aurora-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dmitriy Shirchenko (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (AURORA-1666) Allow health check to not run as job's role `role`
Date Tue, 19 Apr 2016 02:03:25 GMT

    [ https://issues.apache.org/jira/browse/AURORA-1666?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15246974#comment-15246974
] 

Dmitriy Shirchenko edited comment on AURORA-1666 at 4/19/16 2:03 AM:
---------------------------------------------------------------------

Previous RB was done incorrectly, as a boolean was not passed in.

{code}
thermos_executor.pex: error: --setuid-health-checks option does not take a value
{code}


was (Author: shirchen):
Previous RB was done incorrectly, as a boolean was not passed in.

```
thermos_executor.pex: error: --setuid-health-checks option does not take a value
```

> Allow health check to not run as job's role `role`
> --------------------------------------------------
>
>                 Key: AURORA-1666
>                 URL: https://issues.apache.org/jira/browse/AURORA-1666
>             Project: Aurora
>          Issue Type: Story
>            Reporter: Dmitriy Shirchenko
>            Assignee: Dmitriy Shirchenko
>
> We have an issue with new permission demotion as our containers run as the same user
and we don't care what user they run as. 
> I propose a flag to disable this demotion and allow health check to keep running as root
if we want this. Maybe this can be done at thermos executor level.
> {code}
> E0415 20:32:51.799864 6 aurora_executor.py:118] Traceback (most recent call last):
>   File "apache/aurora/executor/aurora_executor.py", line 116, in _run
>     self._start_status_manager(driver, assigned_task)
>   File "apache/aurora/executor/aurora_executor.py", line 161, in _start_status_manager
>     status_checker = status_provider.from_assigned_task(assigned_task, self._sandbox)
>   File "apache/aurora/executor/common/health_checker.py", line 248, in from_assigned_task
>     pw_entry = pwd.getpwnam(assigned_task.task.job.role)
> KeyError: 'getpwnam(): name not found: meta-umonitor-worker'
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message