{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/26057","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/26057/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/26057/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/26057/events","html_url":"https://github.com/kubernetes/kubernetes/pull/26057","id":156238887,"number":26057,"title":"Add sysctl proposal","user":{"login":"sttts","id":730123,"avatar_url":"https://avatars.githubusercontent.com/u/730123?v=3","gravatar_id":"","url":"https://api.github.com/users/sttts","html_url":"https://github.com/sttts","followers_url":"https://api.github.com/users/sttts/followers","following_url":"https://api.github.com/users/sttts/following{/other_user}","gists_url":"https://api.github.com/users/sttts/gists{/gist_id}","starred_url":"https://api.github.com/users/sttts/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sttts/subscriptions","organizations_url":"https://api.github.com/users/sttts/orgs","repos_url":"https://api.github.com/users/sttts/repos","events_url":"https://api.github.com/users/sttts/events{/privacy}","received_events_url":"https://api.github.com/users/sttts/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/api","name":"area/api","color":"e1ed21"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/security","name":"area/security","color":"d4c5f9"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20no","name":"cla: no","color":"e11d21"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/api-change","name":"kind/api-change","color":"c7def8"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/design","name":"kind/design","color":"c7def8"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/enhancement","name":"kind/enhancement","color":"c7def8"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/release-note-none","name":"release-note-none","color":"c2e0c6"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/L","name":"size/L","color":"ee9900"}],"state":"open","locked":false,"assignee":{"login":"sttts","id":730123,"avatar_url":"https://avatars.githubusercontent.com/u/730123?v=3","gravatar_id":"","url":"https://api.github.com/users/sttts","html_url":"https://github.com/sttts","followers_url":"https://api.github.com/users/sttts/followers","following_url":"https://api.github.com/users/sttts/following{/other_user}","gists_url":"https://api.github.com/users/sttts/gists{/gist_id}","starred_url":"https://api.github.com/users/sttts/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sttts/subscriptions","organizations_url":"https://api.github.com/users/sttts/orgs","repos_url":"https://api.github.com/users/sttts/repos","events_url":"https://api.github.com/users/sttts/events{/privacy}","received_events_url":"https://api.github.com/users/sttts/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2016-05-23T09:38:03Z","updated_at":"2016-05-31T07:51:20Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/26057","html_url":"https://github.com/kubernetes/kubernetes/pull/26057","diff_url":"https://github.com/kubernetes/kubernetes/pull/26057.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/26057.patch"},"body":"Solves https://github.com/kubernetes/kubernetes/issues/5095.\r\nAuthors: @hodovska, @ingvagabund, @sttts\r\n\r\nTODO / Open Questions:\r\n- [x] investigate pod vs. containers sysctl namespaces (IPC+net are shared among containers of a pod)\r\n- [x] investigate error behaviour if disallowed sysctls are passed to Docker\r\n- [x] get rkt feedback /cc @s-urbaniak\r\n- [x] investigate implications of `PodSecurityContext`. Is there any policy part involved to control who can change the security context and how?\r\n- [x] check whether this proposal is in-line with the plan for `PodSecurityContext`: compare [proposal](https://github.com/kubernetes/kubernetes/blob/master/docs/proposals/security-context-constraints.md) and [open issues of the implementation](https://github.com/kubernetes/kubernetes/issues/23217) /cc @pweil- "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/222616614","html_url":"https://github.com/kubernetes/kubernetes/pull/26057#issuecomment-222616614","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/26057","id":222616614,"user":{"login":"k8s-bot","id":12551979,"avatar_url":"https://avatars.githubusercontent.com/u/12551979?v=3","gravatar_id":"","url":"https://api.github.com/users/k8s-bot","html_url":"https://github.com/k8s-bot","followers_url":"https://api.github.com/users/k8s-bot/followers","following_url":"https://api.github.com/users/k8s-bot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-bot/subscriptions","organizations_url":"https://api.github.com/users/k8s-bot/orgs","repos_url":"https://api.github.com/users/k8s-bot/repos","events_url":"https://api.github.com/users/k8s-bot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-bot/received_events","type":"User","site_admin":false},"created_at":"2016-05-31T07:51:20Z","updated_at":"2016-05-31T07:51:20Z","body":"GCE e2e build/test **passed** for commit 58b9355c989783d1d79ae6a8e51b6b71c76336cc.\n* [Build Log](http://pr-test.k8s.io/26057/kubernetes-pull-build-test-e2e-gce/42613/build-log.txt)\n* [Test Artifacts](https://console.developers.google.com/storage/browser/kubernetes-jenkins/pr-logs/pull/26057/kubernetes-pull-build-test-e2e-gce/42613/artifacts/)\n* [Internal Jenkins Results](http://goto.google.com/prkubekins/job/kubernetes-pull-build-test-e2e-gce//42613)\n"}}
{"actor":{"display_login":"k8s-bot"}}