{"action":"created","comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/comments/124442272","pull_request_review_id":46729760,"id":124442272,"diff_hunk":"@@ -0,0 +1,191 @@\n+---\n+assignees:\n+- smarterclayton\n+title: Securing a Cluster\n+---\n+\n+* TOC\n+{:toc}\n+\n+This document covers topics related to protecting a cluster from accidental or malicious access\n+and provides recommendations on overall security.\n+\n+## Controlling access to the Kubernetes API\n+\n+As Kubernetes is entirely API driven, controlling and limiting who can access the cluster and what actions\n+they are allowed to perform is the first line of defense.\n+\n+### Use Transport Level Security (TLS) for all API traffic\n+\n+Kubernetes expects that all API communication in the cluster is encrypted by default with TLS, and the\n+majority of installation methods will allow the necessary certificates to be created and distributed to \n+the cluster components. Note that some components and installation methods may enable local ports over \n+HTTP and administrators should familiarize themselves with the settings of each component to identify \n+potentially unsecured traffic.\n+\n+### API Authentication\n+\n+Choose an authentication mechanism for the API servers to use that matches the common access patterns \n+when you install a cluster. For instance, small single user clusters may wish to use a simple certificate \n+or static Bearer token approach. Larger clusters may wish to integrate an existing or OIDC or LDAP server that\n+allow users to be subdivided into groups. \n+\n+All API clients must be authenticated, even those that are part of the infrastructure like nodes,\n+proxies, the scheduler, and volume plugins. These clients are typically [service accounts](/docs/admin/service-accounts-admin.md) and are created automatically at cluster startup.\n+\n+Consult the [authentication reference document](/docs/admin/authentication.md) for more information.\n+\n+### API Authorization\n+\n+Once authenticated, every API call is also expected to pass an authorization check. Kubernetes ships an \n+integrated Role-Based Access Control (RBAC) component that matches an incoming user or group to a\n+set of permissions bundled into roles. These permissions combine verbs (get, create, delete) with\n+resources (pods, services, nodes) and can be namespace or cluster scoped. A set of out of the box\n+roles are provided that offer reasonable default separation of responsibilty depending on what actions\n+a client might want to perform.\n+\n+As with authentication, simple and broad roles may be appropriate for smaller clusters, but as\n+more users interact with the cluster, it may become necessary to separate teams into separate\n+namespaces with more limited roles.\n+\n+With authorization it is important to understand how updates on one object may cause actions in \n+other places. For instance, a user may not be able to create pods directly, but allowing them to \n+create a deployment (which creates pods on their behalf) will let them create those pods \n+indirectly. Likewise deleting a node from the API will result in the pods scheduled to that node \n+being terminated and recreated on other nodes. The out of the box roles represent a compromise\n+between flexibility and the common use cases, but more limited roles should be carefully reviewed","path":"docs/tasks/administer-cluster/securing-a-cluster.md","position":56,"original_position":56,"commit_id":"f8f3ec1ca4b1949beb64bed90bb10f5107ce18b0","original_commit_id":"f8f3ec1ca4b1949beb64bed90bb10f5107ce18b0","user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars3.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"body":"I'm not sure what this is saying... is this talking about roles they create themselves? I think it would be good to mention that they are able to make roles specific to their use cases if the out-of-box ones don't meet their needs.","created_at":"2017-06-28T02:50:41Z","updated_at":"2017-06-28T02:50:41Z","html_url":"https://github.com/kubernetes/kubernetes.github.io/pull/4181#discussion_r124442272","pull_request_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181","_links":{"self":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/comments/124442272"},"html":{"href":"https://github.com/kubernetes/kubernetes.github.io/pull/4181#discussion_r124442272"},"pull_request":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181"}}},"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181","id":127306474,"html_url":"https://github.com/kubernetes/kubernetes.github.io/pull/4181","diff_url":"https://github.com/kubernetes/kubernetes.github.io/pull/4181.diff","patch_url":"https://github.com/kubernetes/kubernetes.github.io/pull/4181.patch","issue_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/4181","number":4181,"state":"open","locked":false,"title":"Encrypting secrets at rest and cluster security guide","user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars3.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"body":"Provides documentation for kubernetes/features#92 and a general security guide to link to it.\n\n<!-- Reviewable:start -->\n---\nThis change is [<img src=\"https://reviewable.kubernetes.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/>](https://reviewable.kubernetes.io/reviews/kubernetes/kubernetes.github.io/4181)\n<!