{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8379","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8379/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8379/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8379/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/8379","id":77099133,"number":8379,"title":"Secrets/service accounts in static pods","user":{"login":"jimmidyson","id":464659,"avatar_url":"https://avatars.githubusercontent.com/u/464659?v=3","gravatar_id":"","url":"https://api.github.com/users/jimmidyson","html_url":"https://github.com/jimmidyson","followers_url":"https://api.github.com/users/jimmidyson/followers","following_url":"https://api.github.com/users/jimmidyson/following{/other_user}","gists_url":"https://api.github.com/users/jimmidyson/gists{/gist_id}","starred_url":"https://api.github.com/users/jimmidyson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimmidyson/subscriptions","organizations_url":"https://api.github.com/users/jimmidyson/orgs","repos_url":"https://api.github.com/users/jimmidyson/repos","events_url":"https://api.github.com/users/jimmidyson/events{/privacy}","received_events_url":"https://api.github.com/users/jimmidyson/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/priority/P2","name":"priority/P2","color":"fbca04"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/team/node","name":"team/node","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2015-05-16T18:31:17Z","updated_at":"2015-08-06T21:55:28Z","closed_at":null,"body":"Are secrets or service accounts supported in static pods? It's quite conceivable that static pods will require talking to the API server & providing credentials to do so via secrets or service accounts is the best way to do this.\r\n\r\nA particular use case that I'm working on is logging. This requires a per-node pod to capture the container logs, enrich with Kubernetes metadata (labels, etc) which is only available from the API server, before storing via a standard Kubernetes service. See #8001 for more details.\r\n\r\nI've discussed this with @pmorie & he has some other use cases for this, one being the ability to run the kubelet itself in a pod.\r\n\r\n/cc @satnam6502 "},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/comments/128520546","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/8379#issuecomment-128520546","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8379","id":128520546,"user":{"login":"AnanyaKumar","id":1862850,"avatar_url":"https://avatars.githubusercontent.com/u/1862850?v=3","gravatar_id":"","url":"https://api.github.com/users/AnanyaKumar","html_url":"https://github.com/AnanyaKumar","followers_url":"https://api.github.com/users/AnanyaKumar/followers","following_url":"https://api.github.com/users/AnanyaKumar/following{/other_user}","gists_url":"https://api.github.com/users/AnanyaKumar/gists{/gist_id}","starred_url":"https://api.github.com/users/AnanyaKumar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AnanyaKumar/subscriptions","organizations_url":"https://api.github.com/users/AnanyaKumar/orgs","repos_url":"https://api.github.com/users/AnanyaKumar/repos","events_url":"https://api.github.com/users/AnanyaKumar/events{/privacy}","received_events_url":"https://api.github.com/users/AnanyaKumar/received_events","type":"User","site_admin":false},"created_at":"2015-08-06T21:55:28Z","updated_at":"2015-08-06T21:55:28Z","body":"I think eventually we hope to support privileged containers in Daemon as well :)"}}