[jira] [Reopened] (AURORA-1666) Allow health check to not run as job's role `role`

["Dmitriy Shirchenko (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AURORA-1666?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dmitriy Shirchenko reopened AURORA-1666:
----------------------------------------

Previous RB was done incorrectly, as a boolean was not passed in.

```
thermos_executor.pex: error: --setuid-health-checks option does not take a value
```

> Allow health check to not run as job's role `role`
> --------------------------------------------------
>
>                 Key: AURORA-1666
>                 URL: https://issues.apache.org/jira/browse/AURORA-1666
>             Project: Aurora
>          Issue Type: Story
>            Reporter: Dmitriy Shirchenko
>            Assignee: Dmitriy Shirchenko
>
> We have an issue with new permission demotion as our containers run as the same user and we don't care what user they run as. 
> I propose a flag to disable this demotion and allow health check to keep running as root if we want this. Maybe this can be done at thermos executor level.
> {code}
> E0415 20:32:51.799864 6 aurora_executor.py:118] Traceback (most recent call last):
>   File "apache/aurora/executor/aurora_executor.py", line 116, in _run
>     self._start_status_manager(driver, assigned_task)
>   File "apache/aurora/executor/aurora_executor.py", line 161, in _start_status_manager
>     status_checker = status_provider.from_assigned_task(assigned_task, self._sandbox)
>   File "apache/aurora/executor/common/health_checker.py", line 248, in from_assigned_task
>     pw_entry = pwd.getpwnam(assigned_task.task.job.role)
> KeyError: 'getpwnam(): name not found: meta-umonitor-worker'
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)