<non-80-port>.
+ * [MESOS-6013] - Use readdir instead of readdir_r.
+ * [MESOS-6026] - Tasks mistakenly marked as FAILED due to race b/w \ufeff\u2060sendExecutorTerminatedStatusUpdate()\ufeff\u2060 and \ufeff\u2060_statusUpdate()\ufeff\u2060.
+ * [MESOS-6031] - Collect throttle related metrics for DockerContainerizer.
+ * [MESOS-6041] - Stream ID mismatch should print out expected and received stream ID.
+ * [MESOS-6049] - XFS disk isolator doesn't handle old containers correctly.
+ * [MESOS-6052] - Unable to launch containers on CNI networks on CoreOS.
+ * [MESOS-6057] - docker isolator does not overwrite Dockerfile ENV.
+ * [MESOS-6059] - Allow clean up unknown container during the clean up phase of the container.
+ * [MESOS-6069] - Misspelled TASK_KILLED in mesos slave.
+ * [MESOS-6074] - Master check failure if the metrics endpoint is polled soon after it starts.
+ * [MESOS-6085] - Agent's /state endpoint does not include total resources.
+ * [MESOS-6087] - Add master tests for TaskGroup.
+ * [MESOS-6100] - Make fails compiling 1.0.1.
+ * [MESOS-6104] - Potential FD double close in libevent's implementation of `sendfile`.
+ * [MESOS-6110] - Deprecate using health checks without setting the type.
+ * [MESOS-6118] - Agent would crash with docker container tasks due to host mount table read.
+ * [MESOS-6122] - Mesos slave throws systemd errors even when passed a flag to disable systemd.
+ * [MESOS-6131] - Improved performance for resource flatten.
+ * [MESOS-6141] - Some tests do not properly set 'flags.launcher' with the correct value.
+ * [MESOS-6144] - Validate that TaskGroup executor and tasks do not use DOCKER ContainerInfo.
+ * [MESOS-6145] - Isolator namespaces/pid is leaking mounts.
+ * [MESOS-6152] - Resource leak in libevent_ssl_socket.cpp.
+ * [MESOS-6153] - Resource leak in slave.cpp.
+ * [MESOS-6154] - Clean up queued tasks if a task group is killed before launch.
+ * [MESOS-6157] - ContainerInfo is not validated.
+ * [MESOS-6159] - Remove stout's Set type.
+ * [MESOS-6167] - CgroupsIsolatorTest.ROOT_CGROUPS_RevocableCpu is flaky.
+ * [MESOS-6170] - Health check grace period covers failures happening after first success.
+ * [MESOS-6173] - Authentication in v2 protobuf should not be `required`.
+ * [MESOS-6176] - CpuIsolatorTest.ROOT_SystemCpuUsage is flaky.
+ * [MESOS-6181] - The logic for BadACLNoPrincipal and BadACLDropCreateAndDestroy is not correct.
+ * [MESOS-6207] - Python bindings fail to build with custom SVN installation path.
+ * [MESOS-6208] - Containers that use the Mesos containerizer but don't want to provision a container image fail to validate.
+ * [MESOS-6210] - Master redirect with suffix gets in redirect loop.
+ * [MESOS-6216] - LibeventSSLSocketImpl::create is not safe to call concurrently with os::getenv.
+ * [MESOS-6217] - PAGE_SIZE was not declared in PPC64LE.
+ * [MESOS-6226] - Master crashes while transitioning tasks to 'TASK_UNREACHABLE'.
+ * [MESOS-6233] - Master CHECK fails during recovery while relinking to other masters.
+ * [MESOS-6234] - Potential socket leak during Zookeeper network changes.
+ * [MESOS-6245] - Driver based schedulers performing explicit acknowledgements cannot acknowledge updates from HTTP based executors.
+ * [MESOS-6246] - Libprocess links will not generate an ExitedEvent if the socket creation fails.
+ * [MESOS-6248] - mesos-slave cannot start , Assertion `isError()' failed.
+ * [MESOS-6257] - Resources not recovered after rescinding an offer on DESTROY on shared volumes.
+ * [MESOS-6259] - CNI isolator should not `CHECK` for `resolv.conf` under `rootContainerDir`.
