{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/7973","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/7973/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/7973/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/7973/events","html_url":"https://github.com/openshift/origin/issues/7973","id":140363838,"number":7973,"title":"Deployment Config stuck in \"new\" state","user":{"login":"paralin","id":534887,"avatar_url":"https://avatars.githubusercontent.com/u/534887?v=3","gravatar_id":"","url":"https://api.github.com/users/paralin","html_url":"https://github.com/paralin","followers_url":"https://api.github.com/users/paralin/followers","following_url":"https://api.github.com/users/paralin/following{/other_user}","gists_url":"https://api.github.com/users/paralin/gists{/gist_id}","starred_url":"https://api.github.com/users/paralin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paralin/subscriptions","organizations_url":"https://api.github.com/users/paralin/orgs","repos_url":"https://api.github.com/users/paralin/repos","events_url":"https://api.github.com/users/paralin/events{/privacy}","received_events_url":"https://api.github.com/users/paralin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/component/deployments","name":"component/deployments","color":"0052cc"},{"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"kargakis","id":3900799,"avatar_url":"https://avatars.githubusercontent.com/u/3900799?v=3","gravatar_id":"","url":"https://api.github.com/users/kargakis","html_url":"https://github.com/kargakis","followers_url":"https://api.github.com/users/kargakis/followers","following_url":"https://api.github.com/users/kargakis/following{/other_user}","gists_url":"https://api.github.com/users/kargakis/gists{/gist_id}","starred_url":"https://api.github.com/users/kargakis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kargakis/subscriptions","organizations_url":"https://api.github.com/users/kargakis/orgs","repos_url":"https://api.github.com/users/kargakis/repos","events_url":"https://api.github.com/users/kargakis/events{/privacy}","received_events_url":"https://api.github.com/users/kargakis/received_events","type":"User","site_admin":false},"milestone":null,"comments":14,"created_at":"2016-03-12T08:36:46Z","updated_at":"2016-03-14T16:00:20Z","closed_at":null,"body":"## Version\r\noc v1.1.3\r\n\r\nServer Version: version.Info{Major:\"1\", Minor:\"2+\", GitVersion:\"v1.2.0-beta.1\", GitCommit:\"77eff081f022242e5736b8c2e1ca2058ca61a733\", GitTreeState:\"clean\"}\r\n\r\n## Description\r\n\r\nIt seems that deployments under Kubernetes Stock don't seem to work properly. They are stuck in the \"new\" state with a 0 replica RC.\r\n\r\n## How reproducible\r\n\r\n1. Deploy to an existing cluster. I used my [deployment setup](http://github.com/paralin/openshift-under-kubernetes)\r\n2. Attempt to deploy a registry with `oadm registry --config=admin.kubeconfig --credentials=openshift-registry.kubeconfig`.\r\n\r\n## Current result\r\n\r\nOutput of `oc describe dc docker-registry`:\r\n\r\n```\r\nName:\t\tdocker-registry\r\nCreated:\t6 minutes ago\r\nLabels:\t\tdocker-registry=default\r\nAnnotations:\t<none>\r\nLatest Version:\t1\r\nTriggers:\tConfig\r\nStrategy:\tRolling\r\nTemplate:\r\n  Selector:\tdocker-registry=default\r\n  Replicas:\t1\r\n  Containers:\r\n  NAME\t\tIMAGE\t\t\t\t\tENV\r\n  registry\topenshift/origin-docker-registry:v1.1.3\tOPENSHIFT_CA_DATA=-----BEGIN CERTIFICATE-----\r\n[redacted cert data]\r\n-----END CERTIFICATE-----\r\n,OPENSHIFT_CERT_DATA=-----BEGIN CERTIFICATE-----\r\n[redacted cert data]\r\n-----END CERTIFICATE-----\r\n,OPENSHIFT_INSECURE=false,OPENSHIFT_KEY_DATA=-----BEGIN RSA PRIVATE KEY-----\r\n[redacted key data]\r\n-----END RSA PRIVATE