DC/OS Open Source Security

Managing security in your datacenter using DC/OS Open Source

Ensure the network is setup according to the information for securing your cluster.

All access management in DC/OS is done via the DC/OS Identity and Access Manager (IAM). This includes user account management, login as well as authentication token distribution. The IAM provides an HTTP API for managing user accounts in a RESTful fashion.

Authentication tokens can be obtained using OpenID Connect 1.0, which is an identity layer built on top of the OAuth 2.0 protocol.

Local user and service accounts can be configured for logging in without external dependencies and for automating authentication against the cluster in a secure manner.

Further reading

Future work

We are looking forward to working with the DC/OS community on improving existing security features as well as on introducing new ones in the coming releases.

Next Steps