+ * [MESOS-6260] - Composing containerizer needs to properly handle nested container launch.
+ * [MESOS-6262] - Default executor should kill all other tasks in a task group if any task exits with a non-zero exit status.
+ * [MESOS-6263] - Mesos containerizer should figure out the correct sandbox directory for nested launch.
+ * [MESOS-6269] - CNI isolator doesn't activate loopback interface.
+ * [MESOS-6270] - Agent crashes when trying to recover pods.
+ * [MESOS-6274] - Agent should not allow HTTP executors to re-subscribe before containerizer recovery is done.
+ * [MESOS-6283] - Fix the Web UI allowing access to the task sandbox for nested containers.
+ * [MESOS-6289] - Pass the 'user' into nested container launch.
+ * [MESOS-6290] - Support nested containers for logger in Mesos Containerizer.
+ * [MESOS-6295] - Excessive logging on agent when oversubscription modules are attached.
+ * [MESOS-6300] - A destroyed nested container is not reflected in the parent container's children map.
+ * [MESOS-6301] - Recursive destroy in MesosContainerizer is problematic.
+ * [MESOS-6302] - Agent recovery can fail after nested containers are launched.
+ * [MESOS-6308] - CHECK failure in DRF sorter.
+ * [MESOS-6317] - Race in master/allocator when updating oversubscribed resources of an agent.
+ * [MESOS-6319] - ContentType/AgentAPITest.NestedContainerLaunch/1 is flaky.
+ * [MESOS-6321] - CHECK failure in HierarchicalAllocatorTest.NoDoubleAccounting.
+ * [MESOS-6322] - Agent fails to kill empty parent container.
+ * [MESOS-6323] - 'mesos-containerizer launch' should inherit agent environment variables.
+ * [MESOS-6324] - CNI should not use `ifconfig` in executors `pre_exec_command`.
+ * [MESOS-6363] - Default executor should not crash with a failed assertion if it notices a disconnection from the agent for non checkpointed frameworks.
+ * [MESOS-6370] - The executor library does not invoke the shutdown callback upon recovery timeout.
+ * [MESOS-6386] - "Reached unreachable statement" in LinuxCapabilitiesIsolatorTest.
+ * [MESOS-6391] - Command task's sandbox should not be owned by root if it uses container image.
+ * [MESOS-6393] - Deprecated SSL_ environment variables are non functional already.
+
+** Documentation
+ * [MESOS-5221] - Add Documentation for Nvidia GPU support.
+ * [MESOS-5808] - Elasticsearch misspelled on homepage.
+ * [MESOS-6028] - mesos-execute has a typo in volume help.
+ * [MESOS-6103] - Mesos version is not uptodate in getting-started page.
+ * [MESOS-6343] - Documentation Error: Default Executor does not implicitly construct resources.
+
+** Epic
+ * [MESOS-2449] - Support group of tasks (Pod) constructs and API in Mesos.
+ * [MESOS-3421] - Support sharing of resources across task instances.
+ * [MESOS-4312] - Porting Mesos on Power (ppc64le).
+ * [MESOS-4791] - Operator API v1.
+ * [MESOS-5344] - Partition-aware Mesos frameworks.
+
+** Improvement
+ * [MESOS-2533] - Support HTTP checks in Mesos.
+ * [MESOS-3567] - Support TCP checks in Mesos.
+ * [MESOS-4049] - Allow user to control behavior of partitioned agents/tasks.
+ * [MESOS-4155] - Speed up ExamplesTest.*.
+ * [MESOS-4172] - GarbageCollectorIntegrationTest.Restart is slow.
+ * [MESOS-4324] - Allow access to shared persistent volumes as read only or read write by tasks.
+ * [MESOS-4325] - Offer shareable resources to frameworks only if it is opted in.
+ * [MESOS-4431] - Support sharing of persistent volumes via shared resources.
+ * [MESOS-4663] - Speed up ExamplesTest.PersistentVolumeFramework.
+ * [MESOS-4694] - DRFAllocator takes very long to allocate resources with a large number of frameworks.
