{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/1003","repository_url":"https://api.github.com/repos/kubernetes-incubator/bootkube","labels_url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/1003/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/1003/comments","events_url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/1003/events","html_url":"https://github.com/kubernetes-incubator/bootkube/pull/1003","id":369137233,"node_id":"MDExOlB1bGxSZXF1ZXN0MjIyMTUwNzE5","number":1003,"title":"Update Kubernetes from v1.11.3 to v1.12.1","user":{"login":"dghubble","id":2253428,"node_id":"MDQ6VXNlcjIyNTM0Mjg=","avatar_url":"https://avatars2.githubusercontent.com/u/2253428?v=4","gravatar_id":"","url":"https://api.github.com/users/dghubble","html_url":"https://github.com/dghubble","followers_url":"https://api.github.com/users/dghubble/followers","following_url":"https://api.github.com/users/dghubble/following{/other_user}","gists_url":"https://api.github.com/users/dghubble/gists{/gist_id}","starred_url":"https://api.github.com/users/dghubble/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dghubble/subscriptions","organizations_url":"https://api.github.com/users/dghubble/orgs","repos_url":"https://api.github.com/users/dghubble/repos","events_url":"https://api.github.com/users/dghubble/events{/privacy}","received_events_url":"https://api.github.com/users/dghubble/received_events","type":"User","site_admin":false},"labels":[{"id":484571320,"node_id":"MDU6TGFiZWw0ODQ1NzEzMjA=","url":"https://api.github.com/repos/kubernetes-incubator/bootkube/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"bfe5bf","default":false},{"id":679247174,"node_id":"MDU6TGFiZWw2NzkyNDcxNzQ=","url":"https://api.github.com/repos/kubernetes-incubator/bootkube/labels/size/S","name":"size/S","color":"77bb00","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2018-10-11T14:03:06Z","updated_at":"2018-10-17T04:08:25Z","closed_at":null,"author_association":"COLLABORATOR","pull_request":{"url":"https://api.github.com/repos/kubernetes-incubator/bootkube/pulls/1003","html_url":"https://github.com/kubernetes-incubator/bootkube/pull/1003","diff_url":"https://github.com/kubernetes-incubator/bootkube/pull/1003.diff","patch_url":"https://github.com/kubernetes-incubator/bootkube/pull/1003.patch"},"body":"* Workaround https://github.com/kubernetes/kubernetes/issues/68973 by providing an `emptyDir` for auto-generated controller-manager certs"},"comment":{"url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/comments/430482779","html_url":"https://github.com/kubernetes-incubator/bootkube/pull/1003#issuecomment-430482779","issue_url":"https://api.github.com/repos/kubernetes-incubator/bootkube/issues/1003","id":430482779,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMDQ4Mjc3OQ==","user":{"login":"dghubble","id":2253428,"node_id":"MDQ6VXNlcjIyNTM0Mjg=","avatar_url":"https://avatars2.githubusercontent.com/u/2253428?v=4","gravatar_id":"","url":"https://api.github.com/users/dghubble","html_url":"https://github.com/dghubble","followers_url":"https://api.github.com/users/dghubble/followers","following_url":"https://api.github.com/users/dghubble/following{/other_user}","gists_url":"https://api.github.com/users/dghubble/gists{/gist_id}","starred_url":"https://api.github.com/users/dghubble/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dghubble/subscriptions","organizations_url":"https://api.github.com/users/dghubble/orgs","repos_url":"https://api.github.com/users/dghubble/repos","events_url":"https://api.github.com/users/dghubble/events{/privacy}","received_events_url":"https://api.github.com/users/dghubble/received_events","type":"User","site_admin":false},"created_at":"2018-10-17T04:08:25Z","updated_at":"2018-10-17T04:08:25Z","author_association":"COLLABORATOR","body":"Concerning the controller-manager generated certs, I poked around and asked some questions. https://github.com/kubernetes/kubernetes/issues/68973#issuecomment-429638833\r\n\r\nI kinda favor not bothering to mint real certs for these yet. The HTTPS endpoint seems to be a new and so far unused endpoint that doesn't have clients. The HTTP endpoint is still always there. Nothing even happens if the HTTPS endpoint is turned off (--secure-port=0). Seems half baked / incomplete.\r\n\r\nIf we were aiming to tell users they can now talk to the controller-manager with TLS, I think we'd need to create a controller-manager service, use a conventional DNS name, mint certs with that name, and also tell people to just ignore the HTTP endpoint for now. Not sure what the use case is here really, feels kinda fruitless. :man_shrugging: "}}
{"actor":{"display_login":"dghubble"}}