KEY-----\r\n,OPENSHIFT_MASTER=https://10.0.62.64:443,REGISTRY_HTTP_ADDR=:5000,REGISTRY_HTTP_NET=tcp,REGISTRY_HTTP_SECRET=bGgCaXl42JAmNy9tAHEP5GHxKdQvQq1Nii42YxPOL2w=\r\nDeployment #1 (latest):\r\n\tName:\t\tdocker-registry-1\r\n\tCreated:\t6 minutes ago\r\n\tStatus:\t\tNew\r\n\tReplicas:\t0 current / 0 desired\r\n\tSelector:\tdeployment=docker-registry-1,deploymentconfig=docker-registry,docker-registry=default\r\n\tLabels:\t\tdocker-registry=default,openshift.io/deployment-config.name=docker-registry\r\n\tPods Status:\t0 Running / 0 Waiting / 0 Succeeded / 0 Failed\r\nEvents:\r\n  FirstSeen\tLastSeen\tCount\tFrom\t\t\t\tSubobjectPath\tType\t\tReason\t\t\tMessage\r\n  ---------\t--------\t-----\t----\t\t\t\t-------------\t--------\t------\t\t\t-------\r\n  6m\t\t6m\t\t1\t{deploymentconfig-controller }\t\t\tNormal\t\tDeploymentCreated\tCreated new deployment \"docker-registry-1\" for version 1\r\n```\r\n\r\nThe DeploymentConfig stays like this forever. \r\n\r\nOutput of logs from openshift master:\r\n\r\n```\r\nW0312 03:27:37.874646       1 start_master.go:274] assetConfig.loggingPublicURL: Invalid value: \"\": required to view aggregated container logs in the console\r\nW0312 03:27:37.874839       1 start_master.go:274] assetConfig.metricsPublicURL: Invalid value: \"\": required to view cluster metrics in the console\r\nI0312 03:27:38.567040       1 start_master.go:385] Starting master on 0.0.0.0:443 (v1.1.3)\r\nI0312 03:27:38.567115       1 start_master.go:386] Public master address is https://os.paral.in:443\r\nI0312 03:27:38.567186       1 start_master.go:390] Using images from \"openshift/origin-<component>:v1.1.3\"\r\nI0312 03:27:38.731792       1 run_components.go:187] Using default project node label selector: \r\nW0312 03:27:39.368310       1 swagger.go:32] No API exists for predefined swagger description /api/v1\r\nI0312 03:27:39.369186       1 master.go:249] Started Kubernetes proxy at 0.0.0.0:443/api/\r\nI0312 03:27:39.369237       1 master.go:249] Started Origin API at 0.0.0.0:443/oapi/v1\r\nI0312 03:27:39.369268       1 master.go:249] Started OAuth2 API at 0.0.0.0:443/oauth\r\nI0312 03:27:39.369297       1 master.go:249] Started Login endpoint at 0.0.0.0:443/login\r\nI0312 03:27:39.369321       1 master.go:249] Started Web Console 0.0.0.0:443/console/\r\nI0312 03:27:39.369344       1 master.go:249] Started Swagger Schema API at 0.0.0.0:443/swaggerapi/\r\nE0312 03:27:39.730402       1 ensure.go:164] Unable to create default security context constraint privileged.  Got error: the server could not find the requested resource\r\nE0312 03:27:39.732356       1 ensure.go:164] Unable to create default security context constraint nonroot.  Got error: the server could not find the requested resource\r\nE0312 03:27:39.734181       1 ensure.go:164] Unable to create default security context constraint hostmount-anyuid.  Got error: the server could not find the requested resource\r\nE0312 03:27:39.736011       1 ensure.go:164] Unable to create default security context constraint hostaccess.  Got error: the server could not find the requested resource\r\nE0312 03:27:39.737815       1 ensure.go:164] Unable to create default security context constraint restricted.  Got error: the server could not find the requested resource\r\nE0312 03:27:39.739739       1 ensure.go:164] Unable to create default security context constraint anyuid.  