-- Reviewable:end -->\n","created_at":"2017-06-23T23:49:18Z","updated_at":"2017-06-28T02:50:41Z","closed_at":null,"merged_at":null,"merge_commit_sha":"9cd98251f5973a5782c98760054cf6c0da9db75b","assignee":{"login":"chenopis","id":24798125,"avatar_url":"https://avatars2.githubusercontent.com/u/24798125?v=3","gravatar_id":"","url":"https://api.github.com/users/chenopis","html_url":"https://github.com/chenopis","followers_url":"https://api.github.com/users/chenopis/followers","following_url":"https://api.github.com/users/chenopis/following{/other_user}","gists_url":"https://api.github.com/users/chenopis/gists{/gist_id}","starred_url":"https://api.github.com/users/chenopis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chenopis/subscriptions","organizations_url":"https://api.github.com/users/chenopis/orgs","repos_url":"https://api.github.com/users/chenopis/repos","events_url":"https://api.github.com/users/chenopis/events{/privacy}","received_events_url":"https://api.github.com/users/chenopis/received_events","type":"User","site_admin":false},"assignees":[{"login":"chenopis","id":24798125,"avatar_url":"https://avatars2.githubusercontent.com/u/24798125?v=3","gravatar_id":"","url":"https://api.github.com/users/chenopis","html_url":"https://github.com/chenopis","followers_url":"https://api.github.com/users/chenopis/followers","following_url":"https://api.github.com/users/chenopis/following{/other_user}","gists_url":"https://api.github.com/users/chenopis/gists{/gist_id}","starred_url":"https://api.github.com/users/chenopis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chenopis/subscriptions","organizations_url":"https://api.github.com/users/chenopis/orgs","repos_url":"https://api.github.com/users/chenopis/repos","events_url":"https://api.github.com/users/chenopis/events{/privacy}","received_events_url":"https://api.github.com/users/chenopis/received_events","type":"User","site_admin":false}],"requested_reviewers":[{"login":"destijl","id":1291767,"avatar_url":"https://avatars3.githubusercontent.com/u/1291767?v=3","gravatar_id":"","url":"https://api.github.com/users/destijl","html_url":"https://github.com/destijl","followers_url":"https://api.github.com/users/destijl/followers","following_url":"https://api.github.com/users/destijl/following{/other_user}","gists_url":"https://api.github.com/users/destijl/gists{/gist_id}","starred_url":"https://api.github.com/users/destijl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/destijl/subscriptions","organizations_url":"https://api.github.com/users/destijl/orgs","repos_url":"https://api.github.com/users/destijl/repos","events_url":"https://api.github.com/users/destijl/events{/privacy}","received_events_url":"https://api.github.com/users/destijl/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/milestones/7","html_url":"https://github.com/kubernetes/kubernetes.github.io/milestone/7","labels_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/milestones/7/labels","id":2508569,"number":7,"title":"1.7","description":null,"creator":{"login":"chenopis","id":24798125,"avatar_url":"https://avatars2.githubusercontent.com/u/24798125?v=3","gravatar_id":"","url":"https://api.github.com/users/chenopis","html_url":"https://github.com/chenopis","followers_url":"https://api.github.com/users/chenopis/followers","following_url":"https://api.github.com/users/chenopis/following{/other_user}","gists_url":"https://api.github.com/users/chenopis/gists{/gist_id}","starred_url":"https://api.github.com/users/chenopis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chenopis/subscriptions","organizations_url":"https://api.github.com/users/chenopis/orgs","repos_url":"https://api.github.com/users/chenopis/repos","events_url":"https://api.github.com/users/chenopis/events{/privacy}","received_events_url":"https://api.github.com/users/chenopis/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":45,"state":"open","created_at":"2017-05-08T22:12:23Z","updated_at":"2017-06-27T23:42:50Z","due_on":null,"closed_at":null},"commits_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181/commits","review_comments_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181/comments","review_comment_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/4181/comments","statuses_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/statuses/f8f3ec1ca4b1949beb64bed90bb10f5107ce18b0","head":{"label":"smarterclayton:secrets","ref":"secrets","sha":"f8f3ec1ca4b1949beb64bed90bb10f5107ce18b0","user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars3.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"repo":{"id":61235424,"name":"kubernetes.github.io","full_name":"smarterclayton/kubernetes.github.io","owner":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars3.