{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14513","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14513/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14513/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14513/events","html_url":"https://github.com/kubernetes/kubernetes/pull/14513","id":108196102,"number":14513,"title":"WIP Add Cluster Wide SELinux Capability","user":{"login":"swagiaal","id":770962,"avatar_url":"https://avatars.githubusercontent.com/u/770962?v=3","gravatar_id":"","url":"https://api.github.com/users/swagiaal","html_url":"https://github.com/swagiaal","followers_url":"https://api.github.com/users/swagiaal/followers","following_url":"https://api.github.com/users/swagiaal/following{/other_user}","gists_url":"https://api.github.com/users/swagiaal/gists{/gist_id}","starred_url":"https://api.github.com/users/swagiaal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/swagiaal/subscriptions","organizations_url":"https://api.github.com/users/swagiaal/orgs","repos_url":"https://api.github.com/users/swagiaal/repos","events_url":"https://api.github.com/users/swagiaal/events{/privacy}","received_events_url":"https://api.github.com/users/swagiaal/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/M","name":"size/M","color":"eebb00"}],"state":"open","locked":false,"assignee":{"login":"thockin","id":5595220,"avatar_url":"https://avatars.githubusercontent.com/u/5595220?v=3","gravatar_id":"","url":"https://api.github.com/users/thockin","html_url":"https://github.com/thockin","followers_url":"https://api.github.com/users/thockin/followers","following_url":"https://api.github.com/users/thockin/following{/other_user}","gists_url":"https://api.github.com/users/thockin/gists{/gist_id}","starred_url":"https://api.github.com/users/thockin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thockin/subscriptions","organizations_url":"https://api.github.com/users/thockin/orgs","repos_url":"https://api.github.com/users/thockin/repos","events_url":"https://api.github.com/users/thockin/events{/privacy}","received_events_url":"https://api.github.com/users/thockin/received_events","type":"User","site_admin":false},"milestone":null,"comments":19,"created_at":"2015-09-24T19:20:16Z","updated_at":"2015-09-25T21:01:11Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/14513","html_url":"https://github.com/kubernetes/kubernetes/pull/14513","diff_url":"https://github.com/kubernetes/kubernetes/pull/14513.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/14513.patch"},"body":"- Add flag to api-server to enable capability\r\n- Ensure pod spec does not contain SELinux context if capability is\r\n  not on\r\n- Add flag to kubelet to enable capability\r\n- Ensure node has SELinux enabled if capability is on.\r\n- Ensure that pod spec does not contain SELinux context if capability\r\n  is not on."},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/143353847","html_url":"https://github.com/kubernetes/kubernetes/pull/14513#issuecomment-143353847","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14513","id":143353847,"user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"created_at":"2015-09-25T21:01:11Z","updated_at":"2015-09-25T21:01:11Z","body":"@smarterclayton so, under DTRT, just accept the pods and run them as you would normally with SELinux not enabled?"}}