+ * [MESOS-4892] - Support arithmetic operations for shared resources with consumer counts.
+ * [MESOS-5038] - Added a any mechanism for futures.
+ * [MESOS-5070] - Introduce more flexible subprocess interface for child options.
+ * [MESOS-5425] - Consider using IntervalSet for Port range resource math.
+ * [MESOS-5464] - The max number of completed executors for a mesos slave should be configurable.
+ * [MESOS-5565] - Add logging when Offer::Operation::Launch message has no tasks.
+ * [MESOS-5716] - Document docker private registry with authentication support in Unified Containerizer.
+ * [MESOS-5732] - MasterAPITest.UnreserveResources is slow.
+ * [MESOS-5756] - Cmake build system needs to regenerate protobufs when they are updated.
+ * [MESOS-5790] - Ensure all examples in Scheduler HTTP API docs are valid JSON.
+ * [MESOS-5822] - Add a build script for the Windows CI.
+ * [MESOS-5870] - Fix the large preview logo in Slack.
+ * [MESOS-5901] - Make the command executor unversioned.
+ * [MESOS-5936] - Operator SUBSCRIBE api should provdide more task metadata than just state changes.
+ * [MESOS-5944] - Remove `O_SYNC` from StatusUpdateManager logs.
+ * [MESOS-5949] - Allow frameworks to learn the time when an agent became unreachable.
+ * [MESOS-5951] - Remove "strict registry" code.
+ * [MESOS-5954] - Docker executor does not use HealthChecker library.
+ * [MESOS-5955] - The "mesos-health-check" binary is not used anymore.
+ * [MESOS-5961] - HTTP and TCP health checks should support docker executor and bridged mode.
+ * [MESOS-5965] - Implement garbage collection for unreachable agent lists in registry.
+ * [MESOS-5978] - Improve run time for arithmetic operators for Resources.
+ * [MESOS-5983] - Number of libprocess worker threads is not configurable for log-rotation module.
+ * [MESOS-6006] - Abstract mesos-style.py to allow future linters to be added more easily.
+ * [MESOS-6008] - Add the infrastructure for a new python-based CLI.
+ * [MESOS-6025] - Validate health check protobuf in the master.
+ * [MESOS-6037] - Offer::Operation.type should be optional.
+ * [MESOS-6039] - Update elfio to version 3.2.
+ * [MESOS-6050] - Add an agent flag for 'runtime_dir'.
+ * [MESOS-6051] - Add functions to the 'Launcher' abstraction to aid in checkpointing the exit status of containers.
+ * [MESOS-6060] - Add MOUNT or PATH disk type in logging resources.
+ * [MESOS-6063] - Track recovered and prepared subsystems for a container.
+ * [MESOS-6065] - Support provisioning image volumes in an isolator.
+ * [MESOS-6075] - Avoid libprocess functions in `mesos-containerizer launch`.
+ * [MESOS-6080] - Expose metrics in scheduler library.
+ * [MESOS-6088] - Update launch helper to checkpoint exit status of launched process.
+ * [MESOS-6090] - Change master to always update registry before in-memory state.
+ * [MESOS-6096] - Update mesos-execute to support launching task groups.
+ * [MESOS-6098] - Frameworks UI shows metrics for used resources plus offers.
+ * [MESOS-6140] - Add a parallel test runner.
+ * [MESOS-6218] - Avoided to concat cgroup internally in subsystems.
+ * [MESOS-6220] - HTTP handler failures should result in 500 response rather than 503 response.
+ * [MESOS-6242] - Expose unknown container case on Containerizer::wait.
+ * [MESOS-6243] - Expose failures and unknown container cases from Containerizer::destroy.
+ * [MESOS-6282] - CNI isolator should print plugin's stderr.
+ * [MESOS-6299] - Master doesn't remove task from pending when it is invalid.
+ * [MESOS-6310] - Remove or define non-POSIX function.
+ * [MESOS-6371] - Remove the 'recover()' interface in 'ContainerLogger'.
+
+** Task
+ * [MESOS-3370] - Deprecate the external containerizer.
+ * [MESOS-4390] - Shared Volumes Design Doc.