Got error: the server could not find the requested resource\r\n2016-03-12 03:27:40.239891 I | http: TLS handshake error from 10.244.0.1:47682: EOF\r\n2016-03-12 03:27:40.240032 I | http: TLS handshake error from 172.20.0.166:22515: EOF\r\n2016-03-12 03:27:40.240227 I | http: TLS handshake error from 172.20.0.165:41236: EOF\r\n2016-03-12 03:27:40.877171 I | skydns: ready for queries on cluster.local. for tcp4://0.0.0.0:53 [rcache 0]\r\n2016-03-12 03:27:40.877268 I | skydns: ready for queries on cluster.local. for udp4://0.0.0.0:53 [rcache 0]\r\nI0312 03:27:40.976746       1 run_components.go:182] DNS listening at 0.0.0.0:53\r\nI0312 03:27:40.977959       1 start_master.go:529] Controllers starting (*)\r\nI0312 03:27:40.978048       1 run_components.go:86] Skipped starting Service Account Token Manager, no private key specified\r\nI0312 03:27:41.807394       1 start_master.go:609] Started Origin Controllers\r\n2016-03-12 03:27:42.446812 I | http: TLS handshake error from 10.244.0.1:12966: EOF\r\n2016-03-12 03:27:42.447817 I | http: TLS handshake error from 172.20.0.166:55746: EOF\r\n2016-03-12 03:27:42.447922 I | http: TLS handshake error from 172.20.0.165:21679: EOF\r\n[the previous three lines repeated hundreds of times]\r\n```\r\n\r\nThe TLS handshake errors might be related.\r\n\r\nQuerying replication controllers, creating pods, and viewing everything from the web console, all works fine. A replication controller is also created properly, it's just not scaled up. And trying to scale it up seems to lead to nothing happening.\r\n\r\nOutput of **kubectl get all** in the `default` namespace:\r\n\r\n```\r\napiVersion: v1\r\nitems:\r\n- apiVersion: v1\r\n  kind: DeploymentConfig\r\n  metadata:\r\n    creationTimestamp: 2016-03-12T08:30:18Z\r\n    labels:\r\n      docker-registry: default\r\n    name: docker-registry\r\n    namespace: default\r\n    resourceVersion: \"154\"\r\n    selfLink: /oapi/v1/namespaces/default/deploymentconfigs/docker-registry\r\n    uid: a716ad5c-e82c-11e5-877a-02420af40006\r\n  spec:\r\n    replicas: 1\r\n    selector:\r\n      docker-registry: default\r\n    strategy:\r\n      resources: {}\r\n      rollingParams:\r\n        intervalSeconds: 1\r\n        maxSurge: 25%\r\n        maxUnavailable: 25%\r\n        timeoutSeconds: 600\r\n        updatePeriodSeconds: 1\r\n      type: Rolling\r\n    template:\r\n      metadata:\r\n        creationTimestamp: null\r\n        labels:\r\n          docker-registry: default\r\n      spec:\r\n        containers:\r\n        - env:\r\n          - name: OPENSHIFT_CA_DATA\r\n            value: |\r\n              -----BEGIN CERTIFICATE-----\r\n              [redacted cert]\r\n              -----END CERTIFICATE-----\r\n          - name: OPENSHIFT_CERT_DATA\r\n            value: |\r\n              [redacted cert]\r\n              -----END CERTIFICATE-----\r\n          - name: OPENSHIFT_INSECURE\r\n            value: \"false\"\r\n          - name: OPENSHIFT_KEY_DATA\r\n            value: |\r\n              -----BEGIN RSA PRIVATE KEY-----\r\n              [redacted key]\r\n              -----END RSA PRIVATE KEY-----\r\n          - name: OPENSHIFT_MASTER\r\n            value: https://10.0.62.64:443\r\n          - name: REGISTRY_HTTP_ADDR\r\n            value: :5000\r\n          - name: REGISTRY_HTTP_NET\r\n            value: tcp\r\n          - name: REGISTRY_HTTP_SECRET\r\n            value: RwSB4fAJPYzrQBhqxxKtdjzywvbSOGBW8BRxGonfTck=\r\n          image: openshift/origin-docker-registry:v1.1.3\r\n          imagePullPolicy: IfNotPresent\r\n          livenessProbe:\r\n            failureThreshold: 3\r\n            httpGet:\r\n              path: /healthz\r\n              port: 5000\r\n              scheme: HTTP\r\n            initialDelaySeconds: 10\r\n            periodSeconds: 10\r\n            successThreshold: 1\r\n            timeoutSeconds: 5\r\n          name: registry\r\n          ports:\r\n          - containerPort: 5000\r\n            protocol: TCP\r\n          readinessProbe:\r\n            failureThreshold: 3\r\n            httpGet:\r\n              path: /healthz\r\n              port: 5000\r\n              scheme: HTTP\r\n            periodSeconds: 10\r\n            successThreshold: 1\r\n            timeoutSeconds: 5\r\n          resources: {}\r\n          securityContext:\r\n            privileged: false\r\n          