{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70314","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70314/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70314/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70314/events","html_url":"https://github.com/kubernetes/kubernetes/pull/70314","id":374574759,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI2MjQ3MTcz","number":70314,"title":"Revert \"limit forbidden error to details of what was forbidden\"","user":{"login":"samdamana","id":5892780,"node_id":"MDQ6VXNlcjU4OTI3ODA=","avatar_url":"https://avatars0.githubusercontent.com/u/5892780?v=4","gravatar_id":"","url":"https://api.github.com/users/samdamana","html_url":"https://github.com/samdamana","followers_url":"https://api.github.com/users/samdamana/followers","following_url":"https://api.github.com/users/samdamana/following{/other_user}","gists_url":"https://api.github.com/users/samdamana/gists{/gist_id}","starred_url":"https://api.github.com/users/samdamana/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samdamana/subscriptions","organizations_url":"https://api.github.com/users/samdamana/orgs","repos_url":"https://api.github.com/users/samdamana/repos","events_url":"https://api.github.com/users/samdamana/events{/privacy}","received_events_url":"https://api.github.com/users/samdamana/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[{"login":"liggitt","id":980082,"node_id":"MDQ6VXNlcjk4MDA4Mg==","avatar_url":"https://avatars0.githubusercontent.com/u/980082?v=4","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-10-26T23:03:22Z","updated_at":"2018-10-26T23:03:23Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/70314","html_url":"https://github.com/kubernetes/kubernetes/pull/70314","diff_url":"https://github.com/kubernetes/kubernetes/pull/70314.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/70314.patch"},"body":"Reverts changes from #67617.\r\n\r\nThe main justification for the original change (#67617) was the confusing \"Unknown user\" authorizer response returned by the GKE authorizor when an authorize request is made with a non-Google/GCP service account identity. This was leading to [confusion](https://github.com/kubernetes/kubernetes/pull/65906#discussion_r210048853). However one big down side in removing the authorizer's _reason_ is users never get constructive feedback on how to fix 403 Forbidden issues, e.g. \"Required permission container.pods.get\" for the GKE authorizer.\r\n\r\nRecently the GKE \"Unknown user\" error has been removed which should mitigate user confusion once this PR is submitted. At this point I think returning authorizer _reason_s is valuable and should be re-enabled.\r\n\r\n/kind design\r\n/assign liggitt\r\n\r\n```\r\nNONE\r\n```"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/433565371","html_url":"https://github.com/kubernetes/kubernetes/pull/70314#issuecomment-433565371","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70314","id":433565371,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMzU2NTM3MQ==","user":{"login":"k8s-ci-robot","id":20407524,"node_id":"MDQ6VXNlcjIwNDA3NTI0","avatar_url":"https://avatars0.githubusercontent.com/u/20407524?v=4","gravatar_id":"","url":"https://api.github.com/users/k8s-ci-robot","html_url":"https://github.com/k8s-ci-robot","followers_url":"https://api.github.com/users/k8s-ci-robot/followers","following_url":"https://api.github.com/users/k8s-ci-robot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-ci-robot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-ci-robot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-ci-robot/subscriptions","organizations_url":"https://api.github.com/users/k8s-ci-robot/orgs","repos_url":"https://api.github.com/users/k8s-ci-robot/repos","events_url":"https://api.github.com/users/k8s-ci-robot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-ci-robot/received_events","type":"User","site_admin":false},"created_at":"2018-10-26T23:03:23Z","updated_at":"2018-10-26T23:03:23Z","author_association":"CONTRIBUTOR","body":"@samdamana: Adding the \"do-not-merge/release-note-label-needed\" label because no release-note block was detected, please follow our [release note process](https://git.k8s.io/community/contributors/guide/release-notes.md) to remove it.\n\n<details>\n\nInstructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.\n</details>"}}
{"actor":{"display_login":"k8s-ci-robot"}}