+ * [MESOS-5039] - Add Subsystem abstraction for cgroups unified isolator.
+ * [MESOS-5040] - Add cgroups_subsystems flag for cgroups unified isolator.
+ * [MESOS-5041] - Add cgroups unified isolator.
+ * [MESOS-5042] - Add cpu subsystem support in cgroups unified isolator.
+ * [MESOS-5043] - Add cpuacct subsystem support in cgroups unified isolator.
+ * [MESOS-5045] - Add memory subsystem support in cgroups unified isolator.
+ * [MESOS-5046] - Add net_cls subsystem support in cgroups unified isolator.
+ * [MESOS-5047] - Add perf_event subsystem support in cgroups unified isolator.
+ * [MESOS-5051] - Create helpers for manipulating Linux capabilities.
+ * [MESOS-5144] - Cleanup memory leaks in libprocess finalize().
+ * [MESOS-5228] - Add tests for Capability API.
+ * [MESOS-5232] - Add capability information to ContainerInfo protobuf message.
+ * [MESOS-5275] - Add capabilities support for unified containerizer.
+ * [MESOS-5488] - Implement READ_FILE Call in v1 master API.
+ * [MESOS-5515] - Implement READ_FILE Call in v1 agent API.
+ * [MESOS-5516] - Implement GET_STATE Call in v1 agent API.
+ * [MESOS-5651] - Add devices subsystem support in cgroups unified isolator.
+ * [MESOS-5652] - Enable cgroups unified isolator.
+ * [MESOS-5788] - Consider adding a Java Scheduler Shim/Adapter for the new/old API.
+ * [MESOS-5809] - Implement GET_FRAMEWORKS Call in v1 agent API.
+ * [MESOS-5810] - Implement GET_EXECUTORS Call in v1 agent API.
+ * [MESOS-5811] - Implement GET_TASKS Call in v1 agent API.
+ * [MESOS-5855] - Create a 'Disk (not) full' example framework.
+ * [MESOS-5970] - Remove HTTP_PARSER_VERSION_MAJOR < 2 code in decoder.
+ * [MESOS-5973] - Remove CgroupsCpushareIsolator.
+ * [MESOS-5974] - Remove CgroupsMemIsolator.
+ * [MESOS-5975] - Remove CgroupsPerfEventIsolator.
+ * [MESOS-5976] - Remove CgroupsNetClsIsolator.
+ * [MESOS-5977] - Remove CgroupsDevicesIsolator.
+ * [MESOS-5987] - Update health check protobuf for HTTP and TCP health check.
+ * [MESOS-6017] - Introduce `PortMapping` protobuf.
+ * [MESOS-6020] - Remove `slavePid` from the Containerizer::launch API.
+ * [MESOS-6021] - Consolidate two `Containerizer::launch` methods into one.
+ * [MESOS-6023] - Create a binary for the port-mapper plugin.
+ * [MESOS-6036] - Define the Framework API protobufs required for TaskGroups.
+ * [MESOS-6042] - Validate TaskGroup launch in the master.
+ * [MESOS-6043] - Add interface for launching nested containers in Containerizer.
+ * [MESOS-6045] - Implement LAUNCH_GROUP operation in master.
+ * [MESOS-6067] - Support provisioner to be nested aware for Mesos Pods.
+ * [MESOS-6068] - Refactor MesosContainerizer::launch to prepare for nesting support.
+ * [MESOS-6070] - Renamed containerizer::Termination to ContainerTermination.
+ * [MESOS-6071] - Validate that an explicitly specified DEFAULT executor has disk resources.
+ * [MESOS-6073] - Update the streaming function for ContainerID to be nesting aware.
+ * [MESOS-6076] - Implement RunTaskGroup handler on the agent.
+ * [MESOS-6077] - Implement a basic default pod executor.
+ * [MESOS-6102] - Add event for agent added in master operator API.
+ * [MESOS-6130] - Make the disk usage isolator nesting-aware.
+ * [MESOS-6150] - Introduce the new isolator recover interface for nested container support.
+ * [MESOS-6151] - Populate `CommandInfo` correctly for default executors.
+ * [MESOS-6156] - Make the `network/cni` isolator nesting aware.