terminationMessagePath: /dev/termination-log\r\n          volumeMounts:\r\n          - mountPath: /registry\r\n            name: registry-storage\r\n        dnsPolicy: ClusterFirst\r\n        restartPolicy: Always\r\n        securityContext: {}\r\n        terminationGracePeriodSeconds: 30\r\n        volumes:\r\n        - emptyDir: {}\r\n          name: registry-storage\r\n    test: false\r\n    triggers:\r\n    - type: ConfigChange\r\n  status:\r\n    details:\r\n      causes:\r\n      - type: ConfigChange\r\n    latestVersion: 1\r\n- apiVersion: v1\r\n  kind: ReplicationController\r\n  metadata:\r\n    annotations:\r\n      kubectl.kubernetes.io/desired-replicas: \"1\"\r\n      openshift.io/deployment-config.latest-version: \"1\"\r\n      openshift.io/deployment-config.name: docker-registry\r\n      openshift.io/deployment.phase: New\r\n      openshift.io/deployment.replicas: \"0\"\r\n      openshift.io/encoded-deployment-config: [redacted encoded config]\r\n    creationTimestamp: 2016-03-12T08:30:18Z\r\n    generation: 1\r\n    labels:\r\n      docker-registry: default\r\n      openshift.io/deployment-config.name: docker-registry\r\n    name: docker-registry-1\r\n    namespace: default\r\n    resourceVersion: \"6910\"\r\n    selfLink: /api/v1/namespaces/default/replicationcontrollers/docker-registry-1\r\n    uid: a71efc23-e82c-11e5-b8b0-065db116a2cf\r\n  spec:\r\n    replicas: 0\r\n    selector:\r\n      deployment: docker-registry-1\r\n      deploymentconfig: docker-registry\r\n      docker-registry: default\r\n    template:\r\n      metadata:\r\n        annotations:\r\n          openshift.io/deployment-config.latest-version: \"1\"\r\n          openshift.io/deployment-config.name: docker-registry\r\n          openshift.io/deployment.name: docker-registry-1\r\n        creationTimestamp: null\r\n        labels:\r\n          deployment: docker-registry-1\r\n          deploymentconfig: docker-registry\r\n          docker-registry: default\r\n      spec:\r\n        containers:\r\n        - env:\r\n          - name: OPENSHIFT_CA_DATA\r\n            value: |\r\n              -----BEGIN CERTIFICATE-----\r\n              [redacted cert]\r\n              -----END CERTIFICATE-----\r\n          - name: OPENSHIFT_CERT_DATA\r\n            value: |\r\n              -----BEGIN CERTIFICATE-----\r\n              [redacted cert]\r\n              -----END CERTIFICATE-----\r\n          - name: OPENSHIFT_INSECURE\r\n            value: \"false\"\r\n          - name: OPENSHIFT_KEY_DATA\r\n            value: |\r\n              -----BEGIN RSA PRIVATE KEY-----\r\n             [redacted key]\r\n              -----END RSA PRIVATE KEY-----\r\n          - name: OPENSHIFT_MASTER\r\n            value: https://10.0.62.64:443\r\n          - name: REGISTRY_HTTP_ADDR\r\n            value: :5000\r\n          - name: REGISTRY_HTTP_NET\r\n            value: tcp\r\n          - name: REGISTRY_HTTP_SECRET\r\n            value: RwSB4fAJPYzrQBhqxxKtdjzywvbSOGBW8BRxGonfTck=\r\n          image: openshift/origin-docker-registry:v1.1.3\r\n          imagePullPolicy: IfNotPresent\r\n          livenessProbe:\r\n            failureThreshold: 3\r\n            httpGet:\r\n              path: /healthz\r\n              port: 5000\r\n              scheme: HTTP\r\n            initialDelaySeconds: 10\r\n            periodSeconds: 10\r\n            successThreshold: 1\r\n            timeoutSeconds: 5\r\n          name: registry\r\n          ports:\r\n          - containerPort: 5000\r\n            protocol: TCP\r\n          readinessProbe:\r\n            failureThreshold: 3\r\n            httpGet:\r\n              path: /healthz\r\n              port: 5000\r\n              scheme: HTTP\r\n            periodSeconds: 10\r\n            successThreshold: 1\r\n            timeoutSeconds: 5\r\n          resources: {}\r\n          