[AURORA-1666] Allow health check to not run as job's role `role`

• Type: Story
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Assignee: Dmitriy Shirchenko
• Reporter: Dmitriy Shirchenko
• Created: 15/Apr/16 21:19
• Updated: 10/Jun/16 13:07
• Resolved: 19/Apr/16 20:54

Description

We have an issue with new permission demotion as our containers run as the same user and we don't care what user they run as.

I propose a flag to disable this demotion and allow health check to keep running as root if we want this. Maybe this can be done at thermos executor level.

E0415 20:32:51.799864 6 aurora_executor.py:118] Traceback (most recent call last):
  File "apache/aurora/executor/aurora_executor.py", line 116, in _run
    self._start_status_manager(driver, assigned_task)
  File "apache/aurora/executor/aurora_executor.py", line 161, in _start_status_manager
    status_checker = status_provider.from_assigned_task(assigned_task, self._sandbox)
  File "apache/aurora/executor/common/health_checker.py", line 248, in from_assigned_task
    pw_entry = pwd.getpwnam(assigned_task.task.job.role)
KeyError: 'getpwnam(): name not found: meta-umonitor-worker'