{"action":"created","comment":{"url":"https://api.github.com/repos/kubernetes/community/pulls/comments/228714654","pull_request_review_id":169057385,"id":228714654,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIyODcxNDY1NA==","diff_hunk":"@@ -0,0 +1,163 @@\n+---\n+kep-number: 0\n+title: Bounding Self-Labeling Kubelets\n+authors:\n+  - \"@mikedanese\"\n+  - \"@liggitt\"\n+owning-sig: sig-auth\n+participating-sigs:\n+  - sig-node\n+  - sig-storage\n+reviewers:\n+  - \"@saad-ali\"\n+  - \"@tallclair\"\n+  - \"@deads2k\"\n+approvers:\n+  - \"@tallclair\"\n+  - \"@smarterclayton\"\n+creation-date: 2017-08-14\n+last-updated: 2018-10-25\n+status: provisional\n+---\n+\n+# Bounding Self-Labeling Kubelets\n+\n+## Motivation\n+\n+Today the node client has total authority over its own Node labels.\n+This ability is incredibly useful for the node auto-registration flow.\n+The kubelet reports a set of well-known labels, as well as additional\n+labels specified on the command line with `--node-labels`.\n+\n+While this distributed method of registration is convenient and expedient, it\n+has two problems that a centralized approach would not have. Minorly, it makes\n+management difficult. Instead of configuring labels in a centralized\n+place, we must configure `N` kubelet command lines. More significantly, the\n+approach greatly compromises security. Below are two straightforward escalations\n+on an initially compromised node that exhibit the attack vector.\n+\n+### Capturing Dedicated Workloads\n+\n+Suppose company `foo` needs to run an application that deals with PII on\n+dedicated nodes to comply with government regulation. A common mechanism for\n+implementing dedicated nodes in Kubernetes today is to set a label or taint\n+(e.g. `foo/dedicated=customer-info-app`) on the node and to select these\n+dedicated nodes in the workload controller running `customer-info-app`.\n+\n+Since the nodes self reports labels upon registration, an intruder can easily\n+register a compromised node with label `foo/dedicated=customer-info-app`. The\n+scheduler will then bind `customer-info-app` to the compromised node potentially\n+giving the intruder easy access to the PII.\n+\n+This attack also extends to secrets. Suppose company `foo` runs their outward\n+facing nginx on dedicated nodes to reduce exposure to the company's publicly\n+trusted server certificates. They use the secret mechanism to distribute the\n+serving certificate key. An intruder captures the dedicated nginx workload in\n+the same way and can now use the node certificate to read the company's serving\n+certificate key.\n+\n+## Proposal\n+\n+The NodeRestriction admission plugin will be updated to limit the labels a kubelet\n+can set on its Node object. Kubelets will only be allowed to set the following labels.","path":"keps/sig-auth/0000-20170814-bounding-self-labeling-kubelets.md","position":62,"original_position":62,"commit_id":"cde0687b29f61924e2ab8862f78440b24b4f9643","original_commit_id":"cde0687b29f61924e2ab8862f78440b24b4f9643","user":{"login":"szuecs","id":50872,"node_id":"MDQ6VXNlcjUwODcy","avatar_url":"https://avatars2.githubusercontent.com/u/50872?v=4","gravatar_id":"","url":"https://api.github.com/users/szuecs","html_url":"https://github.com/szuecs","followers_url":"https://api.github.com/users/szuecs/followers","following_url":"https://api.github.com/users/szuecs/following{/other_user}","gists_url":"https://api.github.com/users/szuecs/gists{/gist_id}","starred_url":"https://api.github.com/users/szuecs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/szuecs/subscriptions","organizations_url":"https://api.github.com/users/szuecs/orgs","repos_url":"https://api.github.com/users/szuecs/repos","events_url":"https://api.github.com/users/szuecs/events{/privacy}","received_events_url":"https://api.github.com/users/szuecs/received_events","type":"User","site_admin":false},"body":"Thanks for your clarification ","created_at":"2018-10-27T14:29:14Z","updated_at":"2018-10-27T14:29:14Z","html_url":"https://github.com/kubernetes/community/pull/911#discussion_r228714654","pull_request_url":"https://api.github.com/repos/kubernetes/community/pulls/911","author_association":"NONE","_links":{"self":{"href":"https://api.github.com/repos/kubernetes/community/pulls/comments/228714654"},"html":{"href":"https://github.com/kubernetes/community/pull/911#discussion_r228714654"},"pull_request":{"href":"https://api.github.com/repos/kubernetes/community/pulls/911"}},"in_reply_to_id":228637559},"pull_request":{"url":"https://api.github.com/repos/kubernetes/community/pulls/911","id":135703379,"node_id":"MDExOlB1bGxSZXF1ZXN0MTM1NzAzMzc5","html_url":"https://github.com/kubernetes/community/pull/911","diff_url":"https://github.com/kubernetes/community/pull/911.diff","patch_url":"https://github.com/kubernetes/community/pull/911.patch","issue_url":"https://api.github.com/repos/kubernetes/community/issues/911","number":911,"state":"open","locked":false,"title":"design: reduce scope of node on node object","user":{"login":"mikedanese","id":1787169,"node_id":"MDQ6VXNlcjE3ODcxNjk=","avatar_url":"https://avatars3.githubusercontent.com/u/1787169?v=4","gravatar_id":"","url":"https://api.github.com/users/mikedanese","html_url":"https://github.com/mikedanese","followers_url":"https://api.github.com/users/mikedanese/followers","following_url":"https://api.github.com/users/mikedanese/following{/other_user}","gists_url":"https://api.github.com/users/mikedanese/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedanese/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedanese/subscriptions","organizations_url":"https://api.github.com/users/mikedanese/orgs","repos_url":"https://api.github.com/users/mikedanese/repos","events_url":"https://api.github.com/users/mikedanese/events{/privacy}","received_events_url":"https://api.github.com/users/mikedanese/received_events","type":"User","site_admin":false},"body":"Super mini design doc about centralizing reporting of some sensitive kubelet attributes.\r\n\r\n@kubernetes/sig-auth-misc \r\n@roberthbailey \r\n@kubernetes/sig-cluster-lifecycle-misc as it relates to registration","created_at":"2017-08-14T22:47:45Z","updated_at":"2018-10-27T14:29:14Z","closed_at":null,"merged_at":null,"merge_commit_sha":"267b8da4f65b7397cf103af13d1952fa16a0cd00","assignee":{"login":"tallclair","id":29742491,"node_id":"MDQ6VXNlcjI5NzQyNDkx","avatar_url":"https://avatars1.githubusercontent.com/u/29742491?v=4","gravatar_id":"","url":"https://api.github.com/users/tallclair","html_url":"https://github.com/tallclair","followers_url":"https://api.github.com/users/tallclair/followers","following_url":"https://api.github.com/users/tallclair/following{/other_user}","gists_url":"https://api.github.com/users/tallclair/gists{/gist_id}","starred_url":"https://api.github.com/users/tallclair/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tallclair/subscriptions","organizations_url":"https://api.github.com/users/tallclair/orgs","repos_url":"https://api.github.com/users/tallclair/repos","events_url":"https://api.github.com/users/tallclair/events{/privacy}","received_events_url":"https://api.github.com/users/tallclair/received_events","type":"User","site_admin":false},"assignees":[{"login":"smarterclayton","id":1163175,"node_id":"MDQ6VXNlcjExNjMxNzU=","avatar_url":"https://avatars0.githubusercontent.com/u/1163175?v=4","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},{"login":"saad-ali","id":10052848,"node_id":"MDQ6VXNlcjEwMDUyODQ4","avatar_url":"https://avatars1.githubusercontent.com/u/10052848?v=4","gravatar_id":"","url":"https://api.github.com/users/saad-ali","html_url":"https://github.com/saad-ali","followers_url":"https://api.github.com/users/saad-ali/followers","following_url":"https://api.github.com/users/saad-ali/following{/other_user}","gists_url":"https://api.github.com/users/saad-ali/gists{/gist_id}","starred_url":"https://api.github.com/users/saad-ali/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saad-ali/subscriptions","organizations_url":"https://api.github.com/users/saad-ali/orgs","repos_url":"https://api.github.com/users/saad-ali/repos","events_url":"https://api.github.com/users/saad-ali/events{/privacy}","received_events_url":"https://api.github.com/users/saad-ali/received_events","type":"User","site_admin":false},{"login":"tallclair","id":29742491,"node_id":"MDQ6VXNlcjI5NzQyNDkx","avatar_url":"https://avatars1.githubusercontent.com/u/29742491?v=4","gravatar_id":"","url":"https://api.github.com/users/tallclair","html_url":"https://github.com/tallclair","followers_url":"https://api.github.com/users/tallclair/followers","following_url":"https://api.github.com/users/tallclair/following{/other_user}","gists_url":"https://api.github.com/users/tallclair/gists{/gist_id}","starred_url":"https://api.github.com/users/tallclair/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tallclair/subscriptions","organizations_url":"https://api.github.com/users/tallclair/orgs","repos_url":"https://api.github.com/users/tallclair/repos","events_url":"https://api.github.com/users/tallclair/events{/privacy}","received_events_url":"https://api.github.com/users/tallclair/received_events","type":"User","site