securityContext:\r\n            privileged: false\r\n          terminationMessagePath: /dev/termination-log\r\n          volumeMounts:\r\n          - mountPath: /registry\r\n            name: registry-storage\r\n        dnsPolicy: ClusterFirst\r\n        restartPolicy: Always\r\n        securityContext: {}\r\n        terminationGracePeriodSeconds: 30\r\n        volumes:\r\n        - emptyDir: {}\r\n          name: registry-storage\r\n  status:\r\n    observedGeneration: 1\r\n    replicas: 0\r\n- apiVersion: v1\r\n  kind: Service\r\n  metadata:\r\n    creationTimestamp: 2016-03-12T08:30:18Z\r\n    labels:\r\n      docker-registry: default\r\n    name: docker-registry\r\n    namespace: default\r\n    resourceVersion: \"6912\"\r\n    selfLink: /api/v1/namespaces/default/services/docker-registry\r\n    uid: a727712f-e82c-11e5-b8b0-065db116a2cf\r\n  spec:\r\n    clusterIP: 10.0.106.115\r\n    portalIP: 10.0.106.115\r\n    ports:\r\n    - name: 5000-tcp\r\n      port: 5000\r\n      protocol: TCP\r\n      targetPort: 5000\r\n    selector:\r\n      docker-registry: default\r\n    sessionAffinity: ClientIP\r\n    type: ClusterIP\r\n  status:\r\n    loadBalancer: {}\r\n- apiVersion: v1\r\n  kind: Service\r\n  metadata:\r\n    creationTimestamp: 2016-03-12T02:42:26Z\r\n    labels:\r\n      component: apiserver\r\n      provider: kubernetes\r\n    name: kubernetes\r\n    namespace: default\r\n    resourceVersion: \"7\"\r\n    selfLink: /api/v1/namespaces/default/services/kubernetes\r\n    uid: 0e908aeb-e7fc-11e5-b8b0-065db116a2cf\r\n  spec:\r\n    clusterIP: 10.0.0.1\r\n    portalIP: 10.0.0.1\r\n    ports:\r\n    - name: https\r\n      port: 443\r\n      protocol: TCP\r\n      targetPort: 443\r\n    sessionAffinity: None\r\n    type: ClusterIP\r\n  status:\r\n    loadBalancer: {}\r\nkind: List\r\nmetadata: {}\r\n```\r\n\r\n\r\n## Expected result\r\n\r\nThe replication controller should be created and the deployment should complete.\r\n\r\n## Additional information\r\n\r\nDiagnostics:\r\n\r\n```\r\n[Note] Determining if client configuration exists for client/cluster diagnostics\r\nInfo:  Successfully read a client config file at 'admin.kubeconfig'\r\nInfo:  Successfully read a client config file at '/home/paralin/.kube/config'\r\nInfo:  Using context for cluster-admin access: 'default/os-paral-in:443/system:admin'\r\n\r\n[Note] Running diagnostic: ConfigContexts[default/os-paral-in:443/system:admin]\r\n       Description: Validate client config context is complete and has connectivity\r\n       \r\nInfo:  The current client config context is 'default/os-paral-in:443/system:admin':\r\n       The server URL is 'https://os.paral.in:443'\r\n       The user authentication is 'system:admin/10-0-62-64:443'\r\n       The current project is 'default'\r\n       Successfully requested project list; has access to project(s):\r\n         [openshift-origin default kube-system openshift openshift-infra]\r\n       \r\n[Note] Running diagnostic: DiagnosticPod\r\n       Description: Create a pod to run diagnostics from the application standpoint\r\n       \r\nERROR: [DCli2012 from diagnostic DiagnosticPod@openshift/origin/pkg/diagnostics/client/run_diagnostics_pod.go:155]\r\n       See the errors below in the output from the diagnostic pod:\r\n       [Note] Running diagnostic: PodCheckAuth\r\n              Description: Check that service account credentials authenticate as expected\r\n              \r\n       ERROR: [DP1003 from diagnostic PodCheckAuth@openshift/origin/pkg/diagnostics/pod/auth.go:87]\r\n              Could not authenticate to the master with the service account credentials: the server could not find the requested resource (get users ~)\r\n              \r\n       ERROR: [DP1014 from diagnostic PodCheckAuth@openshift/origin/pkg/diagnostics/pod/auth.go:163]\r\n              Request to integrated registry timed out; this typically indicates network or SDN problems.