{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/20434","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/20434/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/20434/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/20434/events","html_url":"https://github.com/kubernetes/kubernetes/issues/20434","id":130481505,"number":20434,"title":"Default ports and permissions on e2e test containers. ","user":{"login":"timothysc","id":169553,"avatar_url":"https://avatars.githubusercontent.com/u/169553?v=3","gravatar_id":"","url":"https://api.github.com/users/timothysc","html_url":"https://github.com/timothysc","followers_url":"https://api.github.com/users/timothysc/followers","following_url":"https://api.github.com/users/timothysc/following{/other_user}","gists_url":"https://api.github.com/users/timothysc/gists{/gist_id}","starred_url":"https://api.github.com/users/timothysc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timothysc/subscriptions","organizations_url":"https://api.github.com/users/timothysc/orgs","repos_url":"https://api.github.com/users/timothysc/repos","events_url":"https://api.github.com/users/timothysc/events{/privacy}","received_events_url":"https://api.github.com/users/timothysc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-01T20:59:17Z","updated_at":"2016-02-01T21:00:30Z","closed_at":null,"body":"Currently openshift has a different security model applied to containers see: https://docs.openshift.com/enterprise/3.0/architecture/additional_concepts/authorization.html#security-context-constraints as well as https://docs.openshift.com/enterprise/3.0/admin_guide/manage_scc.html.  \r\n\r\nWhen running a number of test containers, they open default ports e.g. 80 , and in our env we will often encounter issues such as: \r\n\r\n```\r\n$ sudo docker logs 3bfa2ba69d65\r\n2016/02/01 20:11:20 listen tcp :80: bind: permission denied\r\n```\r\n\r\nI think this can be easily circumvented by setting up the containers to not assume root like capabilities in the pods and instead port forward where applicable. \r\n\r\n@ixdy @soltysh @jayunit100  \r\n/cc @kubernetes/sig-testing "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/178186943","html_url":"https://github.com/kubernetes/kubernetes/issues/20434#issuecomment-178186943","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/20434","id":178186943,"user":{"login":"timothysc","id":169553,"avatar_url":"https://avatars.githubusercontent.com/u/169553?v=3","gravatar_id":"","url":"https://api.github.com/users/timothysc","html_url":"https://github.com/timothysc","followers_url":"https://api.github.com/users/timothysc/followers","following_url":"https://api.github.com/users/timothysc/following{/other_user}","gists_url":"https://api.github.com/users/timothysc/gists{/gist_id}","starred_url":"https://api.github.com/users/timothysc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timothysc/subscriptions","organizations_url":"https://api.github.com/users/timothysc/orgs","repos_url":"https://api.github.com/users/timothysc/repos","events_url":"https://api.github.com/users/timothysc/events{/privacy}","received_events_url":"https://api.github.com/users/timothysc/received_events","type":"User","site_admin":false},"created_at":"2016-02-01T21:00:29Z","updated_at":"2016-02-01T21:00:29Z","body":"xrefs: https://github.com/kubernetes/kubernetes/pull/12221 , https://github.com/openshift/origin/issues/6882"}}