Charles Allen created MESOS-6024:
------------------------------------

             Summary: CORS issue in 1.0.0 master UI
                 Key: MESOS-6024
                 URL: https://issues.apache.org/jira/browse/MESOS-6024
             Project: Mesos
          Issue Type: Bug
          Components: master, webui
    Affects Versions: 1.0.0
            Reporter: Charles Allen


My setup is such that I have a dns entry which points to one of a group of 
mesos masters (3). The mesos masters are setup to use IP only stuff (advertise 
and bind based on ip address), and not try to do things based on hostname / DNS 
resolution.

For example, I might have 3 masters 192.168.1.100, 192.168.1.101, and 
192.168.1.103 behind master.mesos.internal

Whenever I try and go to the "overall" dns endpoint, I get the name 

XMLHttpRequest cannot load http://192.168.1.100:5050/master/state. No 
'Access-Control-Allow-Origin' header is present on the requested resource. 
Origin 'http://master.mesos.internal:5050' is therefore not allowed access.

If I go to http://192.168.1.100:5050/ from the error message the whole web ui 
behaves as expected.

Overall this is probably a good thing as I suspect proper security enforcement 
may have been lacking previously.

The expected behavior is that I am redirected to the leader.

This is on 1.0.0-2.0.89.ubuntu1404 from the mesosphere repository



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to