{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/6470","labels_url":"https://api.github.com/repos/openshift/origin/issues/6470/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/6470/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/6470/events","html_url":"https://github.com/openshift/origin/pull/6470","id":123532419,"number":6470,"title":"capability defaulting","user":{"login":"pweil-","id":5230419,"avatar_url":"https://avatars.githubusercontent.com/u/5230419?v=3","gravatar_id":"","url":"https://api.github.com/users/pweil-","html_url":"https://github.com/pweil-","followers_url":"https://api.github.com/users/pweil-/followers","following_url":"https://api.github.com/users/pweil-/following{/other_user}","gists_url":"https://api.github.com/users/pweil-/gists{/gist_id}","starred_url":"https://api.github.com/users/pweil-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pweil-/subscriptions","organizations_url":"https://api.github.com/users/pweil-/orgs","repos_url":"https://api.github.com/users/pweil-/repos","events_url":"https://api.github.com/users/pweil-/events{/privacy}","received_events_url":"https://api.github.com/users/pweil-/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/approved","name":"approved","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":21,"created_at":"2015-12-22T18:27:10Z","updated_at":"2016-01-14T17:21:09Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/6470","html_url":"https://github.com/openshift/origin/pull/6470","diff_url":"https://github.com/openshift/origin/pull/6470.diff","patch_url":"https://github.com/openshift/origin/pull/6470.patch"},"body":"@smarterclayton @eparis - here is the WIP for adding required add/drops into SCCs.  PTAL\r\n\r\nThe mechanics are:\r\n\r\n1.  You may define `requiredCapabilities` in the SCC which can include adds and drops\r\n1.  Defaulting will produce\r\n     1.  Adds: all required caps + container requested adds - container requested drops (you can drop required adds if you want, just means your container can do less)\r\n     1.  Drops: all required drops + container requested drops\r\n1.  Validation will ensure\r\n     1.  Adds: all adds must be in either the required or allowed add lists of the SCC\r\n     1.  Drops:  all required drops are in the drop set"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/171712276","html_url":"https://github.com/openshift/origin/pull/6470#issuecomment-171712276","issue_url":"https://api.github.com/repos/openshift/origin/issues/6470","id":171712276,"user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"created_at":"2016-01-14T17:21:09Z","updated_at":"2016-01-14T17:21:09Z","body":"This LGTM."}}