{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/23217","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/23217/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/23217/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/23217/events","html_url":"https://github.com/kubernetes/kubernetes/issues/23217","id":141984993,"number":23217,"title":"Bring PodSecurityPolicy to usable state","user":{"login":"erictune","id":8105590,"avatar_url":"https://avatars.githubusercontent.com/u/8105590?v=3","gravatar_id":"","url":"https://api.github.com/users/erictune","html_url":"https://github.com/erictune","followers_url":"https://api.github.com/users/erictune/followers","following_url":"https://api.github.com/users/erictune/following{/other_user}","gists_url":"https://api.github.com/users/erictune/gists{/gist_id}","starred_url":"https://api.github.com/users/erictune/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erictune/subscriptions","organizations_url":"https://api.github.com/users/erictune/orgs","repos_url":"https://api.github.com/users/erictune/repos","events_url":"https://api.github.com/users/erictune/events{/privacy}","received_events_url":"https://api.github.com/users/erictune/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/auth","name":"area/auth","color":"00cc00"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/priority/P1","name":"priority/P1","color":"eb6420"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/control-plane","name":"team/control-plane","color":"d2b48c"}],"state":"open","locked":false,"assignee":{"login":"erictune","id":8105590,"avatar_url":"https://avatars.githubusercontent.com/u/8105590?v=3","gravatar_id":"","url":"https://api.github.com/users/erictune","html_url":"https://github.com/erictune","followers_url":"https://api.github.com/users/erictune/followers","following_url":"https://api.github.com/users/erictune/following{/other_user}","gists_url":"https://api.github.com/users/erictune/gists{/gist_id}","starred_url":"https://api.github.com/users/erictune/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erictune/subscriptions","organizations_url":"https://api.github.com/users/erictune/orgs","repos_url":"https://api.github.com/users/erictune/repos","events_url":"https://api.github.com/users/erictune/events{/privacy}","received_events_url":"https://api.github.com/users/erictune/received_events","type":"User","site_admin":false},"milestone":null,"comments":4,"created_at":"2016-03-18T21:39:28Z","updated_at":"2016-05-30T09:29:46Z","closed_at":null,"body":"The PodSecurityPolicy object was merged by @pweil- in #7893.\r\n\r\nThat defined a new type, (https://github.com/kubernetes/kubernetes/blob/master/pkg/apis/extensions/v1beta1/types.go#L919), a registry, kubectl support, and a client.  \r\n\r\nWe still need to:\r\n\r\n- [ ] expose the extension by default, and generate the docs for it.\r\n- [ ] write code that decides whether a Pod create/update is allowed by any maching PSP. (assume this exists downstream in openshift.)\r\n- [ ] decide on a way to determine which type applies to which requests; that is, something to bind request attributes, like user, groups, namespace, with the PSPs that apply to that pod.\r\n- [ ] write admission controller code that does the previous two things and says yes or no to Pod creates/updates.\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/222452448","html_url":"https://github.com/kubernetes/kubernetes/issues/23217#issuecomment-222452448","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/23217","id":222452448,"user":{"login":"sttts","id":730123,"avatar_url":"https://avatars.githubusercontent.com/u/730123?v=3","gravatar_id":"","url":"https://api.github.com/users/sttts","html_url":"https://github.com/sttts","followers_url":"https://api.github.com/users/sttts/followers","following_url":"https://api.github.com/users/sttts/following{/other_user}","gists_url":"https://api.github.com/users/sttts/gists{/gist_id}","starred_url":"https://api.github.com/users/sttts/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sttts/subscriptions","organizations_url":"https://api.github.com/users/sttts/orgs","repos_url":"https://api.github.com/users/sttts/repos","events_url":"https://api.github.com/users/sttts/events{/privacy}","received_events_url":"https://api.github.com/users/sttts/received_events","type":"User","site_admin":false},"created_at":"2016-05-30T09:29:46Z","updated_at":"2016-05-30T09:29:46Z","body":"Any news about this work? I am referencing `PodSecurityPolicy` in my sysctl proposal #26057."}}
{"actor":{"display_login":"sttts"}}