+ * [MESOS-6160] - Add protobuf definition for a Volume::Source that specifies a path from parent contianer's sandbox.
+ * [MESOS-6186] - Make the generic `cgroups` isolator nesting aware.
+ * [MESOS-6188] - Make the `gpu/nvidia` isolator nesting aware.
+ * [MESOS-6189] - Add a virtual method to Isolator to indicate if it supports nesting.
+ * [MESOS-6190] - Make the docker/runtime isolator nesting aware.
+ * [MESOS-6191] - Make the filesystem/linux isolator nesting aware.
+ * [MESOS-6192] - Make the appc/runtime isolator nesting aware.
+ * [MESOS-6194] - Make the disk/du isolator nesting aware.
+ * [MESOS-6199] - Make the volume/image isolator nesting aware.
+ * [MESOS-6204] - Introduce a "runtime" directory owned by the containerizer for checkpointing container information.
+ * [MESOS-6227] - Update the default executor to launch/wait/destroy child containers.
+ * [MESOS-6230] - Add support for health checks to the default executor.
+ * [MESOS-6235] - Add 'argv' variant of 'os::system'.
+ * [MESOS-6241] - Add agent::Call / agent::Response API for managing nested containers.
+ * [MESOS-6258] - Add `volume/sandbox_path` isolator to support Volume::Source::SANDBOX_PATH.
+ * [MESOS-6265] - Adjust cgroups layout for nested containers.
+ * [MESOS-6272] - Allow WebUI/other tools to access the task sandbox for a nested container.
+ * [MESOS-6284] - MesosContainerizer should skip non-nesting aware isolators for nested container.
+ * [MESOS-6287] - MesosContainer should allow 'wait' on terminated nested container.
+ * [MESOS-6312] - Update CHANGELOG to mention addition of agent '--runtime_dir' flag.
+ * [MESOS-6344] - Allow `network/cni` isolator to take a search path for CNI plugins instead of single directory.
+ * [MESOS-6408] - Changelog for `mesos-cni-port-mapper` to 1.1.0.
+
+** Wish
+ * [MESOS-5929] - Total cluster resources on master Mesos UI should have better spacing.
+
Release Notes - Mesos - Version 1.0.2
--------------------------------------------
[2/2] mesos git commit: Updated endpoint-help in preparation of 1.1.0.
Posted by ti...@apache.org.
Updated endpoint-help in preparation of 1.1.0.
Review: https://reviews.apache.org/r/52986/
Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/6de2ab4e
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/6de2ab4e
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/6de2ab4e
Branch: refs/heads/master
Commit: 6de2ab4ef5993ce39b3d0e9322d43e29014bc7c3
Parents: baf9add
Author: Till Toenshoff <to...@me.com>
Authored: Tue Oct 18 17:28:39 2016 +0200
Committer: Till Toenshoff <to...@me.com>
Committed: Tue Oct 18 20:48:51 2016 +0200
----------------------------------------------------------------------
docs/endpoints/files/browse.json.md | 2 +-
docs/endpoints/files/browse.md | 2 +-
docs/endpoints/files/debug.json.md | 6 +++++-
docs/endpoints/files/debug.md | 6 +++++-
docs/endpoints/files/download.json.md | 2 +-
docs/endpoints/files/download.md | 2 +-
docs/endpoints/files/read.json.md | 2 +-
docs/endpoints/files/read.md | 2 +-
docs/endpoints/master/api/v1.md | 9 ++++++++-
docs/endpoints/master/api/v1/scheduler.md | 7 ++++++-
docs/endpoints/master/create-volumes.md | 8 +++++++-
docs/endpoints/master/destroy-volumes.md | 8 +++++++-
docs/endpoints/master/flags.md | 2 +-
docs/endpoints/master/frameworks.md | 6 +++++-
docs/endpoints/master/reserve.md | 8 +++++++-
docs/endpoints/master/state-summary.md | 10 +++++++++-
docs/endpoints/master/state.json.md | 14 +++++++++++---
docs/endpoints/master/state.md | 14 +++++++++++---
docs/endpoints/master/tasks.json.md | 10 +++++++++-
docs/endpoints/master/tasks.md | 10 +++++++++-
docs/endpoints/master/teardown.md | 8 +++++++-
docs/endpoints/master/unreserve.md | 8 +++++++-
docs/endpoints/slave/api/v1.md | 3 ++-
docs/endpoints/slave/flags.md | 2 +-
docs/endpoints/slave/state.json.md | 10 +++++++++-
docs/endpoints/slave/state.md | 10 +++++++++-
26 files changed, 141 insertions(+), 30 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/browse.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/browse.json.md b/docs/endpoints/files/browse.json.md
index 55ee41b..6b21e50 100644
--- a/docs/endpoints/files/browse.json.md
+++ b/docs/endpoints/files/browse.json.md
@@ -24,7 +24,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Browsing files requires that the request principal is
+Browsing files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/browse.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/browse.md b/docs/endpoints/files/browse.md
index de8632e..0fa204a 100644
--- a/docs/endpoints/files/browse.md
+++ b/docs/endpoints/files/browse.md
@@ -24,7 +24,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Browsing files requires that the request principal is
+Browsing files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/debug.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/debug.json.md b/docs/endpoints/files/debug.json.md
