{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/13210","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/13210/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/13210/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/13210/events","html_url":"https://github.com/openshift/origin/pull/13210","id":211603637,"number":13210,"title":"WIP - Allow pods and other Kube objects to easily reference imagestreams","user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars3.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-03-03T06:09:08Z","updated_at":"2017-03-05T15:45:22Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/13210","html_url":"https://github.com/openshift/origin/pull/13210","diff_url":"https://github.com/openshift/origin/pull/13210.diff","patch_url":"https://github.com/openshift/origin/pull/13210.patch"},"body":"Allow image streams that are flagged a certain way to force image names\nlike NAME and NAME:TAG (matching a real ISTag in the current namespace) on\npods to be resolved.  This is opt in to avoid breaking existing users, but\njudiciously applied would allow a user doing:\n\n    oc run --image=mysql mysql\n\nto get the image stream tag \"mysql:latest\" resolved on their pods.\n\nFurther exploration is required, but supporting this for RS and RC would\nmean that Kube deployments *automatically* benefit from image stream tags,\nAND automatically lock their images to tight version specs.\n\nCross-namespace security here has to be considered carefully. It probably\ncan't be done without the willing consent of the namespace owner (which\nrules out openshift/ruby) because a malicious actor could intercept pods\nrunning against \"randomnamespace/foo\" on the hub just by taking\n\"randomnamespace\". NS owner would have to signal they want that somehow,\nwhich is too complex for now."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/284237451","html_url":"https://github.com/openshift/origin/pull/13210#issuecomment-284237451","issue_url":"https://api.github.com/repos/openshift/origin/issues/13210","id":284237451,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars1.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2017-03-05T15:45:22Z","updated_at":"2017-03-05T15:45:22Z","body":"continuous-integration/openshift-jenkins/test Running (https://ci.openshift.redhat.com/jenkins/job/test_pull_requests_origin_future/838/) (Base Commit: 2261a32dba929829fe406863aaa995223dbcb23a)"}}
{"actor":{"display_login":"openshift-bot"}}