{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/community/issues/639","repository_url":"https://api.github.com/repos/kubernetes/community","labels_url":"https://api.github.com/repos/kubernetes/community/issues/639/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/community/issues/639/comments","events_url":"https://api.github.com/repos/kubernetes/community/issues/639/events","html_url":"https://github.com/kubernetes/community/pull/639","id":229846673,"number":639,"title":"Add support for `no_new_privs` via allowPrivilegeEscalation","user":{"login":"jessfraz","id":1445228,"avatar_url":"https://avatars1.githubusercontent.com/u/1445228?v=3","gravatar_id":"","url":"https://api.github.com/users/jessfraz","html_url":"https://github.com/jessfraz","followers_url":"https://api.github.com/users/jessfraz/followers","following_url":"https://api.github.com/users/jessfraz/following{/other_user}","gists_url":"https://api.github.com/users/jessfraz/gists{/gist_id}","starred_url":"https://api.github.com/users/jessfraz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jessfraz/subscriptions","organizations_url":"https://api.github.com/users/jessfraz/orgs","repos_url":"https://api.github.com/users/jessfraz/repos","events_url":"https://api.github.com/users/jessfraz/events{/privacy}","received_events_url":"https://api.github.com/users/jessfraz/received_events","type":"User","site_admin":false},"labels":[{"id":486032367,"url":"https://api.github.com/repos/kubernetes/community/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"c2e0c6","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2017-05-19T01:28:19Z","updated_at":"2017-05-25T18:22:53Z","closed_at":"2017-05-25T18:10:43Z","pull_request":{"url":"https://api.github.com/repos/kubernetes/community/pulls/639","html_url":"https://github.com/kubernetes/community/pull/639","diff_url":"https://github.com/kubernetes/community/pull/639.diff","patch_url":"https://github.com/kubernetes/community/pull/639.patch"},"body":"Carried from #180 by @xingzhou closes #180 \r\nAddresses kubernetes/kubernetes#38417\r\n\r\nAddresses comments left on #180 with regard to interactions of `no_new_privs` and other existing linux primitives, including suid binaries.\r\n\r\nChanges the proposal to default to `no_new_privs` being enabled, with exceptions documented so suid binaries and existing privileged/cap_sys_admin containers do not break.\r\n\r\nIt renames the initial proposal to `allowPrivilegeEscalation`\r\n\r\nAlso if anyone is worried about the whole \"defaulting to true\" thing, when we turned on seccomp by default in docker, I tested all the public Dockerfiles on github, we can do the same for this.... just to see what breaks ;)"},"comment":{"url":"https://api.github.com/repos/kubernetes/community/issues/comments/304085057","html_url":"https://github.com/kubernetes/community/pull/639#issuecomment-304085057","issue_url":"https://api.github.com/repos/kubernetes/community/issues/639","id":304085057,"user":{"login":"jessfraz","id":1445228,"avatar_url":"https://avatars1.githubusercontent.com/u/1445228?v=3","gravatar_id":"","url":"https://api.github.com/users/jessfraz","html_url":"https://github.com/jessfraz","followers_url":"https://api.github.com/users/jessfraz/followers","following_url":"https://api.github.com/users/jessfraz/following{/other_user}","gists_url":"https://api.github.com/users/jessfraz/gists{/gist_id}","starred_url":"https://api.github.com/users/jessfraz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jessfraz/subscriptions","organizations_url":"https://api.github.com/users/jessfraz/orgs","repos_url":"https://api.github.com/users/jessfraz/repos","events_url":"https://api.github.com/users/jessfraz/events{/privacy}","received_events_url":"https://api.github.com/users/jessfraz/received_events","type":"User","site_admin":false},"created_at":"2017-05-25T18:22:53Z","updated_at":"2017-05-25T18:22:53Z","body":"\\o/ code timeeee\n\nOn Thu, May 25, 2017 at 2:10 PM, Clayton Coleman <notifications@github.com>\nwrote:\n\n> Merged #639 <https://github.com/kubernetes/community/pull/639>.\n>\n> —\n> You are receiving this because you authored the thread.\n> Reply to this email directly, view it on GitHub\n> <https://github.com/kubernetes/community/pull/639#event-1097744412>, or mute\n> the thread\n> <https://github.com/notifications/unsubscribe-auth/ABYNbLwfLeaIoCUciFtWgJKOgCzUkQjJks5r9cQrgaJpZM4Nf-a1>\n> .\n>\n\n\n\n-- \n\n\nJessie Frazelle\n4096R / D4C4 DD60 0D66 F65A 8EFC  511E 18F3 685C 0022 BFF3\npgp.mit.edu <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>\n"}}
{"actor":{"display_login":"jessfraz"}}