\r\n              \r\n       [Note] Running diagnostic: PodCheckDns\r\n              Description: Check that DNS within a pod works as expected\r\n              \r\n       [Note] Summary of diagnostics execution (version v1.1.3):\r\n       [Note] Errors seen: 2\r\n       \r\n[Note] Running diagnostic: ClusterRegistry\r\n       Description: Check that there is a working Docker registry\r\n       \r\nERROR: [DClu1006 from diagnostic ClusterRegistry@openshift/origin/pkg/diagnostics/cluster/registry.go:202]\r\n       The \"docker-registry\" service exists but has no associated pods, so it\r\n       is not available. Builds and deployments that use the registry will fail.\r\n       \r\nERROR: [DClu1001 from diagnostic ClusterRegistry@openshift/origin/pkg/diagnostics/cluster/registry.go:172]\r\n       The \"docker-registry\" service exists but no pods currently running, so it\r\n       is not available. Builds and deployments that use the registry will fail.\r\n       \r\n[Note] Running diagnostic: ClusterRoleBindings\r\n       Description: Check that the default ClusterRoleBindings are present and contain the expected subjects\r\n       \r\nInfo:  clusterrolebinding/cluster-admins has more subjects than expected.\r\n       \r\n       Use the `oadm policy reconcile-cluster-role-bindings` command to update the role binding to remove extra subjects.\r\n       \r\nInfo:  clusterrolebinding/cluster-admins has extra subject {User  paralin    }.\r\n\r\n[Note] Running diagnostic: ClusterRoles\r\n       Description: Check that the default ClusterRoles are present and contain the expected permissions\r\n       \r\n[Note] Running diagnostic: ClusterRouterName\r\n       Description: Check there is a working router\r\n       \r\nWARN:  [DClu2001 from diagnostic ClusterRouter@openshift/origin/pkg/diagnostics/cluster/router.go:128]\r\n       There is no \"router\" DeploymentConfig. The router may have been named\r\n       something different, in which case this warning may be ignored.\r\n       \r\n       A router is not strictly required; however it is needed for accessing\r\n       pods from external networks and its absence likely indicates an incomplete\r\n       installation of the cluster.\r\n       \r\n       Use the 'oadm router' command to create a router.\r\n       \r\n[Note] Running diagnostic: MasterNode\r\n       Description: Check if master is also running node (for Open vSwitch)\r\n       \r\nERROR: [DClu3002 from diagnostic MasterNode@openshift/origin/pkg/diagnostics/cluster/master_node.go:98]\r\n       Client error while retrieving node records. Client retrieved records\r\n       during discovery, so this is likely to be a transient error. Try running\r\n       diagnostics again. If this message persists, there may be a permissions\r\n       problem with getting node records. The error was:\r\n       \r\n       (*errors.StatusError) found '<', expected: !, identifier, or 'end of string'\r\n       \r\n[Note] Running diagnostic: NodeDefinitions\r\n       Description: Check node records on master\r\n       \r\n[Note] Summary of diagnostics execution (version v1.1.3):\r\n[Note] Warnings seen: 1\r\n[Note] Errors seen: 4\r\n```\r\n\r\nI think the pod serviceaccount test is failing because it's hitting Kubernetes, not OpenShift with the service account info."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/196383851","html_url":"https://github.com/openshift/origin/issues/7973#issuecomment-196383851","issue_url":"https://api.github.com/repos/openshift/origin/issues/7973","id":196383851,"user":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"created_at":"2016-03-14T16:00:20Z","updated_at":"2016-03-14T16:00:20Z","body":"@paralin yes if you want service account tokens, you have to provide a key"}}