[ 
https://issues.apache.org/jira/browse/AURORA-915?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14219610#comment-14219610
 ] 

brian wickman commented on AURORA-915:
--------------------------------------

[~tomdunham] actually no -- it's mostly used to introspect the job key, e.g.

{noformat}
# -*- python -*-
# Default production Mesos cluster configuration.

import sys
include("defaults.aurora")

# Process
dc = sys.argv[4].split('/')[0]
environment = "staging"
...
{noformat}

Which is a terrible anti-pattern, for one since it ties you to a specific 
version / invocation of the client, but also since this is usually available 
via the {{\{\{cluster\}\}}} template.

As part of AURORA-188, I think it does make sense to make -E more clearly 
supported.  Right now it's sort of looked down upon since any context 
introduced by -E is lost when the job is serialized on the client.  There are 
some mentions of how to not lose this context in AURORA-188.

> create strict mode for .aurora config
> -------------------------------------
>
>                 Key: AURORA-915
>                 URL: https://issues.apache.org/jira/browse/AURORA-915
>             Project: Aurora
>          Issue Type: Task
>          Components: Client
>            Reporter: brian wickman
>
> I propose we have a strict mode for .aurora configuration (pystachio) that 
> prevents importing python modules (including os and sys.)  Possibly we 
> snapshot os.environ and provide a binding helper to give access to it.  For 
> people who need things like the current user, perhaps provide a default 
> binding like {{\{\{system.user\}\}}} and the like.  We are getting bitten by 
> people adding too much sophistication into .aurora configuration like full 
> blown sys.args introspection and web clients, etc.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to