{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13447","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13447/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13447/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13447/events","html_url":"https://github.com/kubernetes/kubernetes/pull/13447","id":104294451,"number":13447,"title":"Allow sharing the host PID namespace","user":{"login":"pweil-","id":5230419,"avatar_url":"https://avatars.githubusercontent.com/u/5230419?v=3","gravatar_id":"","url":"https://api.github.com/users/pweil-","html_url":"https://github.com/pweil-","followers_url":"https://api.github.com/users/pweil-/followers","following_url":"https://api.github.com/users/pweil-/following{/other_user}","gists_url":"https://api.github.com/users/pweil-/gists{/gist_id}","starred_url":"https://api.github.com/users/pweil-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pweil-/subscriptions","organizations_url":"https://api.github.com/users/pweil-/orgs","repos_url":"https://api.github.com/users/pweil-/repos","events_url":"https://api.github.com/users/pweil-/events{/privacy}","received_events_url":"https://api.github.com/users/pweil-/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/lgtm","name":"lgtm","color":"15dd18"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/needs-ok-to-merge","name":"needs-ok-to-merge","color":"ededed"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/XL","name":"size/XL","color":"ee5500"}],"state":"open","locked":false,"assignee":{"login":"derekwaynecarr","id":6233452,"avatar_url":"https://avatars.githubusercontent.com/u/6233452?v=3","gravatar_id":"","url":"https://api.github.com/users/derekwaynecarr","html_url":"https://github.com/derekwaynecarr","followers_url":"https://api.github.com/users/derekwaynecarr/followers","following_url":"https://api.github.com/users/derekwaynecarr/following{/other_user}","gists_url":"https://api.github.com/users/derekwaynecarr/gists{/gist_id}","starred_url":"https://api.github.com/users/derekwaynecarr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/derekwaynecarr/subscriptions","organizations_url":"https://api.github.com/users/derekwaynecarr/orgs","repos_url":"https://api.github.com/users/derekwaynecarr/repos","events_url":"https://api.github.com/users/derekwaynecarr/events{/privacy}","received_events_url":"https://api.github.com/users/derekwaynecarr/received_events","type":"User","site_admin":false},"milestone":null,"comments":50,"created_at":"2015-09-01T15:40:50Z","updated_at":"2015-09-16T08:55:47Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/13447","html_url":"https://github.com/kubernetes/kubernetes/pull/13447","diff_url":"https://github.com/kubernetes/kubernetes/pull/13447.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/13447.patch"},"body":"In the same vein as https://github.com/kubernetes/kubernetes/pull/12470 this allows super privileged containers to share the host's PID namespace by adding\r\n\r\n1.  A knob on the PodSpec to request enabling the feature\r\n1.  A sources list flag in the kubelet for allowable sources with checks in `canRunPod`\r\n1.  Docker support for setting the config and a TODO in rkt\r\n1.  An admission controller to prevent exec into a container with HostPID enabled\r\n\r\n@bgrant0607 - requested API change\r\n@liggitt @smarterclayton @erictune @simon3z @pmorie - PTAL\r\n@derekwaynecarr - admission addition\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/140676217","html_url":"https://github.com/kubernetes/kubernetes/pull/13447#issuecomment-140676217","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13447","id":140676217,"user":{"login":"k8s-merge-robot","id":13653959,"avatar_url":"https://avatars.githubusercontent.com/u/13653959?v=3","gravatar_id":"","url":"https://api.github.com/users/k8s-merge-robot","html_url":"https://github.com/k8s-merge-robot","followers_url":"https://api.github.com/users/k8s-merge-robot/followers","following_url":"https://api.github.com/users/k8s-merge-robot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-merge-robot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-merge-robot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-merge-robot/subscriptions","organizations_url":"https://api.github.com/users/k8s-merge-robot/orgs","repos_url":"https://api.github.com/users/k8s-merge-robot/repos","events_url":"https://api.github.com/users/k8s-merge-robot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-merge-robot/received_events","type":"User","site_admin":false},"created_at":"2015-09-16T08:55:47Z","updated_at":"2015-09-16T08:55:47Z","body":"The author of this PR is not in the whitelist for merge, can one of the admins add the 'ok-to-merge' label?"}}