[ 
https://issues.apache.org/jira/browse/AURORA-1666?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15246974#comment-15246974
 ] 

Dmitriy Shirchenko edited comment on AURORA-1666 at 4/19/16 2:03 AM:
---------------------------------------------------------------------

Previous RB was done incorrectly, as a boolean was not passed in.

{code}
thermos_executor.pex: error: --setuid-health-checks option does not take a value
{code}


was (Author: shirchen):
Previous RB was done incorrectly, as a boolean was not passed in.

```
thermos_executor.pex: error: --setuid-health-checks option does not take a value
```

> Allow health check to not run as job's role `role`
> --------------------------------------------------
>
>                 Key: AURORA-1666
>                 URL: https://issues.apache.org/jira/browse/AURORA-1666
>             Project: Aurora
>          Issue Type: Story
>            Reporter: Dmitriy Shirchenko
>            Assignee: Dmitriy Shirchenko
>
> We have an issue with new permission demotion as our containers run as the 
> same user and we don't care what user they run as. 
> I propose a flag to disable this demotion and allow health check to keep 
> running as root if we want this. Maybe this can be done at thermos executor 
> level.
> {code}
> E0415 20:32:51.799864 6 aurora_executor.py:118] Traceback (most recent call 
> last):
>   File "apache/aurora/executor/aurora_executor.py", line 116, in _run
>     self._start_status_manager(driver, assigned_task)
>   File "apache/aurora/executor/aurora_executor.py", line 161, in 
> _start_status_manager
>     status_checker = status_provider.from_assigned_task(assigned_task, 
> self._sandbox)
>   File "apache/aurora/executor/common/health_checker.py", line 248, in 
> from_assigned_task
>     pw_entry = pwd.getpwnam(assigned_task.task.job.role)
> KeyError: 'getpwnam(): name not found: meta-umonitor-worker'
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to