index a4dc0de..2806a58 100644
--- a/docs/endpoints/files/debug.json.md
+++ b/docs/endpoints/files/debug.json.md
@@ -17,4 +17,8 @@ JSON object.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+The request principal should be authorized to query this endpoint.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/debug.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/debug.md b/docs/endpoints/files/debug.md
index 9361ffe..3338066 100644
--- a/docs/endpoints/files/debug.md
+++ b/docs/endpoints/files/debug.md
@@ -17,4 +17,8 @@ JSON object.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+The request principal should be authorized to query this endpoint.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/download.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/download.json.md b/docs/endpoints/files/download.json.md
index 88dd72c..31d442a 100644
--- a/docs/endpoints/files/download.json.md
+++ b/docs/endpoints/files/download.json.md
@@ -24,7 +24,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Downloading files requires that the request principal is
+Downloading files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/download.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/download.md b/docs/endpoints/files/download.md
index 3a38760..202d015 100644
--- a/docs/endpoints/files/download.md
+++ b/docs/endpoints/files/download.md
@@ -24,7 +24,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Downloading files requires that the request principal is
+Downloading files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/read.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/read.json.md b/docs/endpoints/files/read.json.md
index 6697ab1..64f348e 100644
--- a/docs/endpoints/files/read.json.md
+++ b/docs/endpoints/files/read.json.md
@@ -25,7 +25,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Reading files requires that the request principal is
+Reading files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/files/read.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/files/read.md b/docs/endpoints/files/read.md
index 21ea6d8..ef95c80 100644
--- a/docs/endpoints/files/read.md
+++ b/docs/endpoints/files/read.md
@@ -25,7 +25,7 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-Reading files requires that the request principal is
+Reading files requires that the request principal is
authorized to do so for the target virtual file path.
Authorizers may categorize different virtual paths into
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/api/v1.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/api/v1.md b/docs/endpoints/master/api/v1.md
index 19c6142..45aebd8 100644
--- a/docs/endpoints/master/api/v1.md
+++ b/docs/endpoints/master/api/v1.md
@@ -21,4 +21,11 @@ found.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+The information returned by this endpoint for certain calls
+might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/api/v1/scheduler.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/api/v1/scheduler.md b/docs/endpoints/master/api/v1/scheduler.md
index 39cd457..4c6caf5 100644
--- a/docs/endpoints/master/api/v1/scheduler.md
+++ b/docs/endpoints/master/api/v1/scheduler.md
@@ -21,4 +21,9 @@ found.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+The returned frameworks information might be filtered based on the
+users authorization.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/create-volumes.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/create-volumes.md b/docs/endpoints/master/create-volumes.md
index f6ec938..83f85ac 100644
--- a/docs/endpoints/master/create-volumes.md
+++ b/docs/endpoints/master/create-volumes.md
@@ -29,4 +29,10 @@ the volumes to be created.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to create persistent volumes requires that
+the current principal is authorized to create volumes for the
+specific role.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/destroy-volumes.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/destroy-volumes.md b/docs/endpoints/master/destroy-volumes.md
index 054e816..778f797 100644
--- a/docs/endpoints/master/destroy-volumes.md
+++ b/docs/endpoints/master/destroy-volumes.md
@@ -29,4 +29,10 @@ the volumes to be destroyed.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to destroy persistent volumes requires that
+the current principal is authorized to destroy volumes created
+by the principal who created the volume.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/flags.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/flags.md b/docs/endpoints/master/flags.md
index 850b6f8..6b3de41 100644
--- a/docs/endpoints/master/flags.md
+++ b/docs/endpoints/master/flags.md
@@ -17,5 +17,5 @@ enabled.