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/smarterclayton/kubernetes.github.io","description":"Website/documentation repo","fork":true,"url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io","forks_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/forks","keys_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/teams","hooks_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/hooks","issue_events_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/events","assignees_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/tags","blobs_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/languages","stargazers_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/stargazers","contributors_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/contributors","subscribers_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/subscribers","subscription_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/subscription","commits_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/merges","archive_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/downloads","issues_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/labels{/name}","releases_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/smarterclayton/kubernetes.github.io/deployments","created_at":"2016-06-15T19:34:04Z","updated_at":"2016-06-15T19:34:07Z","pushed_at":"2017-06-27T19:41:58Z","git_url":"git://github.com/smarterclayton/kubernetes.github.io.git","ssh_url":"git@github.com:smarterclayton/kubernetes.github.io.git","clone_url":"https://github.com/smarterclayton/kubernetes.github.io.git","svn_url":"https://github.com/smarterclayton/kubernetes.github.io","homepage":null,"size":52784,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"kubernetes:release-1.7","ref":"release-1.7","sha":"7152ca37f8d47e884e130c8c8a267297f6c8d1cd","user":{"login":"kubernetes","id":13629408,"avatar_url":"https://avatars1.githubusercontent.com/u/13629408?v=3","gravatar_id":"","url":"https://api.github.com/users/kubernetes","html_url":"https://github.com/kubernetes","followers_url":"https://api.github.com/users/kubernetes/followers","following_url":"https://api.github.com/users/kubernetes/following{/other_user}","gists_url":"https://api.github.com/users/kubernetes/gists{/gist_id}","starred_url":"https://api.github.com/users/kubernetes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubernetes/subscriptions","organizations_url":"https://api.github.com/users/kubernetes/orgs","repos_url":"https://api.github.com/users/kubernetes/repos","events_url":"https://api.github.com/users/kubernetes/events{/privacy}","received_events_url":"https://api.github.com/users/kubernetes/received_events","type":"Organization","site_admin":false},"repo":{"id":51478266,"name":"kubernetes.github.io","full_name":"kubernetes/kubernetes.github.io","owner":{"login":"kubernetes","id":13629408,"avatar_url":"https://avatars1.githubusercontent.com/u/13629408?v=3","gravatar_id":"","url":"https://api.github.com/users/kubernetes","html_url":"https://github.com/kubernetes","followers_url":"https://api.github.com/users/kubernetes/followers","following_url":"https://api.github.com/users/kubernetes/following{/other_user}","gists_url":"https://api.github.com/users/kubernetes/gists{/gist_id}","starred_url":"https://api.github.com/users/kubernetes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubernetes/subscriptions","organizations_url":"https://api.github.com/users/kubernetes/orgs","repos_url":"https://api.github.com/users/kubernetes/repos","events_url":"https://api.github.com/users/kubernetes/events{/privacy}","received_events_url":"https://api.github.com/users/kubernetes/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/kubernetes/kubernetes.github.io","description":"Kubernetes website and documentation repo: ","fork":false,"url":"https://api.github.com/repos/kubernetes/kubernetes.github.io","forks_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/forks","keys_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/teams","hooks_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/hooks","issue_events_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/events","assignees_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/tags","blobs_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/languages","stargazers_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/stargazers","contributors_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/contributors","subscribers_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/subscribers","subscription_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/subscription","commits_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/merges","archive_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/downloads","issues_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/labels{/name}","releases_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/kubernetes/kubernetes.github.io/deployments","created_at":"2016-02-10T22:46:48Z","updated_at":"2017-06-27T07:17:39Z","pushed_at":"2017-06-28T01:54:45Z","git_url":"git://github.com/kubernetes/kubernetes.github.io.git","ssh_url":"git@github.com:kubernetes/kubernetes.github.io.git","clone_url":"https://github.com/kubernetes/kubernetes.github.io.git","svn_url":"https://github.com/kubernetes/kubernetes.github.io","homepage":"https://kubernetes.github.io","size":58176,"stargazers_count":195,"watchers_count":195,"language":"HTML","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":1366,"mirror_url":null,"open_issues_count":462,"forks":1366,"open_issues":462,"watchers":195,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181"},"html":{"href":"https://github.com/kubernetes/kubernetes.github.io/pull/4181"},"issue":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/4181"},"comments":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/issues/4181/comments"},"review_comments":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181/comments"},"review_comment":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/pulls/4181/commits"},"statuses":{"href":"https://api.github.com/repos/kubernetes/kubernetes.github.io/statuses/f8f3ec1ca4b1949beb64bed90bb10f5107ce18b0"}}}}
{"actor":{"display_login":"liggitt"}}