{"action":"closed","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/9626","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/9626/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/9626/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/9626/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/9626","id":87127380,"number":9626,"title":"make allow_privileged configurable at cluster startup time (providers using salt)","user":{"login":"pwais","id":218145,"avatar_url":"https://avatars.githubusercontent.com/u/218145?v=3","gravatar_id":"","url":"https://api.github.com/users/pwais","html_url":"https://github.com/pwais","followers_url":"https://api.github.com/users/pwais/followers","following_url":"https://api.github.com/users/pwais/following{/other_user}","gists_url":"https://api.github.com/users/pwais/gists{/gist_id}","starred_url":"https://api.github.com/users/pwais/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pwais/subscriptions","organizations_url":"https://api.github.com/users/pwais/orgs","repos_url":"https://api.github.com/users/pwais/repos","events_url":"https://api.github.com/users/pwais/events{/privacy}","received_events_url":"https://api.github.com/users/pwais/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/area/install","name":"area/install","color":"d4c5f9"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/kind/enhancement","name":"kind/enhancement","color":"c7def8"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/priority/P2","name":"priority/P2","color":"fbca04"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/team/cluster-lifecycle","name":"team/cluster-lifecycle","color":"d2b48c"}],"state":"closed","locked":false,"assignee":{"login":"zmerlynn","id":4942464,"avatar_url":"https://avatars.githubusercontent.com/u/4942464?v=3","gravatar_id":"","url":"https://api.github.com/users/zmerlynn","html_url":"https://github.com/zmerlynn","followers_url":"https://api.github.com/users/zmerlynn/followers","following_url":"https://api.github.com/users/zmerlynn/following{/other_user}","gists_url":"https://api.github.com/users/zmerlynn/gists{/gist_id}","starred_url":"https://api.github.com/users/zmerlynn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zmerlynn/subscriptions","organizations_url":"https://api.github.com/users/zmerlynn/orgs","repos_url":"https://api.github.com/users/zmerlynn/repos","events_url":"https://api.github.com/users/zmerlynn/events{/privacy}","received_events_url":"https://api.github.com/users/zmerlynn/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2015-06-10T22:19:52Z","updated_at":"2015-07-23T05:34:16Z","closed_at":"2015-07-23T05:34:16Z","body":"For providers that use salt, currently the way to enable privileged containers is to check out k8s from source, manually edit a salt config, build tarballs (which is very slow, even just `make quick-release`), and start.  I propose introducing an env var so that this property can be toggled at cluster startup time on a k8s binary release.  \r\n\r\nI have a draft of said changed here (see top portion, this branch includes some unrelated changes):\r\n * https://github.com/GoogleCloudPlatform/kubernetes/compare/master...pwais:pwais_run_proxy_on_master_and_make_priv_nicer_0.18.1\r\n\r\nDoes this sound like a good idea?  If so, I'd be happy to put together a pull request based on my draft if that helps."}}