You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/security.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,29 +31,29 @@ Follow these instructions to authenticate in strict mode:
31
31
1. Assign Permissions
32
32
33
33
First, allow Spark to run tasks as root:
34
-
34
+
35
35
```
36
36
$ curl -k -L -X PUT \
37
37
-H "Authorization: token=$(dcos config show core.dcos_acs_token)" \
38
38
"$(dcos config show core.dcos_url)/acs/api/v1/acls/dcos:mesos:master:task:user:root" \
39
39
-d '{"description":"Allows root to execute tasks"}' \
40
40
-H 'Content-Type: application/json'
41
-
41
+
42
42
$ curl -k -L -X PUT \
43
43
-H "Authorization: token=$(dcos config show core.dcos_acs_token)" \
44
44
"$(dcos config show core.dcos_url)/acs/api/v1/acls/dcos:mesos:master:task:user:root/users/${SERVICE_ACCOUNT_NAME}/create"
45
45
```
46
46
47
47
Now, you must allow Spark to register under the desired role. This is the value used for `service.role` when installing Spark (default: `*`):
48
-
48
+
49
49
```
50
50
$ export ROLE=<service.role value>
51
51
$ curl -k -L -X PUT \
52
52
-H "Authorization: token=$(dcos config show core.dcos_acs_token)" \
53
53
"$(dcos config show core.dcos_url)/acs/api/v1/acls/dcos:mesos:master:framework:role:${ROLE}" \
54
54
-d '{"description":"Allows ${ROLE} to register as a framework with the Mesos master"}' \
55
55
-H 'Content-Type: application/json'
56
-
56
+
57
57
$ curl -k -L -X PUT \
58
58
-H "Authorization: token=$(dcos config show core.dcos_acs_token)" \
59
59
"$(dcos config show core.dcos_url)/acs/api/v1/acls/dcos:mesos:master:framework:role:${ROLE}/users/${SERVICE_ACCOUNT_NAME}/create"
@@ -86,11 +86,11 @@ Follow these instructions to authenticate in strict mode:
86
86
1. Submit a Job
87
87
88
88
We've now installed the Spark Dispatcher, which is authenticating itself to the Mesos master. Spark jobs are also frameworks that must authenticate. The dispatcher will pass the secret along to the jobs, so all that's left to do is configure our jobs to use DC/OS authentication:
0 commit comments