_admin":false}],"requested_reviewers":[{"login":"mattmoyer","id":3210334,"node_id":"MDQ6VXNlcjMyMTAzMzQ=","avatar_url":"https://avatars3.githubusercontent.com/u/3210334?v=4","gravatar_id":"","url":"https://api.github.com/users/mattmoyer","html_url":"https://github.com/mattmoyer","followers_url":"https://api.github.com/users/mattmoyer/followers","following_url":"https://api.github.com/users/mattmoyer/following{/other_user}","gists_url":"https://api.github.com/users/mattmoyer/gists{/gist_id}","starred_url":"https://api.github.com/users/mattmoyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattmoyer/subscriptions","organizations_url":"https://api.github.com/users/mattmoyer/orgs","repos_url":"https://api.github.com/users/mattmoyer/repos","events_url":"https://api.github.com/users/mattmoyer/events{/privacy}","received_events_url":"https://api.github.com/users/mattmoyer/received_events","type":"User","site_admin":false},{"login":"cjcullen","id":7154008,"node_id":"MDQ6VXNlcjcxNTQwMDg=","avatar_url":"https://avatars2.githubusercontent.com/u/7154008?v=4","gravatar_id":"","url":"https://api.github.com/users/cjcullen","html_url":"https://github.com/cjcullen","followers_url":"https://api.github.com/users/cjcullen/followers","following_url":"https://api.github.com/users/cjcullen/following{/other_user}","gists_url":"https://api.github.com/users/cjcullen/gists{/gist_id}","starred_url":"https://api.github.com/users/cjcullen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cjcullen/subscriptions","organizations_url":"https://api.github.com/users/cjcullen/orgs","repos_url":"https://api.github.com/users/cjcullen/repos","events_url":"https://api.github.com/users/cjcullen/events{/privacy}","received_events_url":"https://api.github.com/users/cjcullen/received_events","type":"User","site_admin":false},{"login":"roberthbailey","id":7751204,"node_id":"MDQ6VXNlcjc3NTEyMDQ=","avatar_url":"https://avatars1.githubusercontent.com/u/7751204?v=4","gravatar_id":"","url":"https://api.github.com/users/roberthbailey","html_url":"https://github.com/roberthbailey","followers_url":"https://api.github.com/users/roberthbailey/followers","following_url":"https://api.github.com/users/roberthbailey/following{/other_user}","gists_url":"https://api.github.com/users/roberthbailey/gists{/gist_id}","starred_url":"https://api.github.com/users/roberthbailey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/roberthbailey/subscriptions","organizations_url":"https://api.github.com/users/roberthbailey/orgs","repos_url":"https://api.github.com/users/roberthbailey/repos","events_url":"https://api.github.com/users/roberthbailey/events{/privacy}","received_events_url":"https://api.github.com/users/roberthbailey/received_events","type":"User","site_admin":false},{"login":"davidopp","id":8264113,"node_id":"MDQ6VXNlcjgyNjQxMTM=","avatar_url":"https://avatars2.githubusercontent.com/u/8264113?v=4","gravatar_id":"","url":"https://api.github.com/users/davidopp","html_url":"https://github.com/davidopp","followers_url":"https://api.github.com/users/davidopp/followers","following_url":"https://api.github.com/users/davidopp/following{/other_user}","gists_url":"https://api.github.com/users/davidopp/gists{/gist_id}","starred_url":"https://api.github.com/users/davidopp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidopp/subscriptions","organizations_url":"https://api.github.com/users/davidopp/orgs","repos_url":"https://api.github.com/users/davidopp/repos","events_url":"https://api.github.com/users/davidopp/events{/privacy}","received_events_url":"https://api.github.com/users/davidopp/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[{"id":486032367,"node_id":"MDU6TGFiZWw0ODYwMzIzNjc=","url":"https://api.github.com/repos/kubernetes/community/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"bfe5bf","default":false},{"id":653942785,"node_id":"MDU6TGFiZWw2NTM5NDI3ODU=","url":"https://api.github.com/repos/kubernetes/community/labels/kind/design","name":"kind/design","color":"c7def8","default":false},{"id":653942788,"node_id":"MDU6TGFiZWw2NTM5NDI3ODg=","url":"https://api.github.com/repos/kubernetes/community/labels/kind/feature","name":"kind/feature","color":"c7def8","default":false},{"id":1076074046,"node_id":"MDU6TGFiZWwxMDc2MDc0MDQ2","url":"https://api.github.com/repos/kubernetes/community/labels/kind/kep","name":"kind/kep","color":"cc99ff","default":false},{"id":778120885,"node_id":"MDU6TGFiZWw3NzgxMjA4ODU=","url":"https://api.github.com/repos/kubernetes/community/labels/lifecycle/frozen","name":"lifecycle/frozen","color":"d3e2f0","default":false},{"id":653942863,"node