{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/4954","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/4954/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/4954/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/4954/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/4954","id":59542361,"number":4954,"title":"SecretVolumeSource and namespace validations / defaults","user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/priority/P3","name":"priority/P3","color":"fef2c0"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/team/UX","name":"team/UX","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":23,"created_at":"2015-03-02T20:19:07Z","updated_at":"2015-03-10T21:33:28Z","closed_at":null,"body":"We have a couple nits to work out with `SecretVolumeSource`:\r\n\r\n1.  Having to specify the namespace for the target secret is cumbersome for use-cases where you want a pod template to be namespace-agnostic; it would be convenient to default the namespace for the secret to the namespace the pod is created in.\r\n2.  Currently there's no validation to prevent you from referring to a secret in another namespace from a `SecretVolumeSource`; should there be?  At least until we have a strong cross-namespace story?\r\n\r\nI know @liggitt has some opinions about this."},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/comments/78153171","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/4954#issuecomment-78153171","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/4954","id":78153171,"user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"created_at":"2015-03-10T21:33:28Z","updated_at":"2015-03-10T21:33:28Z","body":"Making it a reference isn't terrible (strong typing can be good), it's just we should be doubly certain how it is used.  \r\n\r\n\r\n> On Mar 10, 2015, at 2:57 PM, Paul Morie <notifications@github.com> wrote:\r\n> \r\n> @erictune @derekwaynecarr @liggitt Once #5122 goes in we can resolve this. I suggest:\r\n> \r\n> We change the SecretVolumeSource to:\r\n> \r\n> type SecretVolumeSource struct {\r\n>   SecretName string\r\n> }\r\n> —\r\n> Reply to this email directly or view it on GitHub.\r\n> \r\n"}}