### AUTHORIZATION ###
Querying this endpoint requires that the current principal
-is authorized to query the path.
+is authorized to view all flags.
See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/frameworks.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/frameworks.md b/docs/endpoints/master/frameworks.md
index 1aed723..afb583e 100644
--- a/docs/endpoints/master/frameworks.md
+++ b/docs/endpoints/master/frameworks.md
@@ -21,4 +21,8 @@ found.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/reserve.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/reserve.md b/docs/endpoints/master/reserve.md
index 9bb04ed..71cc1a9 100644
--- a/docs/endpoints/master/reserve.md
+++ b/docs/endpoints/master/reserve.md
@@ -29,4 +29,10 @@ the resources to be reserved.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to reserve resources requires that the
+current principal is authorized to reserve resources for the
+specific role.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/state-summary.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state-summary.md b/docs/endpoints/master/state-summary.md
index 4eb517e..2986d05 100644
--- a/docs/endpoints/master/state-summary.md
+++ b/docs/endpoints/master/state-summary.md
@@ -20,8 +20,16 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
found.
This endpoint gives a summary of the state of all tasks and
registered frameworks in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks
+they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/state.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state.json.md b/docs/endpoints/master/state.json.md
index c5852bd..8466f7d 100644
--- a/docs/endpoints/master/state.json.md
+++ b/docs/endpoints/master/state.json.md
@@ -19,6 +19,8 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
found.
This endpoint shows information about the frameworks, tasks,
executors and agents running in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
Example (**Note**: this is not exhaustive):
@@ -50,7 +52,7 @@ Example (**Note**: this is not exhaustive):
"work_dir" : "/var/lib/mesos",
"http_authenticators" : "basic",
"authorizers" : "local",
- "slave_reregister_timeout" : "10mins",
+ "agent_reregister_timeout" : "10mins",
"logging_level" : "INFO",
"help" : "false",
"root_submissions" : "true",
@@ -75,7 +77,7 @@ Example (**Note**: this is not exhaustive):
"authenticate_http" : "false",
"port" : "5050",
"zk_session_timeout" : "10secs",
- "recovery_slave_removal_limit" : "100%",
+ "recovery_agent_removal_limit" : "100%",
"webui_dir" : "/path/to/mesos/build/../src/webui",
"cluster" : "mycluster",
"leader" : "master@127.0.0.1:5050",
@@ -93,4 +95,10 @@ Example (**Note**: this is not exhaustive):
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/state.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state.md b/docs/endpoints/master/state.md
index 8e0650f..eba9b39 100644
--- a/docs/endpoints/master/state.md
+++ b/docs/endpoints/master/state.md
@@ -19,6 +19,8 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
found.
This endpoint shows information about the frameworks, tasks,
executors and agents running in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
Example (**Note**: this is not exhaustive):
@@ -50,7 +52,7 @@ Example (**Note**: this is not exhaustive):
"work_dir" : "/var/lib/mesos",
"http_authenticators" : "basic",
"authorizers" : "local",
- "slave_reregister_timeout" : "10mins",
+ "agent_reregister_timeout" : "10mins",
"logging_level" : "INFO",
"help" : "false",
"root_submissions" : "true",
@@ -75,7 +77,7 @@ Example (**Note**: this is not exhaustive):
"authenticate_http" : "false",
"port" : "5050",
"zk_session_timeout" : "10secs",
- "recovery_slave_removal_limit" : "100%",
+ "recovery_agent_removal_limit" : "100%",
"webui_dir" : "/path/to/mesos/build/../src/webui",
"cluster" : "mycluster",
"leader" : "master@127.0.0.1:5050",
@@ -93,4 +95,10 @@ Example (**Note**: this is not exhaustive):
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/tasks.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/tasks.json.md b/docs/endpoints/master/tasks.json.md
index 5d2c0e6..d276f27 100644
--- a/docs/endpoints/master/tasks.json.md
+++ b/docs/endpoints/master/tasks.json.md
@@ -18,6 +18,8 @@ current master is not the leader.
Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
found.
Lists known tasks.
+The information shown might be filtered based on the user
+accessing the endpoint.
Query parameters:
@@ -28,4 +30,10 @@ Query parameters:
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of tasks they are
+allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/tasks.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/tasks.md b/docs/endpoints/master/tasks.md
index c7df686..64ce46c 100644
--- a/docs/endpoints/master/tasks.md
+++ b/docs/endpoints/master/tasks.md
@@ -18,6 +18,8 @@ current master is not the leader.
Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
found.
Lists known tasks.
+The information shown might be filtered based on the user
+accessing the endpoint.
Query parameters:
@@ -28,4 +30,10 @@ Query parameters:
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of tasks they are
+allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/teardown.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/teardown.md b/docs/endpoints/master/teardown.md
index 4c14f59..3ab4824 100644
--- a/docs/endpoints/master/teardown.md
+++ b/docs/endpoints/master/teardown.md
@@ -23,4 +23,10 @@ framework to tear down.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to teardown frameworks requires that the
+current principal is authorized to teardown frameworks created
+by the principal who created the framework.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/master/unreserve.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/unreserve.md b/docs/endpoints/master/unreserve.md
index 5cce428..f064239 100644
--- a/docs/endpoints/master/unreserve.md
+++ b/docs/endpoints/master/unreserve.md
@@ -29,4 +29,10 @@ the resources to be unreserved.
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to unreserve resources requires that the
+current principal is authorized to unreserve resources created
+by the principal who reserved the resources.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/slave/api/v1.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/api/v1.md b/docs/endpoints/slave/api/v1.md
index c867d79..b394f7f 100644
--- a/docs/endpoints/slave/api/v1.md
+++ b/docs/endpoints/slave/api/v1.md
@@ -16,4 +16,5 @@ Returns 200 OK if the call is successful
### AUTHENTICATION ###
-This endpoint does not require authentication.
\ No newline at end of file
+This endpoint requires authentication iff HTTP authentication is
+enabled.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/slave/flags.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/flags.md b/docs/endpoints/slave/flags.md
index 3ea38c1..4a8a036 100644
--- a/docs/endpoints/slave/flags.md
+++ b/docs/endpoints/slave/flags.md
@@ -16,5 +16,5 @@ This endpoint requires authentication iff HTTP authentication is
enabled.
### AUTHORIZATION ###
-The request principal should be authorized to query this endpoint.
+The request principal should be authorized to view all flags.
See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/slave/state.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/state.json.md b/docs/endpoints/slave/state.json.md
index ac85369..0f82c19 100644
--- a/docs/endpoints/slave/state.json.md
+++ b/docs/endpoints/slave/state.json.md
@@ -14,6 +14,8 @@ Information about state of the Agent.
### DESCRIPTION ###
This endpoint shows information about the frameworks, executors
and the agent's master as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
Example (**Note**: this is not exhaustive):
@@ -102,4 +104,10 @@ Example (**Note**: this is not exhaustive):
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/mesos/blob/6de2ab4e/docs/endpoints/slave/state.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/state.md b/docs/endpoints/slave/state.md
index c7b61d7..b34459e 100644
--- a/docs/endpoints/slave/state.md
+++ b/docs/endpoints/slave/state.md
@@ -14,6 +14,8 @@ Information about state of the Agent.
### DESCRIPTION ###
This endpoint shows information about the frameworks, executors
and the agent's master as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
Example (**Note**: this is not exhaustive):
@@ -102,4 +104,10 @@ Example (**Note**: this is not exhaustive):
### AUTHENTICATION ###
This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file