_id":"MDU6TGFiZWw2NTM5NDI4NjM=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/architecture","name":"sig/architecture","color":"d2b48c","default":false},{"id":653942870,"node_id":"MDU6TGFiZWw2NTM5NDI4NzA=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/auth","name":"sig/auth","color":"d2b48c","default":false},{"id":653942877,"node_id":"MDU6TGFiZWw2NTM5NDI4Nzc=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/cluster-lifecycle","name":"sig/cluster-lifecycle","color":"d2b48c","default":false},{"id":653942891,"node_id":"MDU6TGFiZWw2NTM5NDI4OTE=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/node","name":"sig/node","color":"d2b48c","default":false},{"id":670265417,"node_id":"MDU6TGFiZWw2NzAyNjU0MTc=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/pm","name":"sig/pm","color":"d2b48c","default":false},{"id":653942904,"node_id":"MDU6TGFiZWw2NTM5NDI5MDQ=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/scheduling","name":"sig/scheduling","color":"d2b48c","default":false},{"id":653942910,"node_id":"MDU6TGFiZWw2NTM5NDI5MTA=","url":"https://api.github.com/repos/kubernetes/community/labels/size/L","name":"size/L","color":"ee9900","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/kubernetes/community/pulls/911/commits","review_comments_url":"https://api.github.com/repos/kubernetes/community/pulls/911/comments","review_comment_url":"https://api.github.com/repos/kubernetes/community/pulls/comments{/number}","comments_url":"https://api.github.com/repos/kubernetes/community/issues/911/comments","statuses_url":"https://api.github.com/repos/kubernetes/community/statuses/cde0687b29f61924e2ab8862f78440b24b4f9643","head":{"label":"mikedanese:limit-node","ref":"limit-node","sha":"cde0687b29f61924e2ab8862f78440b24b4f9643","user":{"login":"mikedanese","id":1787169,"node_id":"MDQ6VXNlcjE3ODcxNjk=","avatar_url":"https://avatars3.githubusercontent.com/u/1787169?v=4","gravatar_id":"","url":"https://api.github.com/users/mikedanese","html_url":"https://github.com/mikedanese","followers_url":"https://api.github.com/users/mikedanese/followers","following_url":"https://api.github.com/users/mikedanese/following{/other_user}","gists_url":"https://api.github.com/users/mikedanese/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedanese/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedanese/subscriptions","organizations_url":"https://api.github.com/users/mikedanese/orgs","repos_url":"https://api.github.com/users/mikedanese/repos","events_url":"https://api.github.com/users/mikedanese/events{/privacy}","received_events_url":"https://api.github.com/users/mikedanese/received_events","type":"User","site_admin":false},"repo":{"id":100308702,"node_id":"MDEwOlJlcG9zaXRvcnkxMDAzMDg3MDI=","name":"community","full_name":"mikedanese/community","private":false,"owner":{"login":"mikedanese","id":1787169,"node_id":"MDQ6VXNlcjE3ODcxNjk=","avatar_url":"https://avatars3.githubusercontent.com/u/1787169?v=4","gravatar_id":"","url":"https://api.github.com/users/mikedanese","html_url":"https://github.com/mikedanese","followers_url":"https://api.github.com/users/mikedanese/followers","following_url":"https://api.github.com/users/mikedanese/following{/other_user}","gists_url":"https://api.github.com/users/mikedanese/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedanese/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedanese/subscriptions","organizations_url":"https://api.github.com/users/mikedanese/orgs","repos_url":"https://api.github.com/users/mikedanese/repos","events_url":"https://api.github.com/users/mikedanese/events{/privacy}","received_events_url":"https://api.github.com/users/mikedanese/received_events","type":"User","site_admin":false},"html_url":"https://github.com/mikedanese/community","description":"Kubernetes community content","fork":true,"url":"https://api.github.com/repos/mikedanese/community","forks_url":"https://api.github.com/repos/mikedanese/community/forks","keys_url":"https://api.github.com/repos/mikedanese/community/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mikedanese/community/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mikedanese/community/teams","hooks_url":"https://api.github.com/repos/mikedanese/community/hooks","issue_events_url":"https://api.github.com/repos/mikedanese/community/issues/events{/number}","events_url":"https://api.github.com/repos/mikedanese/community/events","assignees_url":"https://api.github.com/repos/mikedanese/community/assignees{/user}","branches_url":"https://api.github.com/repos/mikedanese/community/branches{/branch}","tags_url":"https://api.github.com