{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/47448","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/47448/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/47448/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/47448/events","html_url":"https://github.com/kubernetes/kubernetes/issues/47448","id":235624294,"number":47448,"title":"PodSecurityContext API compatibility broken between 1.6 and 1.7","user":{"login":"kow3ns","id":11380896,"avatar_url":"https://avatars0.githubusercontent.com/u/11380896?v=3","gravatar_id":"","url":"https://api.github.com/users/kow3ns","html_url":"https://github.com/kow3ns","followers_url":"https://api.github.com/users/kow3ns/followers","following_url":"https://api.github.com/users/kow3ns/following{/other_user}","gists_url":"https://api.github.com/users/kow3ns/gists{/gist_id}","starred_url":"https://api.github.com/users/kow3ns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kow3ns/subscriptions","organizations_url":"https://api.github.com/users/kow3ns/orgs","repos_url":"https://api.github.com/users/kow3ns/repos","events_url":"https://api.github.com/users/kow3ns/events{/privacy}","received_events_url":"https://api.github.com/users/kow3ns/received_events","type":"User","site_admin":false},"labels":[{"id":617149945,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/needs-sig","name":"needs-sig","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-06-13T17:09:51Z","updated_at":"2017-06-13T17:09:59Z","closed_at":null,"body":"** BUG REPORT** \r\n\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Kubernetes version**: \r\n1.7.x with a 1.6.x kubectl or any version of helm based on a vendored client at that version.\r\n\r\n\r\n**Environment**: \r\nThis is an API issue affecting all environments.\r\n\r\n\r\n**What happened**:\r\nWhen you attempt to apply or create a manifest containing any containers (e.g. DaemonSet, StatefulSet, Deployment) with a PodTemplateSpec with any Container having PodSecurityContext that attempts to set RunAsUser or FSGroup you will get an error message indicating that those fields are invalid.\r\n\r\n**What you expected to happen**:\r\nI expect to be able to create a Pods that do not run as root.\r\n\r\n\r\n**How to reproduce it**:\r\nBuild and install a 1.6.3 client and kube-up a cluster off of master. Attempt to create a manifest that uses the described features of security context. [Here](https://github.com/kow3ns/kubernetes-zookeeper/blob/master/manifests/zookeeper.yaml) is an example.\r\n\r\n\r\n**Anything else we need to know**:\r\n[This](https://github.com/kubernetes/kubernetes/commit/9440a68744ea97a45ceeef6d75466405ac101ea1) looks like the commit that modifies the v1/types.go in an incompatible way. "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/308184738","html_url":"https://github.com/kubernetes/kubernetes/issues/47448#issuecomment-308184738","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/47448","id":308184738,"user":{"login":"k8s-merge-robot","id":13653959,"avatar_url":"https://avatars3.githubusercontent.com/u/13653959?v=3","gravatar_id":"","url":"https://api.github.com/users/k8s-merge-robot","html_url":"https://github.com/k8s-merge-robot","followers_url":"https://api.github.com/users/k8s-merge-robot/followers","following_url":"https://api.github.com/users/k8s-merge-robot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-merge-robot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-merge-robot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-merge-robot/subscriptions","organizations_url":"https://api.github.com/users/k8s-merge-robot/orgs","repos_url":"https://api.github.com/users/k8s-merge-robot/repos","events_url":"https://api.github.com/users/k8s-merge-robot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-merge-robot/received_events","type":"User","site_admin":false},"created_at":"2017-06-13T17:09:59Z","updated_at":"2017-06-13T17:09:59Z","body":"@kow3ns There are no sig labels on this issue. Please [add a sig label](https://github.com/kubernetes/test-infra/blob/master/commands.md) by:<br>(1) mentioning a sig: `@kubernetes/sig-<team-name>-misc`<br>(2) specifying the label manually: `/sig <label>`<br><br>_Note: method (1) will trigger a notification to the team. You can find the team list [here](https://github.com/kubernetes/community/blob/master/sig-list.md) and label list [here](https://github.com/kubernetes/kubernetes/labels)_"}}
{"actor":{"display_login":"k8s-merge-robot"}}