{"action":"created","issue":{"url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/437","repository_url":"https://api.github.com/repos/mesosphere/mesos-dns","labels_url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/437/labels{/name}","comments_url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/437/comments","events_url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/437/events","html_url":"https://github.com/mesosphere/mesos-dns/issues/437","id":156339435,"number":437,"title":"Support SSL-enabled Mesos","user":{"login":"micahhausler","id":791000,"avatar_url":"https://avatars.githubusercontent.com/u/791000?v=3","gravatar_id":"","url":"https://api.github.com/users/micahhausler","html_url":"https://github.com/micahhausler","followers_url":"https://api.github.com/users/micahhausler/followers","following_url":"https://api.github.com/users/micahhausler/following{/other_user}","gists_url":"https://api.github.com/users/micahhausler/gists{/gist_id}","starred_url":"https://api.github.com/users/micahhausler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/micahhausler/subscriptions","organizations_url":"https://api.github.com/users/micahhausler/orgs","repos_url":"https://api.github.com/users/micahhausler/repos","events_url":"https://api.github.com/users/micahhausler/events{/privacy}","received_events_url":"https://api.github.com/users/micahhausler/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-05-23T18:45:30Z","updated_at":"2016-07-11T14:36:13Z","closed_at":null,"body":"## What version of the project are you using?\r\nAffects ≤ 0.5.2\r\n\r\n## What operating system and processor architecture are you using?\r\nN/A\r\n\r\n## What did you do? \r\nBuilt mesos with SSL support, ran mesos-dns with config that looks like:\r\n```\r\n{\r\n  \"zk\": \"zk://192.168.99.100:2181/mesos\",\r\n  \"masters\": [\"192.168.99.100:5050\"],\r\n  \"stateTimeoutSeconds\": 300,\r\n  \"refreshSeconds\": 60,\r\n  \"ttl\": 60,\r\n  \"domain\": \"mesos\",\r\n  \"ns\": \"ns1\",\r\n  \"port\": 53,\r\n  \"resolvers\": [\"8.8.8.8\"],\r\n  \"timeout\": 5,\r\n  \"listener\": \"0.0.0.0\",\r\n  \"SOAMname\": \"ns1.mesos\",\r\n  \"SOARname\": \"root.ns1.mesos\",\r\n  \"SOARefresh\": 60,\r\n  \"SOARetry\":   600,\r\n  \"SOAExpire\":  86400,\r\n  \"SOAMinttl\": 60,\r\n  \"dnson\": true,\r\n  \"httpon\": true,\r\n  \"httpport\": 8123,\r\n  \"externalon\": true,\r\n  \"recurseon\": true,\r\n  \"IPSources\": [\"mesos\", \"host\"],\r\n  \"EnforceRFC952\": false,\r\n  \"EnumerationOn\": true\r\n}\r\n```\r\n\r\n## What did you expect to see?\r\nMesos-dns work with SSL-enabled Mesos\r\n\r\n## What did you see instead?\r\n\r\n```\r\nVERY VERBOSE: 2016/05/23 18:05:30 main.go:88: Starting master detector for ZK  zk://192.168.99.100:2181/mesos\r\n2016/05/23 18:05:30 Connected to 192.168.99.100:2181\r\n2016/05/23 18:05:30 Authenticated: id=95946452203339776, timeout=40000\r\nVERY VERBOSE: 2016/05/23 18:05:31 masters.go:47: Updated leader:  &MasterInfo{Id:*3fa53ab7-5264-4cd4-8097-3a4550a5e1e2,Ip:*1684252864,Port:*5050,Pid:*master@192.168.99.100:5050,Hostname:*192.168.99.100,Version:*0.28.1,Address:&Address{Hostname:*192.168.99.100,Ip:*192.168.99.100,Port:*5050,XXX_unrecognized:[],},XXX_unrecognized:[],}\r\nVERY VERBOSE: 2016/05/23 18:05:31 main.go:76: new masters detected: [192.168.99.100:5050]\r\nVERY VERBOSE: 2016/05/23 18:05:31 generator.go:153: Zookeeper says the leader is:  192.168.99.100:5050\r\nVERY VERBOSE: 2016/05/23 18:05:31 generator.go:239: reloading from master 192.168.99.100\r\nERROR: 2016/05/23 18:05:31 generator.go:211: Get http://192.168.99.100:5050/master/state.json: read tcp 192.168.99.100:5050: connection reset by peer\r\nERROR: 2016/05/23 18:05:31 generator.go:124: no master\r\nERROR: 2016/05/23 18:05:31 resolver.go:156: Warning: Error generating records: no master; keeping old DNS state\r\nVERY VERBOSE: 2016/05/23 18:05:31 generator.go:162: Warning: Zookeeper is wrong about leader\r\nVERY VERBOSE: 2016/05/23 18:05:31 logging.go:75: {MesosRequests:0 MesosSuccess:0 MesosNXDomain:0 MesosFailed:0 NonMesosRequests:0 NonMesosSuccess:0 NonMesosNXDomain:0 NonMesosFailed:0 NonMesosForwarded:0}\r\nVERY VERBOSE: 2016/05/23 18:05:31 masters.go:56: Updated masters:  [&MasterInfo{Id:*3fa53ab7-5264-4cd4-8097-3a4550a5e1e2,Ip:*1684252864,Port:*5050,Pid:*master@192.168.99.100:5050,Hostname:*192.168.99.100,Version:*0.28.1,Address:&Address{Hostname:*192.168.99.100,Ip:*192.168.99.100,Port:*5050,XXX_unrecognized:[],},XXX_unrecognized:[],}]\r\n```\r\n\r\n## Additional info\r\nCurrently the scheme is assumed to be `http` : [`generator.go`](https://github.com/mesosphere/mesos-dns/blob/9b4c235f7d58569f032d26cc82dba00646f9dc30/records/generator.go#L217)\r\n\r\nIt seems either an additional configuration flag should be enabled, or the scheme should be included in the list of master addresses. \r\n\r\nAny thoughts on which approach would be better here?"},"comment":{"url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/comments/231753306","html_url":"https://github.com/mesosphere/mesos-dns/issues/437#issuecomment-231753306","issue_url":"https://api.github.com/repos/mesosphere/mesos-dns/issues/437","id":231753306,"user":{"login":"jdef","id":2348332,"avatar_url":"https://avatars.githubusercontent.com/u/2348332?v=3","gravatar_id":"","url":"https://api.github.com/users/jdef","html_url":"https://github.com/jdef","followers_url":"https://api.github.com/users/jdef/followers","following_url":"https://api.github.com/users/jdef/following{/other_user}","gists_url":"https://api.github.com/users/jdef/gists{/gist_id}","starred_url":"https://api.github.com/users/jdef/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jdef/subscriptions","organizations_url":"https://api.github.com/users/jdef/orgs","repos_url":"https://api.github.com/users/jdef/repos","events_url":"https://api.github.com/users/jdef/events{/privacy}","received_events_url":"https://api.github.com/users/jdef/received_events","type":"User","site_admin":false},"created_at":"2016-07-11T14:36:13Z","updated_at":"2016-07-11T14:36:13Z","body":"@micahhausler yes, we do support SSL + authentication with JWT. the authn method isn't pluggable at this point. https://github.com/mesosphere/mesos-dns/blob/master/httpcli/doer.go\r\n\r\nPRs welcome :)"}}
{"actor":{"display_login":"jdef"}}