/repos/mikedanese/community/tags","blobs_url":"https://api.github.com/repos/mikedanese/community/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mikedanese/community/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mikedanese/community/git/refs{/sha}","trees_url":"https://api.github.com/repos/mikedanese/community/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mikedanese/community/statuses/{sha}","languages_url":"https://api.github.com/repos/mikedanese/community/languages","stargazers_url":"https://api.github.com/repos/mikedanese/community/stargazers","contributors_url":"https://api.github.com/repos/mikedanese/community/contributors","subscribers_url":"https://api.github.com/repos/mikedanese/community/subscribers","subscription_url":"https://api.github.com/repos/mikedanese/community/subscription","commits_url":"https://api.github.com/repos/mikedanese/community/commits{/sha}","git_commits_url":"https://api.github.com/repos/mikedanese/community/git/commits{/sha}","comments_url":"https://api.github.com/repos/mikedanese/community/comments{/number}","issue_comment_url":"https://api.github.com/repos/mikedanese/community/issues/comments{/number}","contents_url":"https://api.github.com/repos/mikedanese/community/contents/{+path}","compare_url":"https://api.github.com/repos/mikedanese/community/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mikedanese/community/merges","archive_url":"https://api.github.com/repos/mikedanese/community/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mikedanese/community/downloads","issues_url":"https://api.github.com/repos/mikedanese/community/issues{/number}","pulls_url":"https://api.github.com/repos/mikedanese/community/pulls{/number}","milestones_url":"https://api.github.com/repos/mikedanese/community/milestones{/number}","notifications_url":"https://api.github.com/repos/mikedanese/community/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mikedanese/community/labels{/name}","releases_url":"https://api.github.com/repos/mikedanese/community/releases{/id}","deployments_url":"https://api.github.com/repos/mikedanese/community/deployments","created_at":"2017-08-14T20:54:44Z","updated_at":"2018-05-11T20:58:25Z","pushed_at":"2018-10-25T05:28:32Z","git_url":"git://github.com/mikedanese/community.git","ssh_url":"git@github.com:mikedanese/community.git","clone_url":"https://github.com/mikedanese/community.git","svn_url":"https://github.com/mikedanese/community","homepage":"","size":33741,"stargazers_count":0,"watchers_count":0,"language":"Go","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":1,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"kubernetes:master","ref":"master","sha":"d41c193c910c4bbeab6e28d736020a0f7bfc583f","user":{"login":"kubernetes","id":13629408,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNjI5NDA4","avatar_url":"https://avatars2.githubusercontent.com/u/13629408?v=4","gravatar_id":"","url":"https://api.github.com/users/kubernetes","html_url":"https://github.com/kubernetes","followers_url":"https://api.github.com/users/kubernetes/followers","following_url":"https://api.github.com/users/kubernetes/following{/other_user}","gists_url":"https://api.github.com/users/kubernetes/gists{/gist_id}","starred_url":"https://api.github.com/users/kubernetes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubernetes/subscriptions","organizations_url":"https://api.github.com/users/kubernetes/orgs","repos_url":"https://api.github.com/users/kubernetes/repos","events_url":"https://api.github.com/users/kubernetes/events{/privacy}","received_events_url":"https://api.github.com/users/kubernetes/received_events","type":"Organization","site_admin":false},"repo":{"id":57939112,"node_id":"MDEwOlJlcG9zaXRvcnk1NzkzOTExMg==","name":"community","full_name":"kubernetes/community","private":false,"owner":{"login":"kubernetes","id":13629408,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEzNjI5NDA4","avatar_url":"https://avatars2.githubusercontent.com/u/13629408?v=4","gravatar_id":"","url":"https://api.github.com/users/kubernetes","html_url":"https://github.com/kubernetes","followers_url":"https://api.github.com/users/kubernetes/followers","following_url":"https://api.github.com/users/kubernetes/following{/other_user}","gists_url":"https://api.github.com/users/kubernetes/gists{/gist_id}","starred_url":"https://api.github.com/users/kubernetes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubernetes/subscriptions","organizations_url":"https://api.github.com/users/kubernetes/orgs","repos_url":"https://api.github.com/users/kubernetes/repos","events_url":"https://api.github.com/users/kubernetes/events{/privacy}","received_events_url":"https://api.github.com/users/kubernetes/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/kubernetes/community","description":"Kubernetes