{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3793","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/3793/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3793/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3793/events","html_url":"https://github.com/openshift/origin/issues/3793","id":96155400,"number":3793,"title":"Create better experience around container user security","user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars2.githubusercontent.com/u/366488?v=4","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"labels":[{"id":210155542,"url":"https://api.github.com/repos/openshift/origin/labels/area/documentation","name":"area/documentation","color":"006b75","default":false},{"id":210179203,"url":"https://api.github.com/repos/openshift/origin/labels/area/security","name":"area/security","color":"006b75","default":false},{"id":210281835,"url":"https://api.github.com/repos/openshift/origin/labels/component/auth","name":"component/auth","color":"0052cc","default":false},{"id":200493322,"url":"https://api.github.com/repos/openshift/origin/labels/component/cli","name":"component/cli","color":"0052cc","default":false},{"id":118251701,"url":"https://api.github.com/repos/openshift/origin/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb","default":false},{"id":826745876,"url":"https://api.github.com/repos/openshift/origin/labels/lifecycle/stale","name":"lifecycle/stale","color":"795548","default":false},{"id":210151912,"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04","default":false}],"state":"open","locked":false,"assignee":{"login":"pmorie","id":366488,"avatar_url":"https://avatars2.githubusercontent.com/u/366488?v=4","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"assignees":[{"login":"pmorie","id":366488,"avatar_url":"https://avatars2.githubusercontent.com/u/366488?v=4","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false}],"milestone":null,"comments":3,"created_at":"2015-07-20T20:43:12Z","updated_at":"2018-03-08T11:10:30Z","closed_at":null,"author_association":"MEMBER","body":"We should have a better experience around restrictions for which user a container runs as.  Currently, the default is that service accounts receive access to the restricted security context constraints, which:\n1.  Prevents users from running privileged containers\n2.  Makes containers run as a random UID\n\nPeople run into rough edges when they want to:\n1.  Create containers that run as root\n2.  Create containers that run as the user/group specified in the docker image metadata\n\nWe need some combination of:\n1.  Improvement in making users aware of the consequences of running as root and how to enable the features they want\n2.  Making it easy for administrators to set convenient defaults for their users\n3.  Making it easier to switch between security context constraints, etc\n\n@pweil- @ncdc @smarterclayton @liggitt @deads2k  \n"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/371456957","html_url":"https://github.com/openshift/origin/issues/3793#issuecomment-371456957","issue_url":"https://api.github.com/repos/openshift/origin/issues/3793","id":371456957,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars2.githubusercontent.com/u/1779249?v=4","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2018-03-08T11:10:30Z","updated_at":"2018-03-08T11:10:30Z","author_association":"MEMBER","body":"Stale issues rot after 30d of inactivity.\n\nMark the issue as fresh by commenting `/remove-lifecycle rotten`.\nRotten issues close after an additional 30d of inactivity.\nExclude this issue from closing by commenting `/lifecycle frozen`.\n\nIf this issue is safe to close now please do so with `/close`.\n\n/lifecycle rotten\n/remove-lifecycle stale"}}
{"actor":{"display_login":"openshift-bot"}}