community content","fork":false,"url":"https://api.github.com/repos/kubernetes/community","forks_url":"https://api.github.com/repos/kubernetes/community/forks","keys_url":"https://api.github.com/repos/kubernetes/community/keys{/key_id}","collaborators_url":"https://api.github.com/repos/kubernetes/community/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/kubernetes/community/teams","hooks_url":"https://api.github.com/repos/kubernetes/community/hooks","issue_events_url":"https://api.github.com/repos/kubernetes/community/issues/events{/number}","events_url":"https://api.github.com/repos/kubernetes/community/events","assignees_url":"https://api.github.com/repos/kubernetes/community/assignees{/user}","branches_url":"https://api.github.com/repos/kubernetes/community/branches{/branch}","tags_url":"https://api.github.com/repos/kubernetes/community/tags","blobs_url":"https://api.github.com/repos/kubernetes/community/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/kubernetes/community/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/kubernetes/community/git/refs{/sha}","trees_url":"https://api.github.com/repos/kubernetes/community/git/trees{/sha}","statuses_url":"https://api.github.com/repos/kubernetes/community/statuses/{sha}","languages_url":"https://api.github.com/repos/kubernetes/community/languages","stargazers_url":"https://api.github.com/repos/kubernetes/community/stargazers","contributors_url":"https://api.github.com/repos/kubernetes/community/contributors","subscribers_url":"https://api.github.com/repos/kubernetes/community/subscribers","subscription_url":"https://api.github.com/repos/kubernetes/community/subscription","commits_url":"https://api.github.com/repos/kubernetes/community/commits{/sha}","git_commits_url":"https://api.github.com/repos/kubernetes/community/git/commits{/sha}","comments_url":"https://api.github.com/repos/kubernetes/community/comments{/number}","issue_comment_url":"https://api.github.com/repos/kubernetes/community/issues/comments{/number}","contents_url":"https://api.github.com/repos/kubernetes/community/contents/{+path}","compare_url":"https://api.github.com/repos/kubernetes/community/compare/{base}...{head}","merges_url":"https://api.github.com/repos/kubernetes/community/merges","archive_url":"https://api.github.com/repos/kubernetes/community/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/kubernetes/community/downloads","issues_url":"https://api.github.com/repos/kubernetes/community/issues{/number}","pulls_url":"https://api.github.com/repos/kubernetes/community/pulls{/number}","milestones_url":"https://api.github.com/repos/kubernetes/community/milestones{/number}","notifications_url":"https://api.github.com/repos/kubernetes/community/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/kubernetes/community/labels{/name}","releases_url":"https://api.github.com/repos/kubernetes/community/releases{/id}","deployments_url":"https://api.github.com/repos/kubernetes/community/deployments","created_at":"2016-05-03T03:36:05Z","updated_at":"2018-10-27T13:12:30Z","pushed_at":"2018-10-27T10:31:26Z","git_url":"git://github.com/kubernetes/community.git","ssh_url":"git@github.com:kubernetes/community.git","clone_url":"https://github.com/kubernetes/community.git","svn_url":"https://github.com/kubernetes/community","homepage":"","size":34450,"stargazers_count":2665,"watchers_count":2665,"language":"Go","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":1535,"mirror_url":null,"archived":false,"open_issues_count":240,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":1535,"open_issues":240,"watchers":2665,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/kubernetes/community/pulls/911"},"html":{"href":"https://github.com/kubernetes/community/pull/911"},"issue":{"href":"https://api.github.com/repos/kubernetes/community/issues/911"},"comments":{"href":"https://api.github.com/repos/kubernetes/community/issues/911/comments"},"review_comments":{"href":"https://api.github.com/repos/kubernetes/community/pulls/911/comments"},"review_comment":{"href":"https://api.github.com/repos/kubernetes/community/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/kubernetes/community/pulls/911/commits"},"statuses":{"href":"https://api.github.com/repos/kubernetes/community/statuses/cde0687b29f61924e2ab8862f78440b24b4f9643"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"szuecs"}}